# Kitchen-docker + Oracle Linux 5 converge error: closed stream

**URL:** <https://discourse.chef.io/t/kitchen-docker-oracle-linux-5-converge-error-closed-stream/6512>\
**Category:** Chef Infra (archive)\
**Created:** [April 22, 2015, 4:57pm UTC](https://discourse.chef.io/t/kitchen-docker-oracle-linux-5-converge-error-closed-stream/6512 "2015-04-22T16:57:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Morgan\_Blackthorne](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/morgan_blackthorne/32/100_2.png) [@Morgan\_Blackthorne](https://discourse.chef.io/u/Morgan_Blackthorne)\
**Post date:** [April 22, 2015, 4:57pm UTC](https://discourse.chef.io/t/kitchen-docker-oracle-linux-5-converge-error-closed-stream/6512/1 "2015-04-22T16:57:59Z")

</div>

[https://gist.github.com/stormerider/c92325be6cd0931f3e36](https://gist.github.com/stormerider/c92325be6cd0931f3e36)

Has anyone seen this kind of thing before? I’m really not sure what’s going  
on there. As far as I can tell, for some reason during the run, the docker  
container seems to just go away. I’m not sure if that’s because chef-solo  
failed and it terminated automatically, or if TK reaped it because it lost  
communication, or what.

If I restart the container, I’m able to run chef-solo fine:

root@433af12cc045:/tmp/kitchen# chef-solo -c solo.rb -j dna.json  
[2015-04-22T16:54:44+00:00] WARN:

* * *

- 
  - 

SSL validation of HTTPS requests is disabled. HTTPS connections are still  
encrypted, but chef is not able to detect forged replies or man in the  
middle  
attacks.

To fix this issue add an entry like this to your configuration file:

```auto
  # Verify all HTTPS connections (recommended)
  ssl_verify_mode :verify_peer

  # OR, Verify only connections to chef-server
  verify_api_cert true

```

To check your SSL configuration, or troubleshoot errors, you can use the  
`knife ssl check` command like so:

```auto
  knife ssl check -c solo.rb

```

* * *

- 
  - 

Starting Chef Client, version 11.16.4  
Compiling Cookbooks…  
Recipe: ohai::default

- remote\_directory[/etc/chef/ohai\_plugins for cookbook ohai] action create  
Recipe: 

- ohai[custom\_plugins] action reload[2015-04-22T16:54:45+00:00] WARN:  
Plugin Definition Error: \</etc/chef/ohai\_plugins/packages.rb\>: collect\_data  
already defined on platform linux

- package[subversion] action install (up to date)  
Converging 94 resources  
Recipe: ohai::default

- remote\_directory[/etc/chef/ohai\_plugins for cookbook ohai] action  
nothing (skipped due to action :nothing)

- ohai[custom\_plugins] action nothing (skipped due to action :nothing)  
Recipe: RS-DCS-Ohai-Plugins::default

- file[/etc/chef/ohai\_plugins/mysql-databases.rb] action delete (up to  
date)

- ohai[reload] action nothing (skipped due to action :nothing)

- cookbook\_file[/etc/chef/ohai\_plugins/databases-mysql.rb] action create  
(up to date)

- cookbook\_file[/etc/chef/ohai\_plugins/packages.rb] action create (up to  
date)  
Recipe: logrotate::default

- package[logrotate] action install (up to date)

- directory[/etc/logrotate.d] action create (up to date)  
Recipe: chef-client::config

- template[/etc/logrotate.d/chef-client] action create (up to date)

- directory[/var/run/chef] action create (up to date)

- directory[/var/cache/chef] action create (up to date)

- directory[/var/lib/chef] action create (up to date)

- directory[/var/log/chef] action create (up to date)

- directory[/etc/chef] action create (up to date)

- file[/var/log/chef/client.log] action create (up to date)

- template[/etc/chef/client.rb] action create (up to date)

- directory[/etc/chef/client.d] action create (up to date)

- ruby\_block[reload\_client\_config] action nothing (skipped due to action  
:nothing)  
Recipe: RS-DCS-Base::default

- sudo[45-nagios-checks] action install

- template[/etc/sudoers.d/45-nagios-checks] action nothing (skipped due  
to action :nothing)

