Codewort Ant after Updating OS packages where to start

[Sascha_Muller]

Hi folks, is there still a known Docker problem?

I updated everything on my server machine today and since then I’ve been getting the code word “ant.” Always during the freshness check, etc.

I can try to describe my setup, but it’s complicated. Foreword to the setup

1. Server machine hosts Docker container

2. Because :443 was already assigned, I was only able to get the Teddycloud server running with macvlan

3. This means that pings do not arrive from the server itself in the container, but I can still access the web interface via the container IP (I don’t recall anymore but I have also tried to bridge that macvlan but as said ping for example doesn’t work)

In any case, when I update via dietpi, the docker daemon is stopped, so the update doesn’t work completely because pihole disappears and I then switch to the FRITZ!Box as the DNS server. Then I pulled the updates back, switched back, and now it’s just code word ant.

I’m not sure right now whether the Tonieboxes can reach the Teddycloud server. The IP address can’t have changed because there is a fixed IP in docker compose.

I found the Toniebox IP address myself via the FRITZ!Box and can ping it.

The container logs always say “skipped client,” so there must be some reason why the boxes are suddenly being ignored, but unfortunately there are no real errors otherwise.

I can access the web interface via tc.fritz.box using another client, such as a smartphone, but only with http. With https, I get a 401 unauthorized error.

What is the best way to proceed now? In the Teddycloud web interface, boxine and teddycloud are green. Btw teddycloud server image is 0.6.4

INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0204:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0197:read_certificate| File '/teddycloud/certs/client/685e1c55f8da/ca.der' detected as DER style CERTIFICATE
INFO |tls_adapter.c:0197:read_certificate| File '/teddycloud/certs/client/685e1c55f8da/client.der' detected as DER style CERTIFICATE
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/685e1c55f8da/private.der' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0204:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0204:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0197:read_certificate| File '/teddycloud/certs/client/e06234ecc2b4/ca.der' detected as DER style CERTIFICATE
INFO |tls_adapter.c:0197:read_certificate| File '/teddycloud/certs/client/e06234ecc2b4/client.der' detected as DER style CERTIFICATE
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/e06234ecc2b4/private.der' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0390:tls_adapter_init| Loading certificates...
INFO |tls_adapter.c:0204:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0204:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
INFO |tls_adapter.c:0197:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
INFO |tls_adapter.c:0197:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
INFO |toniesJson.c:0280:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
INFO |toniesJson.c:0280:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 5886339
INFO |toniesJson.c:0100:tonies_update| Updating tonies.json from api.revvox.de...
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server api.revvox.de:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 157.90.183.226
INFO |cloud_request.c:0389:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonies.json
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 185.199.110.133
INFO |toniesJson.c:0124:tonies_update| ... success updating tonies.json from api.revvox.de, reloading
INFO |toniesJson.c:0280:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
INFO |toniesJson.c:0280:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 5886339
INFO |toniesJson.c:0211:tonieboxes_update| Updating tonies.json from api.revvox.de...
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server api.revvox.de:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 157.90.183.226
INFO |cloud_request.c:0389:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonieboxes.json
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 185.199.109.133
INFO |toniesJson.c:0238:tonieboxes_update| ... success updating tonieboxes.json from api.revvox.de, reloading
INFO |toniesJson.c:0280:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
INFO |toniesJson.c:0280:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 5886339
INFO |server.c:0931:server_init| 1 open HTTPS Web connections
INFO |server.c:0931:server_init| 2 open HTTPS Web connections
INFO |handler_api.c:2389:handleApiTonieboxJson| Trying to read /teddycloud/config/tonieboxes.json with size 3022
INFO |server.c:0931:server_init| 6 open HTTPS Web connections
INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
INFO |mqtt.c:0690:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
INFO |mqtt.c:0690:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
INFO |handler_api.c:2389:handleApiTonieboxJson| Trying to read /teddycloud/config/tonieboxes.json with size 3022
INFO |handler_api.c:2389:handleApiTonieboxJson| Trying to read /teddycloud/config/tonieboxes.json with size 3022
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 18.156.186.144
INFO |cloud_request.c:0486:web_request| Response: '1771173060'
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 3.69.182.181
INFO |cloud_request.c:0486:web_request| Response: '1771173061'
INFO |server.c:0931:server_init| 5 open HTTPS Web connections
INFO |server.c:0931:server_init| 4 open HTTPS Web connections
INFO |server.c:0931:server_init| 0 open HTTPS Web connections
INFO |server.c:0931:server_init| 1 open HTTPS Web connections
INFO |server.c:0931:server_init| 2 open HTTPS Web connections
INFO |handler_api.c:2389:handleApiTonieboxJson| Trying to read /teddycloud/config/tonieboxes.json with size 3022
INFO |server.c:0931:server_init| 6 open HTTPS Web connections
INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
INFO |mqtt.c:0690:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
INFO |mqtt.c:0690:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 3.74.99.150
INFO |handler_api.c:2389:handleApiTonieboxJson| Trying to read /teddycloud/config/tonieboxes.json with size 3022
INFO |handler_api.c:2389:handleApiTonieboxJson| Trying to read /teddycloud/config/tonieboxes.json with size 3022
INFO |cloud_request.c:0486:web_request| Response: '1771173468'
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 3.69.182.181
INFO |cloud_request.c:0486:web_request| Response: '1771173470'
INFO |server.c:0931:server_init| 5 open HTTPS Web connections
INFO |server.c:0931:server_init| 4 open HTTPS Web connections
INFO |server.c:0931:server_init| 0 open HTTPS Web connections
INFO |server.c:0961:server_init| 1 open HTTPS API connections
WARN |tls_server_fsm.c:0260:tlsPerformServerHandshake| TLS handshake failure!
INFO |server.c:0961:server_init| 0 open HTTPS API connections
INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
INFO |mqtt.c:0690:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
INFO |mqtt.c:0690:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
INFO |cloud_request.c:0200:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
INFO |cloud_request.c:0252:web_request|   trying IP: 3.69.182.181
INFO |cloud_request.c:0252:web_request|   trying IP: 3.69.182.181
INFO |cloud_request.c:0486:web_request| Response: '1771175178'
INFO |cloud_request.c:0486:web_request| Response: '1771175178'
INFO |server.c:0961:server_init| 2 open HTTPS API connections
WARN |tls_server_fsm.c:0260:tlsPerformServerHandshake| TLS handshake failure!
WARN |tls_server_fsm.c:0260:tlsPerformServerHandshake| TLS handshake failure!
INFO |server.c:0961:server_init| 0 open HTTPS API connections
INFO |server.c:0961:server_init| 1 open HTTPS API connections
WARN |server_helpers.c:0831:httpServerUriUnauthorizedCallback|  >> 401 on /web
WARN |server_helpers.c:0831:httpServerUriUnauthorizedCallback|  >> 401 on /favicon.ico
INFO |server.c:0961:server_init| 0 open HTTPS API connections

