September 2019 - SCION - mailman3.inf.ethz.ch

Re: [Scion] Unable to run SCION after update
by Juan A. García-Pardo 14 Oct '19

14 Oct '19

Hi Siddharth, The scion apps should be available in packaged form next week. In the meantime, you can build them with a Go compiler >= 1.11 by cloning the scion-apps repo, running `./depsh.sh` and then `make` I am testing your 17-ffaa:1:cd2 user AS and it works fine. This are my steps: - Get the configuration from the Coordinator, uncompress it in a directory. Chdir to it - Run `vagrant up`. No errors are shown. Only a few red lines but with no real problems. Last line reads "SCIONLab VM ready" - Run `vagrant ssh` to log into the VM. - Run `ifconfig`. It shows the tun0 interface, with IP "10.0.0.44" - Ping the server using tun0 `ping -I tun0 10.0.8.1`. The server echoes back. - List SCION services with `systemctl list-dependencies scionlab.target` . All services are okay (they are shown duplicated, but it's a know systemd bug, no problems there). - Ping a core AS using SCION `scmp echo -local 17-ffaa:1:cd2,[127.0.0.1] -remote 17-ffaa:0:1101,[127.0.0.1]` . It works okay (for me with times ~6ms; that could change for you). Let's focus on this user AS of yours and find out what is not working. I will run this same configuration again this evening from a completely different network, just to check our firewall has not gone crazy again. I will send an email before I check again, but in the mean time, you could send us your Vagrant version and platform (e.g. vagrant for windows), and the complete /var/log/syslog file of your VM after `vagrant up` and `vagrant ssh`. The problem you seem to have is between the VPN client and server (that is the reason that SCION will not work). You can send the files to the mailing list or directly to me. Best regards, Juan A. On Fri, Sep 27, 2019 at 10:58 AM Siddharth Mehrotra <the4daspect(a)gmail.com> wrote: > Hi Juan, > > The problem still persists. I tried with another AS id's as well > 18-ffaa:1:cd3 & 17-ffaa:1:cd2, however result is same (the border router > service does not start & no tun0 found). > > Also, do you have any update on SCION-Apps? If not all, can webapp be > restored as per SCION update ? > > Best regards, > Siddharth > > On Thu, Sep 26, 2019 at 12:35 PM Juan A. García-Pardo <juagargi(a)gmail.com> > wrote: > > > Hi Siddharth, > > I have answered you also to your email directly, but I'm copying the > answer > > here so it gets indexed. > > There were two problems: > > - We had experienced some problems with our firewall and the VPN in the > > attachment point Switzerland. Sometimes it would drop packets. > > - Your user AS ffaa:1:c32 is marked as deactivated. You have to go to > your > > AS list in the Coordinator (https://www.scionlab.org/user/) and click on > > "Activate this AS". Wait 1-2 minutes and run `vagrant up` for that user > AS. > > Now your ASes should be able to start the VPN tunnel without problems > (type > > ifconfig in the VM and you should see an interface called tun0), and the > > active ones will have a working border router. > > Best regards, > > > > Juan A. > > > > > > On Thu, Sep 19, 2019 at 2:28 PM Siddharth Mehrotra < > the4daspect(a)gmail.com> > > wrote: > > > > > Hi Juan, > > > > > > Thanks for the update, it is really helpful. > > > > > > 1) After checking status of my connection to SCION, I see > > > ● ├─scion-border-router(a)17-ffaa_1_c32-1.service > > > ● ├─scion-border-router(a)17-ffaa_1_c32-1.service > > > > > > as marked RED in color. I could not understand why this happened on > first > > > place, just after running vagrant ssh and systemctl list-dependencies > > > scionlab.target > > > > > > This appears even after restarting SCION services. > > > > > > 2) Still I can't find tun0 while running command ip a. The only tunnel > > > interfaces appearing are: lo & enp0s3. > > > > > > 3) Is Scion web-app available? > > > I get this error: -bash: cd: /src/github.com/netsec-ethz: No such file > > or > > > directory while navigating to web-apps. > > > > > > PS: Running SCION in a virtual machine – VPN approach > > > > > > Thanks, > > > Siddharth > > > > > > On Thu, Sep 19, 2019 at 1:01 PM Juan A. García-Pardo < > juagargi(a)gmail.com > > > > > > wrote: > > > > > > > Hi Siddharth, > > > > We have not yet upgraded the tutorials for everything, only the > > "updating > > > > SCION" one: > > > > > > > > > > https://netsec-ethz.github.io/scion-tutorials/scion_tricks/updating_scion/ > > > > That said, almost all that you are seeing is normal: the > configuration > > > TGZ > > > > you get from the Coordinator is very small, because your VM will get > > the > > > > full configuration from the Coordinator for you. Once you have run > > > `vagrant > > > > up`, you will see the directory /etc/scion contains a `gen` directory > > > > inside. That one will have the full configuration. > > > > Also, the services and tools are now packaged. There is no $SC > > directory > > > > anymore. Things you can run to check: > > > > - dpkg -l |grep scion # will list scion packages, hopefully > installed > > in > > > > your system > > > > - systemctl list-dependencies scionlab.target # list status. In > Ubuntu > > > > 16.04 there is a systemd bug and the services will be listed twice > > > > - sudo systemctl restart scionlab.target # restart all SCION > services > > > > - ls -l /var/log/scion # list scion log files > > > > - ls -l /var/lib/scion # list trust databases, etc > > > > - ls -l /etc/scion # list scion configuration. The gen folder has > the > > > > same morphology as before, but the supervisord files are not used > > > > > > > > On the other hand, if you want to not use the packages and go back to > > the > > > > developer way of doing things, you can briefly read about that also > in > > > the > > > > how to update SCION page from SCION tutorials, but basically refers > to > > > > stopping systemd for scionlab.target and cloning/building SCION > > yourself. > > > > > > > > The problem with the VPN is not clear at all though. I would like to > > > > investigate a bit more about that. Can you try again? If you still > see > > > the > > > > problem the second time you try, we'll investigate further. > > > > Thanks and best regards, > > > > > > > > Juan A. > > > > > > > > > > > > On Wed, Sep 18, 2019 at 10:52 AM Siddharth Mehrotra < > > > the4daspect(a)gmail.com> > > > > wrote: > > > > > > > >> Hi all, > > > >> > > > >> I tried to run SCION after update from attachment point with ETHZ-AP > > as > > > >> downloading new configuration. I'm currently installing inside a VM > > with > > > >> use of OPENVPN to connect to SCION Lab. > > > >> > > > >> I observed following scenarios: > > > >> > > > >> 1) After extracting configuration file from SCION coordination > > service, > > > >> the > > > >> contents are reduced to: > > > >> Mode LastWriteTime Length Name > > > >> ---- ------------- ------ ---- > > > >> d----- 18-09-2019 10:25 .vagrant > > > >> d----- 18-09-2019 10:23 gen > > > >> -a---- 13-06-2019 09:25 3618 README.md > > > >> -a---- 13-06-2019 09:25 3068 run.sh > > > >> -a---- 18-09-2019 10:22 3813 > > > >> scion_lab_17-ffaa_1_c32.tar.gz > > > >> -a---- 18-09-2019 10:34 0 > > > >> ubuntu-xenial-16.04-cloudimg-console.log > > > >> -a---- 18-09-2019 10:24 2484 Vagrantfile > > > >> > > > >> Many SCION services are missing. > > > >> > > > >> 2) Although I was able to run the VM successfully and SSH to SCION. > > > >> However, it seems the connection to SCION was not successful. The > > below > > > >> command is after running Vagrant up: > > > >> > > > >> default: WARNING:WARNING!: VPN could be unready. SCION may fail to > > > start. > > > >> default: Created symlink from > > > >> > > > >> > > > > > > /etc/systemd/system/scionlab.target.wants/scion-border-router(a)17-ffaa_1_c32-1.service > > > >> to /lib/systemd/system/scion-border-router@.service. > > > >> default: Created symlink from > > > >> > > > >> > > > > > > /etc/systemd/system/scionlab.target.wants/scion-certificate-server(a)17-ffaa_1_c32-1.service > > > >> to /lib/systemd/system/scion-certificate-server@.service. > > > >> default: Created symlink from > > > >> > > > >> > > > > > > /etc/systemd/system/scionlab.target.wants/scion-path-server(a)17-ffaa_1_c32-1.service > > > >> to /lib/systemd/system/scion-path-server@.service. > > > >> default: Created symlink from > > > >> > > > >> > > > > > > /etc/systemd/system/scionlab.target.wants/scion-beacon-server(a)17-ffaa_1_c32-1.service > > > >> to /lib/systemd/system/scion-beacon-server@.service. > > > >> default: Created symlink from > > > >> > > > >> > > > > > > /etc/systemd/system/scionlab.target.wants/scion-daemon(a)17-ffaa_1_c32.service > > > >> to /lib/systemd/system/scion-daemon@.service. > > > >> default: Created symlink from > > > >> /etc/systemd/system/scionlab.target.wants/scion-dispatcher.service > to > > > >> /lib/systemd/system/scion-dispatcher.service. > > > >> default: configure time sync > > > >> default: ntp.service is not a native service, redirecting to > > > >> systemd-sysv-install > > > >> default: Executing /lib/systemd/systemd-sysv-install enable ntp > > > >> default: configure unattended upgrades (automatic security > > upgrades) > > > >> default: SCIONLab VM ready > > > >> > > > >> 3) When I am inside the VM and I tried to check the connection I was > > > >> surprised to see this: > > > >> > > > >> vagrant@scionlab-ffaa-1-c32:~$ checkbeacons > > > >> checkbeacons: command not found > > > >> > > > >> Also fo this: > > > >> vagrant@scionlab-ffaa-1-c32:~$ tail -f $SC/logs/bs*.DEBUG > > > >> tail: cannot open '/logs/bs*.DEBUG' for reading: No such file or > > > directory > > > >> tail: no files remaining > > > >> > > > >> 4)Memory Test: > > > >> vagrant@scionlab-ffaa-1-c32:~$ df -h > > > >> Filesystem Size Used Avail Use% Mounted on > > > >> udev 992M 0 992M 0% /dev > > > >> tmpfs 200M 3.1M 197M 2% /run > > > >> /dev/sda1 9.7G 1.4G 8.3G 14% / > > > >> tmpfs 1000M 0 1000M 0% /dev/shm > > > >> tmpfs 5.0M 0 5.0M 0% /run/lock > > > >> tmpfs 1000M 0 1000M 0% /sys/fs/cgroup > > > >> vagrant 136G 73G 64G 54% /vagrant > > > >> tmpfs 200M 0 200M 0% /run/user/1000 > > > >> > > > >> 5) tun0 not found after performing ip a command. > > > >> > > > >> PS: I am using Oracle Virtual Box 6.0 , Is it the compatibility > issue > > ? > > > >> PS: I was able to run SCION successfully before the update with same > > > >> Virtual Box version and vagrant also. > > > >> > > > >> Please look into this issue. > > > >> > > > >> Thanks, > > > >> Sid > > > >> _______________________________________________ > > > >> Scion mailing list > > > >> Scion(a)lists.inf.ethz.ch > > > >> https://lists.inf.ethz.ch/mailman/listinfo/scion > > > >> > > > > > > > _______________________________________________ > > > Scion mailing list > > > Scion(a)lists.inf.ethz.ch > > > https://lists.inf.ethz.ch/mailman/listinfo/scion > > > > > _______________________________________________ > > Scion mailing list > > Scion(a)lists.inf.ethz.ch > > https://lists.inf.ethz.ch/mailman/listinfo/scion > > > _______________________________________________ > Scion mailing list > Scion(a)lists.inf.ethz.ch > https://lists.inf.ethz.ch/mailman/listinfo/scion >

