ABX actions fail with the error "PAM:Authentication token is no longer valid"
search cancel

ABX actions fail with the error "PAM:Authentication token is no longer valid"

book

Article ID: 318376

calendar_today

Updated On:

Products

VMware Aria Suite

Issue/Introduction

Symptoms:
  • In the ABX service logs you see messages similar to: 
    abx-service [host='abx-service-app-xxxxxxxxx-xxxxx' thread='parallel-xx' user='' org='' trace='' component='GatewayActionProvider' method='convertExceptions:437' actionRunI
d='<UUID_1>' context='<UUID_2>' tokenId='<UUID_3>' parentTokenId='<UUID_4>'] c.v.a.a.p.i.g.Gate
wayActionProvider.convertExceptions:437 - Converting gateway provider exception to abx provider exception:
        com.vmware.automation.abx.serverless.gateway.exception.BuildImageException: ontext: [/workspace]
        ESC[36mINFOESC[0m[0015] COPY . /function/
        ESC[37mDEBUESC[0m[0015] Resolved . to .
        ESC[37mDEBUESC[0m[0015] Resolved /function/ to /function
        ESC[37mDEBUESC[0m[0015] Getting files and contents at root /workspace/ for /workspace
        ESC[37mDEBUESC[0m[0015] Copying file /workspace/Dockerfile to /function/Dockerfile
        ESC[37mDEBUESC[0m[0015] Copying file /workspace/abx_wrapper.py to /function/abx_wrapper.py
        ESC[36mINFOESC[0m[0015] RUN groupadd function
        ESC[36mINFOESC[0m[0015] cmd: /bin/sh
        ESC[36mINFOESC[0m[0015] args: [-c groupadd function]
        ESC[36mINFOESC[0m[0015] Running: [/bin/sh -c groupadd function]
        You are required to change your password immediately (password expired)
        groupadd: PAM: Authentication token is no longer valid; new one required
        error building image: error building stage: failed to execute command: waiting for process to exit: exit status


Environment

VMware vRealize Automation 8.4.x

Cause

The root password for the base ABX runner image has expired.

Resolution

This issue is resolved in vRealize Automation 8.4.2 GA and later versions.

Workaround:
  1. Create a valid set of snapshots for the appliance(s).
  2. Download the file under the Attachment(s) section named patch-abx-images.sh
  3. Copy this file to one of the vRA appliances within the cluster.
  4. Make the patch file executable 
    chmod a+x /tmp/patch-abx-images.sh
  5. Run the patch file 
    /tmp/patch-abx-images.sh
Note: The docker image backup operation will consume the most amount of time and may appear stuck with no progress bar, be patient while this operation completes.  Refer to the Operational Runtime note above for further details.


Additional Information

Impact/Risks:

Versions impacted

  • vRA 8.4.0
  • vRA 8.4.1

Operational Runtime

This script is expected to run within 15-30 minutes on production hardware.  If being run against lab equipment or hardware with higher compute or storage latency the expected average runtime is upwards of 1 hour.

Performing this activity will not cause any further impact to the availability of the underlying platform and/or services.

Attachments

patch-abx-images get_app
Powered by Wolken Software