- package[nss] action install (up to date)

- package[pam\_krb5] action install (up to date)

- package[krb5-workstation] action install (up to date)

- package[nss-tools] action install (up to date)

- package[pam\_passwdqc] action install (up to date)

- package[cracklib] action install (up to date)

- package[net-snmp] action install (up to date)

- package[ntp] action install (up to date)

- package[nscd] action install (up to date)

- package[rwho] action install (up to date)

- package[vixie-cron] action install (up to date)

- package[anacron] action install (up to date)

- package[crontabs] action install (up to date)

- package[authconfig] action install (up to date)

- package[sudo] action install (up to date)

- package[screen] action install (up to date)

- package[less] action install (up to date)

- package[subversion] action install (up to date)

- package[strace] action install (up to date)

- package[resolvconf] action remove (up to date)

- link[/etc/init.d/ssh] action create (up to date)

- template[/etc/pam.d/system-auth-ac] action create (up to date)

- template[/etc/profile.d/bashrc.sh] action create (up to date)

- template[/etc/krb5.conf] action create (up to date)

- template[/etc/ldap.conf] action create (up to date)

- link[/etc/libnss-ldap.conf] action create (up to date)

- link[/etc/pam\_ldap.conf] action create (up to date)

- cookbook\_file[/etc/nsswitch.conf] action create (up to date)

- template[/etc/resolv.conf] action create (up to date)

- execute[nssupdate] action nothing (skipped due to action :nothing)

- template[/etc/snmp/snmpd.conf] action create (up to date)

- template[/etc/default/snmpd] action create (up to date)

- service[snmpd] action enable (up to date)

- cron[ntpdate] action create (up to date)

- directory[/usr/local/scripts] action create (up to date)

- package[subversion] action nothing (skipped due to action :nothing)

- bash[rehome-sysadmin-svn-if-needed] action run

- subversion[SysAdmin] action sync (up to date)

- ruby\_block[svn\_config\_fix] action run

- group[cacti] action create (up to date)

- user[cacti] action create (up to date)

- directory[/home/cacti/.ssh/] action create (up to date)

- cookbook\_file[/home/cacti/.ssh/authorized\_keys] action create (up to  
date)

- cookbook\_file[/etc/ssh/sshd\_config] action create (skipped due to  
only\_if)

- service[ssh] action nothing (skipped due to action :nothing)

- execute[delete\_ssh\_keys\_if\_needed] action run (skipped due to only\_if)

- execute[generate\_new\_ssh\_host\_keys] action nothing (skipped due to  
action :nothing)

- file[/etc/RosettaStone/FRESH\_CLONE] action delete (skipped due to  
only\_if)

- cookbook\_file[/etc/update-motd.d/98-chef-role] action create (skipped  
due to only\_if)

- directory[/etc/cron.scripts] action create (up to date)

- cookbook\_file[/etc/cron.scripts/logerror] action create (up to date)

- service[nscd] action restart

- service[nscd] action enable (up to date)

- cookbook\_file[/usr/local/bin/chef-boot] action create (up to date)

- cookbook\_file[/usr/local/bin/chef-dryrun] action create (up to date)

- cookbook\_file[/usr/local/bin/chef-run] action create (up to date)

- cookbook\_file[/usr/local/bin/jq] action create (up to date)  
Recipe: RS-DCS-Base::oracle\_linux\_all\_versions

- cookbook\_file[/etc/sudoers] action create (up to date)

- link[/usr/bin/vi] action create (up to date)  
Recipe: RS-DCS-Base::oracle\_linux\_5

- package[gpm] action remove (up to date)

- package[vim-enhanced] action remove (up to date)

- package[bluez-gnome] action remove (up to date)

- package[bluez-libs] action remove (up to date)

- package[bluez-utils] action remove (up to date)

- package[xorg-x11-utils] action install (up to date)

- package[xorg-x11-xinit] action install (up to date)

- package[xorg-x11-xauth] action install (up to date)

- package[xorg-x11-apps] action install (up to date)

- cookbook\_file[/etc/modprobe.d/disable-ipv6.conf] action create (up to  
date)