6 15

Re: [Scion] Unable to run SCION after update
by Juan A. García-Pardo 30 Sep '19

30 Sep '19

Hi Siddharth, The correct path is $HOME/go/src/github.com/netsec-ethz/scion-apps , not $HOME/go/src/scion-apps Best regards, Juan A. On Mon, Sep 30, 2019 at 12:38 PM Siddharth Mehrotra <the4daspect(a)gmail.com> wrote: > Hi Juan & Claude, > > I think Claude is right, I am facing some issue with Go Path. > > So, currently I have cloned scion-apps under go/src/scion-apps. The > ./deps.sh worked perfectly fine. The issue is with make. It can not find > package in $GOPATH. > At github webpage, it is mentioned that run make install to build all > projects and install into $GOPATH/bin > > My GOPATH settings are: > export GOPATH=$HOME/go > export PATH=$PATH:$GOPATH/bin > > Does it mean that I need to clone the scion-apps in go/bin ? Sorry, I am > new to Go Programming. > > Best, > Siddharth > > On Fri, Sep 27, 2019 at 2:33 PM Claude Hähni <claude.haehni(a)gmail.com> > wrote: > > > Hi Siddharth, > > When cloning, please make sure to clone the repository to the correct > > location. In your case this is: > > /home/vagrant/go/src/github.com/netsec-ethz/scion-apps > > > > Best regards, > > Claude > > > > Juan A. García-Pardo <juagargi(a)gmail.com> schrieb am Fr., 27. Sep. 2019, > > 14:21: > > > >> Hi Siddharth, > >> We didn't touch scion-apps/lib/scionutil and it still exists. If you are > >> building scion-apps in a SCIONLab VM, these are the steps you would > need: > >> - install go 1.11 > >> - `go get github.com/kardianos/govendor` > <http://github.com/kardianos/govendor> > >> <http://github.com/kardianos/govendor> > >> - `sudo apt-get install libpam0g-dev` (needed by SCION ssh) > >> - clone scion-apps > >> - `govendor sync -v` (this needs some 5 minutes to complete). You can > run > >> ./deps.sh instead, it is going to do the same. > >> - `make` > >> > >> I just ran these steps myself inside a SCIONLab VM and it worked okay. > >> Best regards, > >> > >> Juan A. > >> > >> > >> On Fri, Sep 27, 2019 at 12:21 PM Siddharth Mehrotra < > >> the4daspect(a)gmail.com> > >> wrote: > >> > >> > Hi Juan, > >> > > >> > Thanks for the help. SCION works now! > >> > > >> > Regarding webapp, I tried to compile all scion-apps by ./deps.sh by > >> > installing go => This is done. > >> > > >> > However, make install command runs into error: > >> > cd helloworld/ && go build > >> > helloworld.go:23:2: cannot find package " > >> > github.com/netsec-ethz/scion-apps/lib/scionutil" in any of: > >> > /home/vagrant/go/src/scion-apps/vendor/ > >> > github.com/netsec-ethz/scion-apps/lib/scionutil (vendor tree) > >> > /usr/local/go/src/ > >> github.com/netsec-ethz/scion-apps/lib/scionutil > >> > (from $GOROOT) > >> > /home/vagrant/go/src/ > >> > github.com/netsec-ethz/scion-apps/lib/scionutil (from $GOPATH) > >> > Makefile:29: recipe for target 'helloworld/helloworld' failed > >> > make: *** [helloworld/helloworld] Error 1 > >> > > >> > This is becaus github.com/netsec-ethz/scion-apps/lib/scionutil does > >> not > >> > exist anymore. I am not sure if this is still required. *Can a quick > >> > update be performed in github code regarding same ?* > >> > > >> > Best Regards, > >> > Siddharth > >> > > >> > On Fri, Sep 27, 2019 at 11:34 AM Juan A. García-Pardo < > >> juagargi(a)gmail.com> > >> > wrote: > >> > > >> >> Hi Siddharth, > >> >> The scion apps should be available in packaged form next week. In the > >> >> meantime, you can build them with a Go compiler >= 1.11 by cloning > the > >> >> scion-apps repo, running `./depsh.sh` and then `make` > >> >> I am testing your 17-ffaa:1:cd2 user AS and it works fine. This are > my > >> >> steps: > >> >> - Get the configuration from the Coordinator, uncompress it in a > >> >> directory. Chdir to it > >> >> - Run `vagrant up`. No errors are shown. Only a few red lines but > with > >> no > >> >> real problems. Last line reads "SCIONLab VM ready" > >> >> - Run `vagrant ssh` to log into the VM. > >> >> - Run `ifconfig`. It shows the tun0 interface, with IP "10.0.0.44" > >> >> - Ping the server using tun0 `ping -I tun0 10.0.8.1`. The server > echoes > >> >> back. > >> >> - List SCION services with `systemctl list-dependencies > >> scionlab.target` > >> >> . All services are okay (they are shown duplicated, but it's a know > >> systemd > >> >> bug, no problems there). > >> >> - Ping a core AS using SCION `scmp echo -local > >> 17-ffaa:1:cd2,[127.0.0.1] > >> >> -remote 17-ffaa:0:1101,[127.0.0.1]` . It works okay (for me with > times > >> >> ~6ms; that could change for you). > >> >> > >> >> Let's focus on this user AS of yours and find out what is not > working. > >> I > >> >> will run this same configuration again this evening from a completely > >> >> different network, just to check our firewall has not gone crazy > >> again. I > >> >> will send an email before I check again, but in the mean time, you > >> could > >> >> send us your Vagrant version and platform (e.g. vagrant for windows), > >> and > >> >> the complete /var/log/syslog file of your VM after `vagrant up` and > >> >> `vagrant ssh`. The problem you seem to have is between the VPN client > >> and > >> >> server (that is the reason that SCION will not work). You can send > the > >> >> files to the mailing list or directly to me. > >> >> Best regards, > >> >> > >> >> Juan A. > >> >> > >> >> > >> >> On Fri, Sep 27, 2019 at 10:58 AM Siddharth Mehrotra < > >> >> the4daspect(a)gmail.com> wrote: > >> >> > >> >>> Hi Juan, > >> >>> > >> >>> The problem still persists. I tried with another AS id's as well > >> >>> 18-ffaa:1:cd3 & 17-ffaa:1:cd2, however result is same (the border > >> router > >> >>> service does not start & no tun0 found). > >> >>> > >> >>> Also, do you have any update on SCION-Apps? If not all, can