Posts made by scroak_6473

Hi All,

After posting this I managed to fix the issue by mapping the /etc/localtime file on the host to the container using a volume mount. Like this:

volumes:
      - "/etc/localtime:/etc/localtime"

However it would be nice if timezone could be specified using a "TZ:" environment variable.

However I do believe you would need to include the "tzdata" application in the ProGet container image to make that work. Would that be possible?

Thanks

Simon

Hi Support,

Wondering if there is a way to set the timezone of the ProGet container when running on docker?

I tried to use the following two environment variables in my docker swarm file but they don't seem to work:

  SET_CONTAINER_TIMEZONE: "true"
  CONTAINER_TIMEZONE: America/Vancouver

The docker container shows UTC as it's current timezone:

Thanks

Simon

Hi There,

I noticed there is a new "Package Usage" function in ProGet V5.3.5:

I'm using this on my Chocolatey feed, how is this usage information meant to be added? (the two rows in the screenshot above where added manually)

Is there an API for adding this usage information? I'm currently using the "Package deployment API" to record this same information but would be nice to record this info under "Package Usage" instead.

Thanks

Simon

Sure @rhessinger

Extensions:

Manage Feed:

Thanks

Simon

Hi @rhessinger

Removed and re-added but the same problem persists. Even updated to v5.3.5 and issue is the same.

Is there any other logging I can get for you? Any way I can see what calls are being made to Clair?

Thanks

Simon

Hi @rhessinger

Just Clair

Simon

Hi @rhessinger

Sorry I should have included that I do have the https:// specified.

Thanks

Simon

Hi @rhessinger

I have upgraded Proget to 5.3.4 (Build 4) but the problem still persists.

I am running Clair v2.1.2 and postgres v9.6 as suggested here: https://docs.inedo.com/docs/proget/compliance/clair

From the clair command line i can ping the public hostname of the ProGet instance:

For a bit of additional background Clair and the Postgres DB is running on it own separate overlay network, ProGet is a member of both this network and a public network. So for ProGet to communicate with Clair it can use a "service discovery" hostname of "ClairApp", Clair can then communicate with ProGet using either its service discovery name of "server" or using the public hostname that is specified in the "Web.BaseUrl" advance setting "proget.qa.xxxx.xxxx". This is what the above ping is communicating with.

Let me know what I can do next.

Thanks

Simon

Hi There,

I've installed the Clair extension into my ProGet 5.2.3 docker container and configured a Vulerablity Source as follows:

I can run the following command from the ProGet container commandline:

 curl http://clairapp:6060/v1/namespaces

And get the following result, so I know Clair is running correctly and that the ProGet container can communicate successfully with the Clair API endpoint.

{"Namespaces":[{"Name":"alpine:v3.7","VersionFormat":"dpkg"},{"Name":"alpine:v3.8","VersionFormat":"dpkg"},{"Name":"alpine:v3.10","VersionFormat":"dpkg"},{"Name":"alpine:v3.11","VersionFormat":"dpkg"},{"Name":"alpine:v3.3","VersionFormat":"dpkg"},{"Name":"alpine:v3.5","VersionFormat":"dpkg"},{"Name":"alpine:v3.6","VersionFormat":"dpkg"},{"Name":"alpine:v3.9","VersionFormat":"dpkg"},{"Name":"alpine:v3.4","VersionFormat":"dpkg"},{"Name":"amzn:2","VersionFormat":"rpm"},{"Name":"amzn:2018.03","VersionFormat":"rpm"},{"Name":"debian:unstable","VersionFormat":"dpkg"},{"Name":"debian:8","VersionFormat":"dpkg"},{"Name":"debian:9","VersionFormat":"dpkg"},{"Name":"debian:11","VersionFormat":"dpkg"},{"Name":"debian:10","VersionFormat":"dpkg"},{"Name":"ubuntu:12.10","VersionFormat":"dpkg"},{"Name":"ubuntu:16.04","VersionFormat":"dpkg"},{"Name":"ubuntu:15.10","VersionFormat":"dpkg"},{"Name":"ubuntu:19.04","VersionFormat":"dpkg"},{"Name":"ubuntu:17.10","VersionFormat":"dpkg"},{"Name":"ubuntu:18.04","VersionFormat":"dpkg"},{"Name":"ubuntu:14.04","VersionFormat":"dpkg"},{"Name":"ubuntu:17.04","VersionFormat":"dpkg"},{"Name":"ubuntu:16.10","VersionFormat":"dpkg"},{"Name":"ubuntu:12.04","VersionFormat":"dpkg"},{"Name":"ubuntu:14.10","VersionFormat":"dpkg"},{"Name":"ubuntu:15.04","VersionFormat":"dpkg"},{"Name":"ubuntu:18.10","VersionFormat":"dpkg"},{"Name":"ubuntu:13.04","VersionFormat":"dpkg"},{"Name":"oracle:6","VersionFormat":"rpm"},{"Name":"oracle:7","VersionFormat":"rpm"},{"Name":"oracle:5","VersionFormat":"rpm"},{"Name":"oracle:8","VersionFormat":"rpm"}]}