- ruby\_block[append\_special\_oracle\_ldap\_auth\_string] action run

- file[/etc/openldap/ldap.conf] action delete (skipped due to not\_if)

- link[/etc/openldap/ldap.conf-link] action create (up to date)

- service[ip6tables] action stop (up to date)

- service[ip6tables] action disable (up to date)

- ruby\_block[disable-ipv6] action run

- cookbook\_file[/etc/selinux/config] action create (up to date)

- service[iptables] action stop (up to date)

- service[iptables] action disable (up to date)  
Recipe: RS-DCS-Base::default

- execute[nssupdate] action run (skipped due to only\_if)

- service[nscd] action restart

Running handlers:  
Running handlers complete  
Chef Client finished, 8/90 resources updated in 5.434002998 seconds  
root@433af12cc045:/tmp/kitchen#

Any thoughts appreciated, I’m very much at a loss as to what’s occurring  
here.

–  
~_~ StormeRider ~_~

“Every world needs its heroes […] They inspire us to be better than we  
are. And they protect from the darkness that’s just around the corner.”

(from Smallville Season 6x1: “Zod”)

On why I hate the phrase “that’s so lame”… [http://bit.ly/Ps3uSS](http://bit.ly/Ps3uSS)

---

<div class="post-metadata">

**Author:** ![Morgan\_Blackthorne](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/morgan_blackthorne/32/100_2.png) [@Morgan\_Blackthorne](https://discourse.chef.io/u/Morgan_Blackthorne)\
**Post date:** [April 27, 2015, 7:38pm UTC](https://discourse.chef.io/t/kitchen-docker-oracle-linux-5-converge-error-closed-stream/6512/2 "2015-04-27T19:38:38Z")

</div>

Does anyone have any idea how I can debug this issue? Does docker keep a  
log of container spinups/commands/etc., beyond what the kitchen log would  
show? As you can see in the gist, the Kitchen log doesn't really show much  
more than inside the kitchen verify.

I'm stumped as to what's going on and could really use some assistance in  
how to best go about debugging this, because I'm at a total loss.

--  
~_~ StormeRider ~_~

"Every world needs its heroes [...] They inspire us to be better than we  
are. And they protect from the darkness that's just around the corner."

(from Smallville Season 6x1: "Zod")

On why I hate the phrase "that's so lame"... [http://bit.ly/Ps3uSS](http://bit.ly/Ps3uSS)

On Wed, Apr 22, 2015 at 9:57 AM, Morgan Blackthorne [stormerider@gmail.com](mailto:stormerider@gmail.com)  
wrote:

> [https://gist.github.com/stormerider/c92325be6cd0931f3e36](https://gist.github.com/stormerider/c92325be6cd0931f3e36)
> 
> Has anyone seen this kind of thing before? I'm really not sure what's  
> going on there. As far as I can tell, for some reason during the run, the  
> docker container seems to just go away. I'm not sure if that's because  
> chef-solo failed and it terminated automatically, or if TK reaped it  
> because it lost communication, or what.
> 
> If I restart the container, I'm able to run chef-solo fine:
> 
> root@433af12cc045:/tmp/kitchen# chef-solo -c solo.rb -j dna.json  
> [2015-04-22T16:54:44+00:00] WARN:
> 
> * * *
> 
> * * *
> 
> SSL validation of HTTPS requests is disabled. HTTPS connections are still  
> encrypted, but chef is not able to detect forged replies or man in the  
> middle  
> attacks.
> 
> To fix this issue add an entry like this to your configuration file:
> 
> ```auto
> # Verify all HTTPS connections (recommended)
> ssl_verify_mode :verify_peer
> 
> # OR, Verify only connections to chef-server
> verify_api_cert true
> 
> ```
> 
> To check your SSL configuration, or troubleshoot errors, you can use the  
> `knife ssl check` command like so:
> 
> ```auto
> knife ssl check -c solo.rb
> 
> ```
> 
> * * *
> 
> * * *
> 
> Starting Chef Client, version 11.16.4  
> Compiling Cookbooks...  
> Recipe: ohai::default
> 
> - remote\_directory[/etc/chef/ohai\_plugins for cookbook ohai] action  
> create  
> Recipe: 
> 
> - ohai[custom\_plugins] action reload[2015-04-22T16:54:45+00:00] WARN:  
> Plugin Definition Error: \</etc/chef/ohai\_plugins/packages.rb\>: collect\_data  
> already defined on platform linux
> 
> - package[subversion] action install (up to date)  
> Converging 94 resources  
> Recipe: ohai::default
> 
> - remote\_directory[/etc/chef/ohai\_plugins for cookbook ohai] action  
> nothing (skipped due to action :nothing)
> 
> - ohai[custom\_plugins] action nothing (skipped due to action :nothing)  
> Recipe: RS-DCS-Ohai-Plugins::default
> 
> - file[/etc/chef/ohai\_plugins/mysql-databases.rb] action delete (up to  
> date)
> 
> - ohai[reload] action nothing (skipped due to action :nothing)
> 
> - cookbook\_file[/etc/chef/ohai\_plugins/databases-mysql.rb] action create  
> (up to date)
> 
> - cookbook\_file[/etc/chef/ohai\_plugins/packages.rb] action create (up to  
> date)  
> Recipe: logrotate::default
> 
> - package[logrotate] action install (up to date)
> 
> - directory[/etc/logrotate.d] action create (up to date)  
> Recipe: chef-client::config
> 
> - template[/etc/logrotate.d/chef-client] action create (up to date)
> 
> - directory[/var/run/chef] action create (up to date)
> 
> - directory[/var/cache/chef] action create (up to date)
> 
> - directory[/var/lib/chef] action create (up to date)
> 
> - directory[/var/log/chef] action create (up to date)
> 
> - directory[/etc/chef] action create (up to date)
> 
> - file[/var/log/chef/client.log] action create (up to date)
> 
> - template[/etc/chef/client.rb] action create (up to date)
> 
> - directory[/etc/chef/client.d] action create (up to date)
> 
> - ruby\_block[reload\_client\_config] action nothing (skipped due to action  
> :nothing)  
> Recipe: RS-DCS-Base::default
> 
> - sudo[45-nagios-checks] action install
> 
> - template[/etc/sudoers.d/45-nagios-checks] action nothing (skipped due  
> to action :nothing)
> 
> - package[nss] action install (up to date)
> 
> - package[pam\_krb5] action install (up to date)
> 
> - package[krb5-workstation] action install (up to date)
> 
> - package[nss-tools] action install (up to date)
> 
> - package[pam\_passwdqc] action install (up to date)
> 
> - package[cracklib] action install (up to date)
> 
> - package[net-snmp] action install (up to date)
> 
> - package[ntp] action install (up to date)
> 
> - package[nscd] action install (up to date)
> 
> - package[rwho] action install (up to date)
> 
> - package[vixie-cron] action install (up to date)
> 
> - package[anacron] action install (up to date)
> 
> - package[crontabs] action install (up to date)
> 
> - package[authconfig] action install (up to date)
> 
> - package[sudo] action install (up to date)
> 
> - package[screen] action install (up to date)
> 
> - package[less] action install (up to date)
> 
> - package[subversion] action install (up to date)
> 
> - package[strace] action install (up to date)
> 
> - package[resolvconf] action remove (up to date)
> 
> - link[/etc/init.d/ssh] action create (up to date)