webapp > be > >> >>> restored as per SCION update ? > >> >>> > >> >>> Best regards, > >> >>> Siddharth > >> >>> > >> >>> On Thu, Sep 26, 2019 at 12:35 PM Juan A. García-Pardo < > >> >>> juagargi(a)gmail.com> > >> >>> wrote: > >> >>> > >> >>> > Hi Siddharth, > >> >>> > I have answered you also to your email directly, but I'm copying > the > >> >>> answer > >> >>> > here so it gets indexed. > >> >>> > There were two problems: > >> >>> > - We had experienced some problems with our firewall and the VPN > in > >> the > >> >>> > attachment point Switzerland. Sometimes it would drop packets. > >> >>> > - Your user AS ffaa:1:c32 is marked as deactivated. You have to go > >> to > >> >>> your > >> >>> > AS list in the Coordinator (https://www.scionlab.org/user/) and > >> click > >> >>> on > >> >>> > "Activate this AS". Wait 1-2 minutes and run `vagrant up` for that > >> >>> user AS. > >> >>> > Now your ASes should be able to start the VPN tunnel without > >> problems > >> >>> (type > >> >>> > ifconfig in the VM and you should see an interface called tun0), > and > >> >>> the > >> >>> > active ones will have a working border router. > >> >>> > Best regards, > >> >>> > > >> >>> > Juan A. > >> >>> > > >> >>> > > >> >>> > On Thu, Sep 19, 2019 at 2:28 PM Siddharth Mehrotra < > >> >>> the4daspect(a)gmail.com> > >> >>> > wrote: > >> >>> > > >> >>> > > Hi Juan, > >> >>> > > > >> >>> > > Thanks for the update, it is really helpful. > >> >>> > > > >> >>> > > 1) After checking status of my connection to SCION, I see > >> >>> > > ● ├─scion-border-router(a)17-ffaa_1_c32-1.service > >> >>> > > ● ├─scion-border-router(a)17-ffaa_1_c32-1.service > >> >>> > > > >> >>> > > as marked RED in color. I could not understand why this happened > >> on > >> >>> first > >> >>> > > place, just after running vagrant ssh and systemctl > >> >>> list-dependencies > >> >>> > > scionlab.target > >> >>> > > > >> >>> > > This appears even after restarting SCION services. > >> >>> > > > >> >>> > > 2) Still I can't find tun0 while running command ip a. The only > >> >>> tunnel > >> >>> > > interfaces appearing are: lo & enp0s3. > >> >>> > > > >> >>> > > 3) Is Scion web-app available? > >> >>> > > I get this error: -bash: cd: /src/github.com/netsec-ethz: No > such > >> >>> file > >> >>> > or > >> >>> > > directory while navigating to web-apps. > >> >>> > > > >> >>> > > PS: Running SCION in a virtual machine – VPN approach > >> >>> > > > >> >>> > > Thanks, > >> >>> > > Siddharth > >> >>> > > > >> >>> > > On Thu, Sep 19, 2019 at 1:01 PM Juan A. García-Pardo < > >> >>> juagargi(a)gmail.com > >> >>> > > > >> >>> > > wrote: > >> >>> > > > >> >>> > > > Hi Siddharth, > >> >>> > > > We have not yet upgraded the tutorials for everything, only > the > >> >>> > "updating > >> >>> > > > SCION" one: > >> >>> > > > > >> >>> > > > >> >>> > > >> >>> > >> > https://netsec-ethz.github.io/scion-tutorials/scion_tricks/updating_scion/ > >> >>> > > > That said, almost all that you are seeing is normal: the > >> >>> configuration > >> >>> > > TGZ > >> >>> > > > you get from the Coordinator is very small, because your VM > will > >> >>> get > >> >>> > the > >> >>> > > > full configuration from the Coordinator for you. Once you have > >> run > >> >>> > > `vagrant > >> >>> > > > up`, you will see the directory /etc/scion contains a `gen` > >> >>> directory > >> >>> > > > inside. That one will have the full configuration. > >> >>> > > > Also, the services and tools are now packaged. There is no $SC > >> >>> > directory > >> >>> > > > anymore. Things you can run to check: > >> >>> > > > - dpkg -l |grep scion # will list scion packages, hopefully > >> >>> installed > >> >>> > in > >> >>> > > > your system > >> >>> > > > - systemctl list-dependencies scionlab.target # list status. > In > >> >>> Ubuntu > >> >>> > > > 16.04 there is a systemd bug and the services will be listed > >> twice > >> >>> > > > - sudo systemctl restart scionlab.target # restart all SCION > >> >>> services > >> >>> > > > - ls -l /var/log/scion # list scion log files > >> >>> > > > - ls -l /var/lib/scion # list trust databases, etc > >> >>> > > > - ls -l /etc/scion # list scion configuration. The gen folder > >> has > >> >>> the > >> >>> > > > same morphology as before, but the supervisord files are not > >> used > >> >>> > > > > >> >>> > > > On the other hand, if you want to not use the packages and go > >> back > >> >>> to > >> >>> > the > >> >>> > > > developer way of doing things, you can briefly read about that > >> >>> also in > >> >>> > > the > >> >>> > > > how to update SCION page from SCION tutorials, but basically > >> >>> refers to > >> >>> > > > stopping systemd for scionlab.target and cloning/building > SCION > >> >>> > yourself. > >> >>> > > > > >> >>> > > > The problem with the VPN is not clear at all though. I would > >> like > >> >>> to > >> >>> > > > investigate a bit more about that. Can you try again? If you > >> still > >> >>> see > >> >>> > > the > >> >>> > > > problem the second time you try, we'll investigate further. > >> >>> > > > Thanks and best regards, > >> >>> > > > > >> >>> > > > Juan A. > >> >>> > > > > >> >>> > > > > >> >>> > > > On Wed, Sep 18, 2019 at 10:52 AM Siddharth Mehrotra < > >> >>> > > the4daspect(a)gmail.com> > >> >>> > > > wrote: > >> >>> > > > > >> >>> > > >> Hi all, > >> >>> > > >> > >> >>> > > >> I tried to run SCION after update from attachment point with > >> >>> ETHZ-AP > >> >>> > as > >> >>> > > >> downloading new configuration. I'm currently installing > inside > >> a > >> >>> VM > >> >>> > with > >> >>> > > >> use of OPENVPN to connect to SCION Lab. > >> >>> > > >> > >> >>> > > >> I observed following scenarios: > >> >>> > > >> > >> >>> > > >> 1) After extracting configuration file from SCION > coordination > >> >>> > service, > >> >>> > > >> the > >> >>> > > >> contents are reduced to: > >> >>> > > >> Mode LastWriteTime Length Name > >> >>> > > >> ---- ------------- ------ ---- > >> >>> > > >> d----- 18-09-2019 10:25 .vagrant > >> >>> > > >> d----- 18-09-2019 10:23 gen > >> >>> > > >> -a---- 13-06-2019 09:25 3618 README.md > >> >>> > > >> -a---- 13-06-2019 09:25 3068 run.sh > >> >>> > > >> -a---- 18-09-2019 10:22 3813 > >> >>> > > >> scion_lab_17-ffaa_1_c32.tar.gz > >> >>> > > >> -a---- 18-09-2019 10:34 0 > >> >>> > > >> ubuntu-xenial-16.04-cloudimg-console.log > >> >>> > > >> -a---- 18-09-2019 10:24 2484 Vagrantfile > >> >>> > > >> > >> >>> > > >> Many SCION services are missing. > >> >>> > > >> > >> >>> > > >> 2) Although I was able to run the VM successfully and SSH to > >> >>> SCION. > >> >>> > > >> However, it seems the connection to SCION was not successful. > >> The > >> >>> > below > >> >>> > > >> command is after running Vagrant up: > >> >>> > > >> > >> >>> > > >> default: WARNING:WARNING!: VPN could be unready. SCION may > >> fail to > >> >>> > > start. > >> >>> > > >> default: Created symlink from > >> >>> > > >> > >> >>> > > >> > >> >>> > > > >> >>> > > >> >>> > >> > /etc/systemd/system/scionlab.target.wants/scion-border-router(a)17-ffaa_1_c32-1.service > >> >>> > > >> to /lib/systemd/system/scion-border-router@.service. > >> >>> > > >> default: Created symlink from > >> >>> > > >> > >> >>> > > >> > >> >>> > > > >> >>> > > >> >>> > >> > /etc/systemd/system/scionlab.target.wants/scion-certificate-server(a)17-ffaa_1_c32-1.service > >> >>> > > >> to /lib/systemd/system/scion-certificate-server@.service. > >> >>> > > >> default: Created symlink from > >> >>> > > >> > >> >>> > > >> > >> >>> > > > >> >>> > > >> >>> > >> > /etc/systemd/system/scionlab.target.wants/scion-path-server(a)17-ffaa_1_c32-1.service > >> >>> > > >> to /lib/systemd/system/scion-path-server@.service. > >> >>> > > >> default: Created symlink from > >> >>> > > >> > >> >>> > > >> > >> >>> > > > >> >>> > > >> >>> > >> > /etc/systemd/system/scionlab.target.wants/scion-beacon-server(a)17-ffaa_1_c32-1.service > >> >>> > > >> to /lib/systemd/system/scion-beacon-server@.service. > >> >>> > > >> default: Created symlink from > >> >>> > > >> > >> >>> > > >> > >> >>> > > > >> >>> > > >> >>> > >> > /etc/systemd/system/scionlab.target.wants/scion-daemon(a)17-ffaa_1_c32.service > >> >>> > > >> to /lib/systemd/system/scion-daemon@.service. > >> >>> > > >> default: Created symlink from > >> >>> > > >> > >> >>> /etc/systemd/system/scionlab.target.wants/scion-dispatcher.service > to > >> >>> > > >> /lib/systemd/system/scion-dispatcher.service. > >> >>> > > >> default: configure time sync > >> >>> > > >> default: ntp.service is not a native service, redirecting > >> to > >> >>> > > >> systemd-sysv-install > >> >>> > > >> default: Executing /lib/systemd/systemd-sysv-install > enable > >> >>> ntp > >> >>> > > >> default: configure unattended upgrades (automatic > security > >> >>> > upgrades) > >> >>> > > >> default: SCIONLab VM ready > >> >>> > > >> > >> >>> > > >> 3) When I am inside the VM and I tried to check the > connection > >> I > >> >>> was > >> >>> > > >> surprised to see this: > >> >>> > > >> > >> >>> > > >> vagrant@scionlab-ffaa-1-c32:~$ checkbeacons > >> >>> > > >> checkbeacons: command not found > >> >>> > > >> > >> >>> > > >> Also fo this: > >> >>> > > >> vagrant@scionlab-ffaa-1-c32:~$ tail -f $SC/logs/bs*.DEBUG > >> >>> > > >> tail: cannot open '/logs/bs*.DEBUG' for reading: No such file > >> or > >> >>> > > directory > >> >>> > > >> tail: no files remaining > >> >>> > > >> > >> >>> > > >> 4)Memory Test: > >> >>> > > >> vagrant@scionlab-ffaa-1-c32:~$ df -h > >> >>> > > >> Filesystem Size Used Avail Use% Mounted on > >> >>> > > >> udev 992M 0 992M 0% /dev > >> >>> > > >> tmpfs 200M 3.1M 197M 2% /run > >> >>> > > >> /dev/sda1 9.7G 1.4G 8.3G 14% / > >> >>> > > >> tmpfs 1000M 0 1000M 0% /dev/shm > >> >>> > > >> tmpfs 5.0M 0 5.0M 0% /run/lock > >> >>> > > >> tmpfs 1000M 0 1000M 0% /sys/fs/cgroup > >> >>> > > >> vagrant 136G 73G 64G 54% /vagrant > >> >>> > > >> tmpfs 200M 0 200M 0% /run/user/1000 > >> >>> > > >> > >> >>> > > >> 5) tun0 not found after performing ip a command. > >> >>> > > >> > >> >>> > > >> PS: I am using Oracle Virtual Box 6.0 , Is it the > compatibility > >> >>> issue > >> >>> > ? > >> >>> > > >> PS: I was able to run SCION successfully before the update > with > >> >>> same > >> >>> > > >> Virtual Box version and vagrant also. > >> >>> > > >> > >> >>> > > >> Please look into this issue. > >> >>> > > >> > >> >>> > > >> Thanks, > >> >>> > > >> Sid > >> >>> > > >> _______________________________________________ > >> >>> > > >> Scion mailing list > >> >>> > > >> Scion(a)lists.inf.ethz.ch > >> >>> > > >> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> >>> > > >> > >> >>> > > > > >> >>> > > _______________________________________________ > >> >>> > > Scion mailing list > >> >>> > > Scion(a)lists.inf.ethz.ch > >> >>> > > https://lists.inf.ethz.ch/mailman/listinfo/scion > >> >>> > > > >> >>> > _______________________________________________ > >> >>> > Scion mailing list > >> >>> > Scion(a)lists.inf.ethz.ch > >> >>> > https://lists.inf.ethz.ch/mailman/listinfo/scion > >> >>> > > >> >>> _______________________________________________ > >> >>> Scion mailing list > >> >>> Scion(a)lists.inf.ethz.ch > >> >>> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> >>> > >> >> > >> _______________________________________________ > >> Scion mailing list > >> Scion(a)lists.inf.ethz.ch > >> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> > > > _______________________________________________ > Scion mailing list > Scion(a)lists.inf.ethz.ch > https://lists.inf.ethz.ch/mailman/listinfo/scion >