Edit: I also tried to execute tcpdump on the server machine and check for packets from toniebox ip during freshness check and couldn’t see anything arrive at the server.

[abandenfels]

You mentioned pihole. Are you running a local dns server? And have you set up some dns resolve for prod.de.tbs.toys and rtnl.bxcl.de? Recently I also had an issue and reading the introduction of this blog post helped me to find the problem:

Teddycloud CC3235 Newbie HowTo

Hi there, within this post I try to make a documentation how to set up Teddycloud on a CC3235 Box. Read the official documentation as well Proceed at your own risk (which is quite low) Intro Only two weeks ago I bought my first Toniebox ever with the goal to patch it and run Teddycloud. I finally succeeded but the process was a LOT of trial & error. Furthermore I had to search and read on dozens of dif…

[henryk]

Why are you using an outdated teddycloud?

[Sascha_Muller]

@henryk that’s a valid point but since the teddycloud itself isn’t reachable via internet I didn’t felt the rush to keep it always up to date as everything works just fine.

I did the local dns entries @abandenfels now but unfortunately I changed another thing too (today in the morning it seems in the end it was a provider issue why dns wasn’t working but I expected another hiccup from my updates so I changed pihole to network mode host and it legit runs now the dns commands also against the server ip instead of a docker ip which forwards the dns messages into the container via bridges ) so I don’t know what of both changes was the crucial one but now the tonieboxes survive the freshness check again and everything works just fine so please tell me if I need to close the thread or someoneelse but no problem anymore even though not exactly sure what of both was the solution. Nslookup on my own machine returns the upstream addresses not the one from teddycloud instance but I don’t care as long as it works