> 
> - template[/etc/pam.d/system-auth-ac] action create (up to date)
> 
> - template[/etc/profile.d/bashrc.sh] action create (up to date)
> 
> - template[/etc/krb5.conf] action create (up to date)
> 
> - template[/etc/ldap.conf] action create (up to date)
> 
> - link[/etc/libnss-ldap.conf] action create (up to date)
> 
> - link[/etc/pam\_ldap.conf] action create (up to date)
> 
> - cookbook\_file[/etc/nsswitch.conf] action create (up to date)
> 
> - template[/etc/resolv.conf] action create (up to date)
> 
> - execute[nssupdate] action nothing (skipped due to action :nothing)
> 
> - template[/etc/snmp/snmpd.conf] action create (up to date)
> 
> - template[/etc/default/snmpd] action create (up to date)
> 
> - service[snmpd] action enable (up to date)
> 
> - cron[ntpdate] action create (up to date)
> 
> - directory[/usr/local/scripts] action create (up to date)
> 
> - package[subversion] action nothing (skipped due to action :nothing)
> 
> - bash[rehome-sysadmin-svn-if-needed] action run
> 
> - subversion[SysAdmin] action sync (up to date)
> 
> - ruby\_block[svn\_config\_fix] action run
> 
> - group[cacti] action create (up to date)
> 
> - user[cacti] action create (up to date)
> 
> - directory[/home/cacti/.ssh/] action create (up to date)
> 
> - cookbook\_file[/home/cacti/.ssh/authorized\_keys] action create (up to  
> date)
> 
> - cookbook\_file[/etc/ssh/sshd\_config] action create (skipped due to  
> only\_if)
> 
> - service[ssh] action nothing (skipped due to action :nothing)
> 
> - execute[delete\_ssh\_keys\_if\_needed] action run (skipped due to only\_if)
> 
> - execute[generate\_new\_ssh\_host\_keys] action nothing (skipped due to  
> action :nothing)
> 
> - file[/etc/RosettaStone/FRESH\_CLONE] action delete (skipped due to  
> only\_if)
> 
> - cookbook\_file[/etc/update-motd.d/98-chef-role] action create (skipped  
> due to only\_if)
> 
> - directory[/etc/cron.scripts] action create (up to date)
> 
> - cookbook\_file[/etc/cron.scripts/logerror] action create (up to date)
> 
> - service[nscd] action restart
> 
> - service[nscd] action enable (up to date)
> 
> - cookbook\_file[/usr/local/bin/chef-boot] action create (up to date)
> 
> - cookbook\_file[/usr/local/bin/chef-dryrun] action create (up to date)
> 
> - cookbook\_file[/usr/local/bin/chef-run] action create (up to date)
> 
> - cookbook\_file[/usr/local/bin/jq] action create (up to date)  
> Recipe: RS-DCS-Base::oracle\_linux\_all\_versions
> 
> - cookbook\_file[/etc/sudoers] action create (up to date)
> 
> - link[/usr/bin/vi] action create (up to date)  
> Recipe: RS-DCS-Base::oracle\_linux\_5
> 
> - package[gpm] action remove (up to date)
> 
> - package[vim-enhanced] action remove (up to date)
> 
> - package[bluez-gnome] action remove (up to date)
> 
> - package[bluez-libs] action remove (up to date)
> 
> - package[bluez-utils] action remove (up to date)
> 
> - package[xorg-x11-utils] action install (up to date)
> 
> - package[xorg-x11-xinit] action install (up to date)
> 
> - package[xorg-x11-xauth] action install (up to date)
> 
> - package[xorg-x11-apps] action install (up to date)
> 
> - cookbook\_file[/etc/modprobe.d/disable-ipv6.conf] action create (up to  
> date)
> 
> - ruby\_block[append\_special\_oracle\_ldap\_auth\_string] action run
> 
> - file[/etc/openldap/ldap.conf] action delete (skipped due to not\_if)
> 
> - link[/etc/openldap/ldap.conf-link] action create (up to date)
> 
> - service[ip6tables] action stop (up to date)
> 
> - service[ip6tables] action disable (up to date)
> 
> - ruby\_block[disable-ipv6] action run
> 
> - cookbook\_file[/etc/selinux/config] action create (up to date)
> 
> - service[iptables] action stop (up to date)
> 
> - service[iptables] action disable (up to date)  
> Recipe: RS-DCS-Base::default
> 
> - execute[nssupdate] action run (skipped due to only\_if)
> 
> - service[nscd] action restart
> 
> Running handlers:  
> Running handlers complete  
> Chef Client finished, 8/90 resources updated in 5.434002998 seconds  
> root@433af12cc045:/tmp/kitchen#
> 
> Any thoughts appreciated, I'm very much at a loss as to what's occurring  
> here.
> 
> --  
> ~_~ StormeRider ~_~
> 
> "Every world needs its heroes [...] They inspire us to be better than we  
> are. And they protect from the darkness that's just around the corner."
> 
> (from Smallville Season 6x1: "Zod")
> 
> On why I hate the phrase "that's so lame"... [http://bit.ly/Ps3uSS](http://bit.ly/Ps3uSS)