1 0

Re: [Scion] Unable to run SCION after update
by Juan A. García-Pardo 27 Sep '19

27 Sep '19

Hi Siddharth, I have answered you also to your email directly, but I'm copying the answer here so it gets indexed. There were two problems: - We had experienced some problems with our firewall and the VPN in the attachment point Switzerland. Sometimes it would drop packets. - Your user AS ffaa:1:c32 is marked as deactivated. You have to go to your AS list in the Coordinator (https://www.scionlab.org/user/) and click on "Activate this AS". Wait 1-2 minutes and run `vagrant up` for that user AS. Now your ASes should be able to start the VPN tunnel without problems (type ifconfig in the VM and you should see an interface called tun0), and the active ones will have a working border router. Best regards, Juan A. On Thu, Sep 19, 2019 at 2:28 PM Siddharth Mehrotra <the4daspect(a)gmail.com> wrote: > Hi Juan, > > Thanks for the update, it is really helpful. > > 1) After checking status of my connection to SCION, I see > ● ├─scion-border-router(a)17-ffaa_1_c32-1.service > ● ├─scion-border-router(a)17-ffaa_1_c32-1.service > > as marked RED in color. I could not understand why this happened on first > place, just after running vagrant ssh and systemctl list-dependencies > scionlab.target > > This appears even after restarting SCION services. > > 2) Still I can't find tun0 while running command ip a. The only tunnel > interfaces appearing are: lo & enp0s3. > > 3) Is Scion web-app available? > I get this error: -bash: cd: /src/github.com/netsec-ethz: No such file or > directory while navigating to web-apps. > > PS: Running SCION in a virtual machine – VPN approach > > Thanks, > Siddharth > > On Thu, Sep 19, 2019 at 1:01 PM Juan A. García-Pardo <juagargi(a)gmail.com> > wrote: > > > Hi Siddharth, > > We have not yet upgraded the tutorials for everything, only the "updating > > SCION" one: > > > https://netsec-ethz.github.io/scion-tutorials/scion_tricks/updating_scion/ > > That said, almost all that you are seeing is normal: the configuration > TGZ > > you get from the Coordinator is very small, because your VM will get the > > full configuration from the Coordinator for you. Once you have run > `vagrant > > up`, you will see the directory /etc/scion contains a `gen` directory > > inside. That one will have the full configuration. > > Also, the services and tools are now packaged. There is no $SC directory > > anymore. Things you can run to check: > > - dpkg -l |grep scion # will list scion packages, hopefully installed in > > your system > > - systemctl list-dependencies scionlab.target # list status. In Ubuntu > > 16.04 there is a systemd bug and the services will be listed twice > > - sudo systemctl restart scionlab.target # restart all SCION services > > - ls -l /var/log/scion # list scion log files > > - ls -l /var/lib/scion # list trust databases, etc > > - ls -l /etc/scion # list scion configuration. The gen folder has the > > same morphology as before, but the supervisord files are not used > > > > On the other hand, if you want to not use the packages and go back to the > > developer way of doing things, you can briefly read about that also in > the > > how to update SCION page from SCION tutorials, but basically refers to > > stopping systemd for scionlab.target and cloning/building SCION yourself. > > > > The problem with the VPN is not clear at all though. I would like to > > investigate a bit more about that. Can you try again? If you still see > the > > problem the second time you try, we'll investigate further. > > Thanks and best regards, > > > > Juan A. > > > > > > On Wed, Sep 18, 2019 at 10:52 AM Siddharth Mehrotra < > the4daspect(a)gmail.com> > > wrote: > > > >> Hi all, > >> > >> I tried to run SCION after update from attachment point with ETHZ-AP as > >> downloading new configuration. I'm currently installing inside a VM with > >> use of OPENVPN to connect to SCION Lab. > >> > >> I observed following scenarios: > >> > >> 1) After extracting configuration file from SCION coordination service, > >> the > >> contents are reduced to: > >> Mode LastWriteTime Length Name > >> ---- ------------- ------ ---- > >> d----- 18-09-2019 10:25 .vagrant > >> d----- 18-09-2019 10:23 gen > >> -a---- 13-06-2019 09:25 3618 README.md > >> -a---- 13-06-2019 09:25 3068 run.sh > >> -a---- 18-09-2019 10:22 3813 > >> scion_lab_17-ffaa_1_c32.tar.gz > >> -a---- 18-09-2019 10:34 0 > >> ubuntu-xenial-16.04-cloudimg-console.log > >> -a---- 18-09-2019 10:24 2484 Vagrantfile > >> > >> Many SCION services are missing. > >> > >> 2) Although I was able to run the VM successfully and SSH to SCION. > >> However, it seems the connection to SCION was not successful. The below > >> command is after running Vagrant up: > >> > >> default: WARNING:WARNING!: VPN could be unready. SCION may fail to > start. > >> default: Created symlink from > >> > >> > /etc/systemd/system/scionlab.target.wants/scion-border-router(a)17-ffaa_1_c32-1.service > >> to /lib/systemd/system/scion-border-router@.service. > >> default: Created symlink from > >> > >> > /etc/systemd/system/scionlab.target.wants/scion-certificate-server(a)17-ffaa_1_c32-1.service > >> to /lib/systemd/system/scion-certificate-server@.service. > >> default: Created symlink from > >> > >> > /etc/systemd/system/scionlab.target.wants/scion-path-server(a)17-ffaa_1_c32-1.service > >> to /lib/systemd/system/scion-path-server@.service. > >> default: Created symlink from > >> > >> > /etc/systemd/system/scionlab.target.wants/scion-beacon-server(a)17-ffaa_1_c32-1.service > >> to /lib/systemd/system/scion-beacon-server@.service. > >> default: Created symlink from > >> > >> > /etc/systemd/system/scionlab.target.wants/scion-daemon(a)17-ffaa_1_c32.service > >> to /lib/systemd/system/scion-daemon@.service. > >> default: Created symlink from > >> /etc/systemd/system/scionlab.target.wants/scion-dispatcher.service to > >> /lib/systemd/system/scion-dispatcher.service. > >> default: configure time sync > >> default: ntp.service is not a native service, redirecting to > >> systemd-sysv-install > >> default: Executing /lib/systemd/systemd-sysv-install enable ntp > >> default: configure unattended upgrades (automatic security upgrades) > >> default: SCIONLab VM ready > >> > >> 3) When I am inside the VM and I tried to check the connection I was > >> surprised to see this: > >> > >> vagrant@scionlab-ffaa-1-c32:~$ checkbeacons > >> checkbeacons: command not found > >> > >> Also fo this: > >> vagrant@scionlab-ffaa-1-c32:~$ tail -f $SC/logs/bs*.DEBUG > >> tail: cannot open '/logs/bs*.DEBUG' for reading: No such file or > directory > >> tail: no files remaining > >> > >> 4)Memory Test: > >> vagrant@scionlab-ffaa-1-c32:~$ df -h > >> Filesystem Size Used Avail Use% Mounted on > >> udev 992M 0 992M 0% /dev > >> tmpfs 200M 3.1M 197M 2% /run > >> /dev/sda1 9.7G 1.4G 8.3G 14% / > >> tmpfs 1000M 0 1000M 0% /dev/shm > >> tmpfs 5.0M 0 5.0M 0% /run/lock > >> tmpfs 1000M 0 1000M 0% /sys/fs/cgroup > >> vagrant 136G 73G 64G 54% /vagrant > >> tmpfs 200M 0 200M 0% /run/user/1000 > >> > >> 5) tun0 not found after performing ip a command. > >> > >> PS: I am using Oracle Virtual Box 6.0 , Is it the compatibility issue ? > >> PS: I was able to run SCION successfully before the update with same > >> Virtual Box version and vagrant also. > >> > >> Please look into this issue. > >> > >> Thanks, > >> Sid > >> _______________________________________________ > >> Scion mailing list > >> Scion(a)lists.inf.ethz.ch > >> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> > > > _______________________________________________ > Scion mailing list > Scion(a)lists.inf.ethz.ch > https://lists.inf.ethz.ch/mailman/listinfo/scion >

