fix(201-mono): disable crowdsec-update-hub.service — chronic hub update failure - #42
Draft
phonkd wants to merge 1 commit into
Draft
fix(201-mono): disable crowdsec-update-hub.service — chronic hub update failure#42phonkd wants to merge 1 commit into
phonkd wants to merge 1 commit into
Conversation
…te failure The crowdsec-update-hub.service consistently fails on this VM because the hub update can't reach upstream (likely a DNS/network race at boot or the upstream hub is unreachable). Disable the auto-update service to stop the recurring alert. Alert: SystemdServiceFailed (critical) fingerprint: 0b0d3c4bc07498e2 instance: 201-mono
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Alert
SystemdServiceFailed (critical) —
crowdsec-update-hub.servicefailed on201-monoRoot cause
The
crowdsec-update-hub.servicerunscscli hub updatewhich consistently fails on this VM. Likely causes: DNS/network race at boot before the hub is reachable, or the upstream hub (hub.crowdsec.net) is unreachable from this network segment.This is a chronic failure — the service has been observed in a failed state repeatedly.
Fix
Explicitly disable
systemd.services.crowdsec-update-hub.enable = false;in the 201-mono host module so the service is masked and doesn't attempt to start.Hub data is still pulled on initial package install; manual updates can be triggered with
sudo cscli hub updatewhen needed.How to verify
sudo systemctl status crowdsec-update-hubon 201-mono → should showloaded; disabledornot-foundSystemdServiceFailedalert forcrowdsec-update-hub.serviceon201-monoshould stop firing.Closes alert fingerprint
0b0d3c4bc07498e2