However when I run the VulnerabilityDownloader Scheduled Task manually by pressing this:

I get the following error:

ERROR: 2020-06-18 19:25:52Z - Unhandled exception: System.InvalidCastException: Specified cast is not valid.
  at Inedo.ProGet.ScheduledTasks.General.VulnerabilityDownloaderScheduledTask.ExecuteAsync (Inedo.ProGet.ScheduledTasks.ScheduledTaskContext context) [0x00133] in <5c992ee154394e758c7258b17e1dbffb>:0 
  at Inedo.ProGet.Service.Executions.ActiveScheduledTaskExecution.ExecuteAsync () [0x00182] in <a7f73bf1cfd3422e88d7232a4ec2eaf3>:0 

Ultimately I don't believe the ProGet to Clair connection is really working, is there any way I can verify this?

One of the main reasons I believe this is because when I issue the CURL Command above I get a Clair log that reads:

{"Event":"Handled HTTP request","Level":"info","Location":"router.go:57","Time":"2020-06-18 19:35:53.616609","elapsed time":1216718,"method":"GET","remote addr":"10.0.5.4:42524","request uri":"/v1/namespaces","status":"200"}

However I don't get any such logs from ProGet attempting to use the Clair API.

Thanks in advance

Simon

Hi,

I'm running ProGet as a container on my docker swarm using a Stack File. I have it all setup and running but would like to include the use of a docker HEALTHCHECK to ensure the application is running as normal.

I'd like to use the /health API endpoint included with ProGet and documented here: https://docs.inedo.com/docs/proget/reference/api/health to query the

"serviceStatus": "OK"

attribute.

Does anyone have any experience doing this? I'd love to do a Curl request and pipe the output of that into "jq" but it doesn't appear that "jq" is installed on the docker image. Do you know if there are any plans to change that?

Alternatively is there any way to pass query parameters to the /health endpoint? For example:

/health?serviceStatus

And it just return "OK"

I'm running ProGet V5.2.30

Thanks

Simon

@rhessinger Thanks! Will this fix also make it into the 5.3 release?

Thanks

Simon

ProGet version 5.2.30 running as a docker image.

Thanks

Simon

Hi Everyone,

I'm having a specific issue with the Feed Management API. I'm unable to CREATE new variables on an existing feed using :

api/management/feeds/update/{feed-name}

For the purposes of these screenshots I'm using the Boomerang (Chrome Plugin) like this, although the same thing happens with my PowerShell script.
The API key I am using is impersonating the "Admin" user so it shouldn't be permissions issue.

Get request:

Get response:

Update post request:

Update post Response returns 201 response code but "Var3" isn't added:

Updating an existing variable works:

Update response:

Any ideas? Is this a known bug?

Thanks in advance.
Simon

Adding an "Impersonate user" fixed this issue.

Thanks for all your help!

Simon

Hi Thanks for the response,

I now get this:

User not authorized to download packages for feed Software-Test.