2 1

Unable to run SCION after update
by Siddharth Mehrotra 19 Sep '19

19 Sep '19

Hi all, I tried to run SCION after update from attachment point with ETHZ-AP as downloading new configuration. I'm currently installing inside a VM with use of OPENVPN to connect to SCION Lab. I observed following scenarios: 1) After extracting configuration file from SCION coordination service, the contents are reduced to: Mode LastWriteTime Length Name ---- ------------- ------ ---- d----- 18-09-2019 10:25 .vagrant d----- 18-09-2019 10:23 gen -a---- 13-06-2019 09:25 3618 README.md -a---- 13-06-2019 09:25 3068 run.sh -a---- 18-09-2019 10:22 3813 scion_lab_17-ffaa_1_c32.tar.gz -a---- 18-09-2019 10:34 0 ubuntu-xenial-16.04-cloudimg-console.log -a---- 18-09-2019 10:24 2484 Vagrantfile Many SCION services are missing. 2) Although I was able to run the VM successfully and SSH to SCION. However, it seems the connection to SCION was not successful. The below command is after running Vagrant up: default: WARNING:WARNING!: VPN could be unready. SCION may fail to start. default: Created symlink from /etc/systemd/system/scionlab.target.wants/scion-border-router(a)17-ffaa_1_c32-1.service to /lib/systemd/system/scion-border-router@.service. default: Created symlink from /etc/systemd/system/scionlab.target.wants/scion-certificate-server(a)17-ffaa_1_c32-1.service to /lib/systemd/system/scion-certificate-server@.service. default: Created symlink from /etc/systemd/system/scionlab.target.wants/scion-path-server(a)17-ffaa_1_c32-1.service to /lib/systemd/system/scion-path-server@.service. default: Created symlink from /etc/systemd/system/scionlab.target.wants/scion-beacon-server(a)17-ffaa_1_c32-1.service to /lib/systemd/system/scion-beacon-server@.service. default: Created symlink from /etc/systemd/system/scionlab.target.wants/scion-daemon(a)17-ffaa_1_c32.service to /lib/systemd/system/scion-daemon@.service. default: Created symlink from /etc/systemd/system/scionlab.target.wants/scion-dispatcher.service to /lib/systemd/system/scion-dispatcher.service. default: configure time sync default: ntp.service is not a native service, redirecting to systemd-sysv-install default: Executing /lib/systemd/systemd-sysv-install enable ntp default: configure unattended upgrades (automatic security upgrades) default: SCIONLab VM ready 3) When I am inside the VM and I tried to check the connection I was surprised to see this: vagrant@scionlab-ffaa-1-c32:~$ checkbeacons checkbeacons: command not found Also fo this: vagrant@scionlab-ffaa-1-c32:~$ tail -f $SC/logs/bs*.DEBUG tail: cannot open '/logs/bs*.DEBUG' for reading: No such file or directory tail: no files remaining 4)Memory Test: vagrant@scionlab-ffaa-1-c32:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 992M 0 992M 0% /dev tmpfs 200M 3.1M 197M 2% /run /dev/sda1 9.7G 1.4G 8.3G 14% / tmpfs 1000M 0 1000M 0% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock tmpfs 1000M 0 1000M 0% /sys/fs/cgroup vagrant 136G 73G 64G 54% /vagrant tmpfs 200M 0 200M 0% /run/user/1000 5) tun0 not found after performing ip a command. PS: I am using Oracle Virtual Box 6.0 , Is it the compatibility issue ? PS: I was able to run SCION successfully before the update with same Virtual Box version and vagrant also. Please look into this issue. Thanks, Sid

2 3

Unable to Connect to SCION Lab
by Andrew Stock 10 Sep '19

10 Sep '19

Hi, I am using Windows 10 machine and following tutorial to setup VM to connect to SCION. Since, I don't have a static public IP address and cannot receive traffic on UDP port 50000 from the outside network. I choose OPENVPN connection for my config files from SCION Coordination Service. Everything went fine and I was able to install SCION on my VM with vagrant up & ssh command. However, when running SCION-Viz many tests were failed. For this reason, I though to run topology and start SCION with run command. It did not report any errors. However, still the test results in SCION-Viz were failed. I have 2 questions: 1) How do I connect to OPENVPN? I tried installing OPENVPN for Windows but it didn't recognize files. Also, the commands for connecting to SCION Lab are only for Ubuntu machines. Does it mean that I can't connect to SCION Lab if my underlying OS is Windows ? 2) Can I run local topology and somehow connect to SCION Lab without going through OPEN VPN ? Thanks, A

2 1

Issue with installation of SCION Apps
by Siddharth Mehrotra 10 Sep '19

10 Sep '19

Hi, While installing SCION-Apps, following error appeared on running ./deps.sh. Is there any issue with this? ubuntu@scionlab-ffaa-1-c28:~/go/src/github.com/netsec-ethz/scion-apps$ ./deps.sh + printf '\n### Getting govendor ###\n' ### Getting govendor ### + grep v1.0.8 + govendor -version + printf '\n### Getting vendor libraries\n' ### Getting vendor libraries + govendor sync -v fetch "github.com/docker/docker/pkg/term" fetch "github.com/docker/docker/pkg/term/windows" fetch "github.com/netsec-ethz/rains/internal/pkg/algorithmTypes" # cd .; git clone https://github.com/netsec-ethz/rains /home/ubuntu/go/.cache/govendor/github.com/netsec-ethz/rains Cloning into '/home/ubuntu/go/.cache/govendor/github.com/netsec-ethz/rains'. .. error: index-pack died of signal 9 fatal: index-pack failed fetch "github.com/netsec-ethz/rains/internal/pkg/cbor" # cd .; git clone https://github.com/netsec-ethz/rains /home/ubuntu/go/.cache/govendor/github.com/netsec-ethz/rains Cloning into '/home/ubuntu/go/.cache/govendor/github.com/netsec-ethz/rains'. .. error: index-pack died of signal 9 fatal: index-pack failed fetch "github.com/netsec-ethz/rains/internal/pkg/connection" # cd .; git clone https://github.com/netsec-ethz/rains /home/ubuntu/go/.cache/govendor/github.com/netsec-ethz/rains Cloning into '/home/ubuntu/go/.cache/govendor/github.com/netsec-ethz/rains'. .. error: index-pack died of signal 9 fatal: index-pack failed fetch "github.com/netsec-ethz/rains/internal/pkg/datastructures/bitarray" Error appeared while executing *make install command* ubuntu@scionlab-ffaa-1-c28:~/go/src/github.com/netsec-ethz/scion-apps$ make install cd helloworld/ && go build ../lib/scionutil/hosts.go:27:2: cannot find package " github.com/netsec-ethz/rains/pkg/rains" in any of: /home/ubuntu/go/src/ github.com/netsec-ethz/scion-apps/vendor/github.com/netsec-ethz/rains/pkg/r… (vendor tree) /usr/local/go/src/github.com/netsec-ethz/rains/pkg/rains (from $GOROOT) /home/ubuntu/go/src/github.com/netsec-ethz/rains/pkg/rains (from $GOPATH) Makefile:24: recipe for target 'helloworld/helloworld' failed make: *** [helloworld/helloworld] Error 1 In this scenario SCION is running on perfectly and I am unable to install SCION - Apps on the ubuntu machine. Thanks, Siddharth

3 4

Re: [Scion] Unable to connect to OpenVPN server
by Juan A. García-Pardo 06 Sep '19

