Tls: failed to verify certificate
🐞 Bug report
I followed the Getting Started guide to start Dependabot on my local machine. I successfully added the project to the launched web page. However, when I execute it to check the dependency, an error is reported. The detailed information can be found in the logs.
Is there an existing issue for this?
No, I have searched the existing issues, But no one can solve my problem
App version
I am using the podman-compose file for version v3.2.0-alpha.1
Execution mode
Local execution on a M2 Mac using Podman compose
curl -O https://gitlab.com/dependabot-gitlab/dependabot/-/raw/v3.2.0-alpha.1/docker-compose.yml
podman-compose up -d
dependabot.yml
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "weekly"
- package-ecosystem: npm
directory: "/javascript"
schedule:
interval: "weekly"
- package-ecosystem: bundler
directory: "/ruby"
schedule:
interval: "weekly"
Expected outcome
When I click the excute button on http://localhost:3000, the detection can be performed normally and the Merge Request can be raised.
Log output
[2023-09-11 12:37:02 +0000] INFO -- start
[2023-09-11 12:37:02 +0000] INFO -- [dep-update: leeworkspace/dependabot/dabot-test2=>npm=>/javascript] Starting dependency updater
[2023-09-11 12:37:02 +0000] INFO -- [6c52726c-225d-4630-80be-60fe3ce54718] method=PUT path=/jobs/64ff08babee3eb0001a347e4/execute format=html controller=JobController action=execute status=302 allocations=2473 duration=21.14 view=0.00 location=http://localhost:3000/projects
[2023-09-11 12:37:02 +0000] INFO -- [80580f24-0262-4ac3-879a-9930cb9e9124] method=GET path=/projects format=html controller=ProjectsController action=index status=200 allocations=11618 duration=45.07 view=16.77
2023/09/11 12:37:02 http: TLS handshake error from 10.89.0.77:51112: remote error: tls: bad certificate
2023/09/11 12:37:02 http: TLS handshake error from 10.89.0.77:51116: remote error: tls: bad certificate
2023/09/11 12:37:02 http: TLS handshake error from 10.89.0.77:51130: remote error: tls: bad certificate
2023/09/11 12:37:02 http: TLS handshake error from 10.89.0.77:51144: remote error: tls: bad certificate
[2023-09-11 12:37:02 +0000] ERROR -- [dep-update: leeworkspace/dependabot/dabot-test2=>npm=>/javascript] Command exited with code: 1!
[2023-09-11 12:37:02 +0000] ERROR -- [dep-update: leeworkspace/dependabot/dabot-test2=>npm=>/javascript] Command 'docker compose -f - run --no-TTY --quiet-pull --name updater-npm-xmzvrkszg-3tnf2 --rm updater bundle exec rake dependabot:update[leeworkspace/dependabot/dabot-test2,npm,/javascript]' stderr output:
error during connect: Get "https://docker:2376/v1.24/containers/json?all=1&filters=%7B%22label%22%3A%7B%22com.docker.compose.config-hash%22%3Atrue%2C%22com.docker.compose.project%3Dapp%22%3Atrue%7D%7D": tls: failed to verify certificate: x509: certificate is valid for 0b61be61ed14, 0b61be61ed14docker, localhost, not docker
2023/09/11 12:37:02 http: TLS handshake error from 10.89.0.77:51158: remote error: tls: bad certificate
[2023-09-11 12:37:02 +0000] INFO -- fail
[2023-09-11 12:37:02 +0000] WARN -- {"context":"Job raised exception","job":{"retry":2,"queue":"default","class":"ActiveJob::QueueAdapters::SidekiqAdapter::JobWrapper","wrapped":"UpdateRunnerJob","args":[{"job_class":"UpdateRunnerJob","job_id":"c2189f25-1860-4bb8-95c0-89b2b5d94552","provider_job_id":null,"queue_name":"default","priority":null,"arguments":[{"project_name":"leeworkspace/dependabot/dabot-test2","package_ecosystem":"npm","directory":"/javascript","_aj_ruby2_keywords":["project_name","package_ecosystem","directory"]}],"executions":0,"exception_executions":{},"locale":"en","timezone":"UTC","enqueued_at":"2023-09-11T12:37:02Z"}],"jid":"c26507bc21276f46d207d6fa","created_at":1694435822.1626463,"trace_propagation_headers":{"sentry-trace":"0d07fefa45ff410ab69abddca4442c3d-906f9614f9514e1f","baggage":"sentry-trace_id=0d07fefa45ff410ab69abddca4442c3d,sentry-environment=production,sentry-release=dependabot-gitlab%40v3.2.0-alpha.1"},"enqueued_at":1694435822.1629863},"_config":{"labels":"#<Set: {}>","require":".","environment":"production","concurrency":5,"timeout":25,"poll_interval_average":null,"average_scheduled_poll_interval":5,"on_complex_arguments":"raise","error_handlers":["#<Proc:0x0000ffffac0bcb90 /home/dependabot/app/vendor/bundle/ruby/3.1.0/gems/sidekiq-7.1.2/lib/sidekiq/config.rb:37 (lambda)>","#<Sentry::Sidekiq::ErrorHandler:0x0000ffffa59e0fc0>"],"death_handlers":[],"lifecycle_events":{"startup":[],"quiet":["#<Proc:0x0000ffffa5b86e38 /home/dependabot/app/vendor/bundle/ruby/3.1.0/gems/sidekiq_alive-2.3.0/lib/sidekiq_alive.rb:42>"],"shutdown":["#<Proc:0x0000ffffa5b86e10 /home/dependabot/app/vendor/bundle/ruby/3.1.0/gems/sidekiq_alive-2.3.0/lib/sidekiq_alive.rb:47>"],"heartbeat":[],"beat":["#<Proc:0x0000ffffac9ff090 /home/dependabot/app/vendor/bundle/ruby/3.1.0/gems/sidekiq-7.1.2/lib/sidekiq/metrics/tracking.rb:133>"]},"dead_max_jobs":10000,"dead_timeout_in_seconds":15552000,"reloader":"#<Sidekiq::Rails::Reloader @app=DependabotGitlab::Application>","backtrace_cleaner":"#<Proc:0x0000ffffa59b9380 /home/dependabot/app/vendor/bundle/ruby/3.1.0/gems/sidekiq-7.1.2/lib/sidekiq/rails.rb:59 (lambda)>","queues":["high","default","low"],"config_file":"./config/sidekiq.yml","tag":"app","identity":"c506a706619d:1:64d356249a78","cron_poll_interval":30}}
[2023-09-11 12:37:02 +0000] WARN -- Container::Failure: Command exited with code: 1!
[2023-09-11 12:37:02 +0000] WARN -- app/services/container/compose/runner.rb:117:in `handle_command_failure'
app/services/container/compose/runner.rb:104:in `block in run_shell_cmd'
app/services/container/compose/runner.rb:95:in `run_shell_cmd'
app/services/container/compose/runner.rb:83:in `run_update'
app/services/container/compose/runner.rb:14:in `call'
app/services/application_service.rb:7:in `call'
app/services/update/routers/dependency_update.rb:15:in `call'
app/services/application_service.rb:7:in `call'
app/jobs/update_runner_job.rb:26:in `block in perform'
app/helpers/application_helper.rb:91:in `run_within_context'
app/jobs/update_runner_job.rb:25:in `perform'
Other info
I fount the ip 10.89.0.77 is dependabot-guide_worker_1's ip
podman inspect --format="{{json .NetworkSettings.Networks}}" dependabot-guide_worker_1 | jq
container info
c181932ad14b docker.io/bitnami/redis:7.2-debian-11 /opt/bitnami/scri... 11 minutes ago Up 6 minutes dependabot-guide_redis_1
65952f70d6d7 docker.io/bitnami/mongodb:6.0-debian-11 /opt/bitnami/scri... 11 minutes ago Up 6 minutes dependabot-guide_mongodb_1
0b61be61ed14 docker.io/library/docker:24.0-dind 11 minutes ago Up 6 minutes dependabot-guide_docker_1
5df201205411 docker.io/andrcuns/dependabot-gitlab:3.2.0-alpha.1 rails db:migrate 11 minutes ago Exited (0) 6 minutes ago dependabot-guide_migration_1
5328f194f63a docker.io/andrcuns/dependabot-gitlab:3.2.0-alpha.1 rails server 11 minutes ago Up 6 minutes (healthy) 0.0.0.0:3000->3000/tcp dependabot-guide_web_1
c506a706619d docker.io/andrcuns/dependabot-gitlab:3.2.0-alpha.1 sidekiq 11 minutes ago Up 6 minutes (healthy) dependabot-guide_worker_1
26c69655f792 docker.io/andrcuns/dependabot-gitlab:3.2.0-alpha.1 rails background_... 11 minutes ago Exited (0) 6 minutes ago dependabot-guide_background-tasks_1