My API access looks like this:

Yes this is ProGet for Linux, I'm actually running the docker image available here:
https://hub.docker.com/r/inedo/proget/builds

Could you send me a link to the related error? Is there a fix?

Thanks

Simon

Hey Guys,

I'm using ProGet to host a Chocolatey package feed.

Everything is working great except I'm trying to use the package-deployment api to record when a package has been deployed to a particular machine.

I'm using the following code in my chocolatey package install powershell script as described here (https://docs.inedo.com/docs/proget/reference/api/package-deployment-api)

$data = @{
    FeedName="Software-Test"
    Application="Chocolatey"
    Description="Installed by Chocolatey"
    Target="$env:COMPUTERNAME"
    PackageName="$env:ChocolateyPackageName"
    Version="$env:ChocolateyPackageVersion"
}

$headers = @{
    'content-type' = 'application/json'
    'X-ApiKey' = '{hidden key}'
}
Invoke-RestMethod -Method Post -Uri 'https://{proget url}/api/package-deployment/' -Body ($data | ConvertTo-JSON) -Headers $headers

But the API is returning the message below which is making the package install script fail:

ERROR: Cannot access a disposed object.
Object name: 'Stream has been closed'.

This also happens using a stand alone SOAP client (boomerang).

I'm getting the following message in the proget admin diagnostic center:

With the following stack trace:

System.ObjectDisposedException: Cannot access a disposed object.
Object name: 'Stream has been closed'.
at System.Web.IntPtrStream.Read (System.Byte[] buffer, System.Int32 offset, System.Int32 count) [0x00043] in <b4f0b153c02f4f0588d3f7549d75281b>:0
at System.IO.Stream+<>c.<BeginReadInternal>b__40_0 (System.Object <p0>) [0x0000b] in <c453bf849bb84e719dbec0475e99db95>:0
at System.Threading.Tasks.Task`1[TResult].InnerInvoke () [0x0002b] in <c453bf849bb84e719dbec0475e99db95>:0
at System.Threading.Tasks.Task.Execute () [0x00000] in <c453bf849bb84e719dbec0475e99db95>:0
--- End of stack trace from previous location where exception was thrown ---

at System.IO.Stream.EndRead (System.IAsyncResult asyncResult) [0x0004d] in <c453bf849bb84e719dbec0475e99db95>:0
at System.IO.Stream+<>c.<BeginEndReadAsync>b__45_1 (System.IO.Stream stream, System.IAsyncResult asyncResult) [0x00000] in <c453bf849bb84e719dbec0475e99db95>:0
at System.Threading.Tasks.TaskFactory`1+FromAsyncTrimPromise`1[TResult,TInstance].Complete (TInstance thisRef, System.Func`3[T1,T2,TResult] endMethod, System.IAsyncResult asyncResult, System.Boolean requiresSynchronization) [0x00000] in <c453bf849bb84e719dbec0475e99db95>:0
--- End of stack trace from previous location where exception was thrown ---

at System.IO.Stream.CopyToAsyncInternal (System.IO.Stream destination, System.Int32 bufferSize, System.Threading.CancellationToken cancellationToken) [0x000a6] in <c453bf849bb84e719dbec0475e99db95>:0
at Inedo.Web.Handlers.Api.ApiKeySecuredHandler.LogApiAccess (System.Web.HttpRequest request, System.Byte[] responseBody, Inedo.Web.Handlers.Api.ApiKeySecuredHandler+WrappedApiKey apiKey, System.Int32 responseCode) [0x00154] in <552cf13df3c1427b87b305d8f051c033>:0
at Inedo.Web.Handlers.Api.ApiKeySecuredHandler.ProcessRequestInternalAsync (System.Web.HttpContext context) [0x004d7] in <552cf13df3c1427b87b305d8f051c033>:0
at Inedo.Web.Handlers.Api.StandardApiHandler.ProcessRequestAsync (System.Web.HttpContext context) [0x0006e] in <552cf13df3c1427b87b305d8f051c033>:0

Any ideas on how to fix this? I'm running ProGet 5.2.30

Thanks
Simon