06 Sep '19

Hi Siddharth, Even if you were able to connect to the VPN using a Windows client, the next step would be to make the SCIONLab AS run in Windows, which is not supported yet. In the future we will want to support Windows and the VPN client file will be one of the things we will need to check. Thanks and best regards, Juan A. On Fri, Sep 6, 2019 at 11:45 AM Siddharth Mehrotra <the4daspect(a)gmail.com> wrote: > Hi Juan, > > It worked in Ubuntu with other ISD. However, I am still wondering why I am > unable to connect using OPENVPN client in windows. > > This is the log created: > > Fri Sep 06 11:37:49 2019 OpenVPN 2.4.7 x86_64-w64-mingw32 [SSL (OpenSSL)] > [LZO] [LZ4] [PKCS11] [AEAD] built on Apr 25 2019 > Fri Sep 06 11:37:49 2019 Windows version 6.2 (Windows 8 or greater) 64bit > Fri Sep 06 11:37:49 2019 library versions: OpenSSL 1.1.0j 20 Nov 2018, LZO > 2.10 > Enter Management Password: > Fri Sep 06 11:37:49 2019 MANAGEMENT: TCP Socket listening on [AF_INET] > 127.0.0.1:25340 > Fri Sep 06 11:37:49 2019 Need hold release from management interface, > waiting... > Fri Sep 06 11:37:49 2019 MANAGEMENT: Client connected from [AF_INET] > 127.0.0.1:25340 > Fri Sep 06 11:37:49 2019 MANAGEMENT: CMD 'state on' > Fri Sep 06 11:37:49 2019 MANAGEMENT: CMD 'log all on' > Fri Sep 06 11:37:49 2019 MANAGEMENT: CMD 'echo all on' > Fri Sep 06 11:37:49 2019 MANAGEMENT: CMD 'bytecount 5' > Fri Sep 06 11:37:49 2019 MANAGEMENT: CMD 'hold off' > Fri Sep 06 11:37:49 2019 MANAGEMENT: CMD 'hold release' > Fri Sep 06 11:37:49 2019 WARNING: No server certificate verification method > has been enabled. See http://openvpn.net/howto.html#mitm for more info. > Fri Sep 06 11:37:49 2019 TCP/UDP: Preserving recently used remote address: > [AF_INET]192.33.93.195:1194 > Fri Sep 06 11:37:49 2019 Socket Buffers: R=[65536->65536] S=[65536->65536] > Fri Sep 06 11:37:49 2019 UDP link local: (not bound) > Fri Sep 06 11:37:49 2019 UDP link remote: [AF_INET]192.33.93.195:1194 > Fri Sep 06 11:37:49 2019 MANAGEMENT: >STATE:1567762669,WAIT,,,,,, > > It keeps waiting on last mentioned step. Is there any way to perform > tutorial mentioned at > > https://netsec-ethz.github.io/scion-tutorials/general_scion_configuration/v… > with > Windows OS ? Open VPN requires .ovpn file extension. > > Best Regards, > Siddharth > > On Fri, Aug 30, 2019 at 3:12 PM Juan A. García-Pardo <juagargi(a)gmail.com> > wrote: > > > Hi Siddharth, > > I just found the problem. Go to the Coordinator and attach your user AS > to > > another point other than ISD18 (WISC). There is a problem with that > > attachment point for some time now, so don't use it. > > Thanks and regards, > > > > Juan A. > > > > > > On Fri, Aug 30, 2019 at 2:50 PM Siddharth Mehrotra < > the4daspect(a)gmail.com> > > wrote: > > > >> HI Juan, > >> > >> I tried with standalone Ubuntu 16.04 machine now and it reports > following > >> same error: > >> > >> Aug 30 14:41:21 siddharth-ThinkPad-T480 anacron[965]: Job `cron.daily' > >> terminated (mailing output) > >> Aug 30 14:41:21 siddharth-ThinkPad-T480 anacron[965]: anacron: Can't > >> find sendmail at /usr/sbin/sendmail, not mailing output > >> Aug 30 14:41:21 siddharth-ThinkPad-T480 anacron[965]: Can't find > >> sendmail at /usr/sbin/sendmail, not mailing output > >> Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > >> TLS key negotiation failed to occur within 60 seconds (check your > >> network connectivity) > >> Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > >> TLS handshake failed > >> Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: > >> SIGUSR1[soft,tls-error] received, process restarting > >> Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: Restart > >> pause, 2 second(s) > >> Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: WARNING: No > >> server certificate verification method has been enabled. See > >> http://openvpn.net/howto.html#mitm for more info. > >> Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: Socket > >> Buffers: R=[212992->212992] S=[212992->212992] > >> Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > >> local: [undef] > >> Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > >> remote: [AF_INET]128.105.21.208:1194 > >> Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > >> TLS key negotiation failed to occur within 60 seconds (check your > >> network connectivity) > >> Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > >> TLS handshake failed > >> Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: > >> SIGUSR1[soft,tls-error] received, process restarting > >> Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: Restart > >> pause, 2 second(s) > >> Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: WARNING: No > >> server certificate verification method has been enabled. See > >> http://openvpn.net/howto.html#mitm for more info. > >> Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: Socket > >> Buffers: R=[212992->212992] S=[212992->212992] > >> Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > >> local: [undef] > >> Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > >> remote: [AF_INET]128.105.21.208:1194 > >> Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > >> TLS key negotiation failed to occur within 60 seconds (check your > >> network connectivity) > >> Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > >> TLS handshake failed > >> Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: > >> SIGUSR1[soft,tls-error] received, process restarting > >> Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: Restart > >> pause, 2 second(s) > >> Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: WARNING: No > >> server certificate verification method has been enabled. See > >> http://openvpn.net/howto.html#mitm for more info. > >> Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: Socket > >> Buffers: R=[212992->212992] S=[212992->212992] > >> Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > >> local: [undef] > >> Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > >> remote: [AF_INET]128.105.21.208:1194 > >> > >> On performing ip a command inside SCION network, I can see only: *lo, > >> enp0s3 and docker0.* > >> > >> While in local machine I have: *lo, enp0s31f6, wlp3s0 and docker0.* > >> > >> Best, > >> Siddharth > >> > >> > >> On Fri, Aug 30, 2019 at 1:05 PM Juan A. García-Pardo < > juagargi(a)gmail.com> > >> wrote: > >> > >> > Hi Siddharth, > >> > We don't have any experience with OpenVPN for Windows. I would suggest > >> > these two steps to troubleshoot your setup: > >> > - Check with a VM that your user AS runs correctly. Since we have lots > >> of > >> > experience in Ubuntu 16.04, install first a VM like that, or eve > better, > >> > install the Vagrant-Virtual Box VM that you see being installed in the > >> > `run.sh` script in your configuration from the Coordinator. > >> > - If the previous step worked, check only the VPN connection. As you > >> were > >> > saying, it will probably fail. Tell us and we will investigate > further. > >> > Thanks and best regards, > >> > > >> > Juan A. > >> > > >> > > >> > On Fri, Aug 30, 2019 at 11:36 AM Siddharth Mehrotra < > >> the4daspect(a)gmail.com> > >> > wrote: > >> > > >> >> Hi all, > >> >> > >> >> I am trying to connect to SCION Lab via VPN. > >> >> > >> >> I am currently using Windows OS and have been able to run SCION > >> >> successfully but can't connect to SCION Lab. I added the config file > >> from > >> >> SCION folder to the OPEN VPN directory however I am unable to > connect & > >> >> can't find tun0. > >> >> > >> >> The error report from OPENVPN GUI is as: > >> >> > >> >> Fri Aug 30 09:24:22 2019 TCP/UDP: Preserving recently used remote > >> address: > >> >> [AF_INET]192.33.93.195:1194 > >> >> Fri Aug 30 09:24:22 2019 Socket Buffers: R=[65536->65536] > >> S=[65536->65536] > >> >> Fri Aug 30 09:24:22 2019 UDP link local: (not bound) > >> >> Fri Aug 30 09:24:22 2019 UDP link remote: [AF_INET] > 192.33.93.195:1194 > >> >> Fri Aug 30 09:24:22 2019 MANAGEMENT: >STATE:1567149862,WAIT,,,,,, > >> >> Fri Aug 30 09:25:22 2019 TLS Error: TLS key negotiation failed to > occur > >> >> within 60 seconds (check your network connectivity) > >> >> Fri Aug 30 09:25:22 2019 TLS Error: TLS handshake failed > >> >> Fri Aug 30 09:25:22 2019 SIGUSR1[soft,tls-error] received, process > >> >> restarting > >> >> Fri Aug 30 09:25:22 2019 MANAGEMENT: > >> >> >STATE:1567149922,RECONNECTING,tls-error,,,,, > >> >> Fri Aug 30 09:25:22 2019 Restart pause, 5 second(s) > >> >> > >> >> Not sure if I am doing something wrong or it's server error. > >> >> > >> >> > >> >> > >> > https://drive.google.com/file/d/1Tz8zgPEGBGmJNumdlj0FGUm1s3QH_6-a/view?usp=… > >> >> : Log File > >> >> > >> >> Best regards, > >> >> Siddharth > >> >> ----------------------------------------- > >> >> Siddharth Mehrotra > >> >> Graduate Student > >> >> Media Computing Group - i10 > >> >> RWTH Aachen University, Germany. > >> >> https://hci.rwth-aachen.de/mehrotra > >> >> < > >> >> > >> > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhci.rwth-… > >> >> > > >> >> _______________________________________________ > >> >> Scion mailing list > >> >> Scion(a)lists.inf.ethz.ch > >> >> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> >> > >> > > >> _______________________________________________ > >> Scion mailing list > >> Scion(a)lists.inf.ethz.ch > >> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> > > > _______________________________________________ > Scion mailing list > Scion(a)lists.inf.ethz.ch > https://lists.inf.ethz.ch/mailman/listinfo/scion >

1 0

Re: [Scion] Unable to connect to OpenVPN server
by Juan A. García-Pardo 06 Sep '19

06 Sep '19

Hi Siddharth, I just found the problem. Go to the Coordinator and attach your user AS to another point other than ISD18 (WISC). There is a problem with that attachment point for some time now, so don't use it. Thanks and regards, Juan A. On Fri, Aug 30, 2019 at 2:50 PM Siddharth Mehrotra <the4daspect(a)gmail.com> wrote: > HI Juan, > > I tried with standalone Ubuntu 16.04 machine now and it reports following > same error: > > Aug 30 14:41:21 siddharth-ThinkPad-T480 anacron[965]: Job `cron.daily' > terminated (mailing output) > Aug 30 14:41:21 siddharth-ThinkPad-T480 anacron[965]: anacron: Can't > find sendmail at /usr/sbin/sendmail, not mailing output > Aug 30 14:41:21 siddharth-ThinkPad-T480 anacron[965]: Can't find > sendmail at /usr/sbin/sendmail, not mailing output > Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > TLS key negotiation failed to occur within 60 seconds (check your > network connectivity) > Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > TLS handshake failed > Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: > SIGUSR1[soft,tls-error] received, process restarting > Aug 30 14:41:24 siddharth-ThinkPad-T480 ovpn-client[963]: Restart > pause, 2 second(s) > Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: WARNING: No > server certificate verification method has been enabled. See > http://openvpn.net/howto.html#mitm for more info. > Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: Socket > Buffers: R=[212992->212992] S=[212992->212992] > Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > local: [undef] > Aug 30 14:41:26 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > remote: [AF_INET]128.105.21.208:1194 > Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > TLS key negotiation failed to occur within 60 seconds (check your > network connectivity) > Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > TLS handshake failed > Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: > SIGUSR1[soft,tls-error] received, process restarting > Aug 30 14:42:27 siddharth-ThinkPad-T480 ovpn-client[963]: Restart > pause, 2 second(s) > Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: WARNING: No > server certificate verification method has been enabled. See > http://openvpn.net/howto.html#mitm for more info. > Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: Socket > Buffers: R=[212992->212992] S=[212992->212992] > Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > local: [undef] > Aug 30 14:42:29 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > remote: [AF_INET]128.105.21.208:1194 > Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > TLS key negotiation failed to occur within 60 seconds (check your > network connectivity) > Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: TLS Error: > TLS handshake failed > Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: > SIGUSR1[soft,tls-error] received, process restarting > Aug 30 14:43:29 siddharth-ThinkPad-T480 ovpn-client[963]: Restart > pause, 2 second(s) > Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: WARNING: No > server certificate verification method has been enabled. See > http://openvpn.net/howto.html#mitm for more info. > Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: Socket > Buffers: R=[212992->212992] S=[212992->212992] > Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > local: [undef] > Aug 30 14:43:31 siddharth-ThinkPad-T480 ovpn-client[963]: UDPv4 link > remote: [AF_INET]128.105.21.208:1194 > > On performing ip a command inside SCION network, I can see only: *lo, > enp0s3 and docker0.* > > While in local machine I have: *lo, enp0s31f6, wlp3s0 and docker0.* > > Best, > Siddharth > > > On Fri, Aug 30, 2019 at 1:05 PM Juan A. García-Pardo <juagargi(a)gmail.com> > wrote: > > > Hi Siddharth, > > We don't have any experience with OpenVPN for Windows. I would suggest > > these two steps to troubleshoot your setup: > > - Check with a VM that your user AS runs correctly. Since we have lots of > > experience in Ubuntu 16.04, install first a VM like that, or eve better, > > install the Vagrant-Virtual Box VM that you see being installed in the > > `run.sh` script in your configuration from the Coordinator. > > - If the previous step worked, check only the VPN connection. As you were > > saying, it will probably fail. Tell us and we will investigate further. > > Thanks and best regards, > > > > Juan A. > > > > > > On Fri, Aug 30, 2019 at 11:36 AM Siddharth Mehrotra < > the4daspect(a)gmail.com> > > wrote: > > > >> Hi all, > >> > >> I am trying to connect to SCION Lab via VPN. > >> > >> I am currently using Windows OS and have been able to run SCION > >> successfully but can't connect to SCION Lab. I added the config file > from > >> SCION folder to the OPEN VPN directory however I am unable to connect & > >> can't find tun0. > >> > >> The error report from OPENVPN GUI is as: > >> > >> Fri Aug 30 09:24:22 2019 TCP/UDP: Preserving recently used remote > address: > >> [AF_INET]192.33.93.195:1194 > >> Fri Aug 30 09:24:22 2019 Socket Buffers: R=[65536->65536] > S=[65536->65536] > >> Fri Aug 30 09:24:22 2019 UDP link local: (not bound) > >> Fri Aug 30 09:24:22 2019 UDP link remote: [AF_INET]192.33.93.195:1194 > >> Fri Aug 30 09:24:22 2019 MANAGEMENT: >STATE:1567149862,WAIT,,,,,, > >> Fri Aug 30 09:25:22 2019 TLS Error: TLS key negotiation failed to occur > >> within 60 seconds (check your network connectivity) > >> Fri Aug 30 09:25:22 2019 TLS Error: TLS handshake failed > >> Fri Aug 30 09:25:22 2019 SIGUSR1[soft,tls-error] received, process > >> restarting > >> Fri Aug 30 09:25:22 2019 MANAGEMENT: > >> >STATE:1567149922,RECONNECTING,tls-error,,,,, > >> Fri Aug 30 09:25:22 2019 Restart pause, 5 second(s) > >> > >> Not sure if I am doing something wrong or it's server error. > >> > >> > >> > https://drive.google.com/file/d/1Tz8zgPEGBGmJNumdlj0FGUm1s3QH_6-a/view?usp=… > >> : Log File > >> > >> Best regards, > >> Siddharth > >> ----------------------------------------- > >> Siddharth Mehrotra > >> Graduate Student > >> Media Computing Group - i10 > >> RWTH Aachen University, Germany. > >> https://hci.rwth-aachen.de/mehrotra > >> < > >> > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhci.rwth-… > >> > > >> _______________________________________________ > >> Scion mailing list > >> Scion(a)lists.inf.ethz.ch > >> https://lists.inf.ethz.ch/mailman/listinfo/scion > >> > > > _______________________________________________ > Scion mailing list > Scion(a)lists.inf.ethz.ch > https://lists.inf.ethz.ch/mailman/listinfo/scion >

2 1