Jail installation after upgrade to11.2 - stuck on DNSSEC validation

[Ckone]

Hi all ,
I have a question. when ißm tring to install a new plug-in - here clamav - ot stucks in the step DNSSEC validation for iocage-plugin.
What is it doing there? Reverse DNS looklup using DNSSEC?

 

[dlavigne]

Hard to tell without the exact error message. What appears in /var/log/messages when a plugin install fails?

 

[rhdd]

Same problem here. There is no error message. When trying to create a plugin (Sonarr in my case) it stucks with popup message "50.00% Testing DNSSEC response to iocage-plugins."

 

[rhdd]

Much later: "[EFAULT] Exception: CallError:[EFAULT] pkg error: - pkg-static: Repository iocage-plugins load error: access repo file(/var/db/pkg/repo-iocage-plugins.sqlite) failed: No such file or directory pkg-static: http://pkg.cdn.trueos.org/iocage/11.2-RELEASE/meta.txz: No address record pkg-static: http://pkg.cdn.trueos.org/iocage/11.2-RELEASE/packagesite.txz: No address record Please check your network occured, destroyed sonarr. "

 

[dlavigne]

Much later: "[EFAULT] Exception: CallError:[EFAULT] pkg error: - pkg-static: Repository iocage-plugins load error: access repo file(/var/db/pkg/repo-iocage-plugins.sqlite) failed: No such file or directory pkg-static: http://pkg.cdn.trueos.org/iocage/11.2-RELEASE/meta.txz: No address record pkg-static: http://pkg.cdn.trueos.org/iocage/11.2-RELEASE/packagesite.txz: No address record Please check your network occured, destroyed sonarr. "

That one is definitely a network error (most likely need to set your DNS server in Network -> Global Configuration).

 

[rhdd]

The problem occurs an production system which is running for almost 5 years now. Sure there are DNS servers configured. It has 8 warden jails, samba, incoming and outgoing backups, samba/AD and no problems with all that.
The only problem is that iocage jails cannot be created with 11.2.

 

[Bmck26]

I'm getting the same errors when trying to install plugins with a static ip. So far it only works if I use DHCP then change the network config from the cli afterwards. I use term "works" loosely. The process never really completes in the UI. It's sits at 75% until it logs me out. It shows the plugin as being installed after I refresh the browser and log back in.

 

[rhdd]

Same problem here: https://forums.freenas.org/index.ph...-be-reached-via-dns-check-your-network.69974/

 

[rhdd]

Ticket: https://redmine.ixsystems.com/issues/64449

 

[Ckone]

Just one hint. At me it appeared as i tried to use a VLAN Interface with a jail. getting back to traditional interface it worked.

 

[jimboooooo]

I was able to get around this issue by creating the plugin jail via CLI. I have DHCP setup and IP/MAC reservations on my router set so I need to be able to set the mac address of the interface so the jail will get a dhcp lease before getting to that dnssec validation.

my router ip: 192.168.1.1
the mac address associated with the IP I want: 02:ff:60:00:05:00

Code:

iocage fetch --plugins vnet=on allow_raw_sockets=1 bpf=yes dhcp=on defaultrouter="192.168.1.1" vnet0_mac="02ff60000501","02ff60000500"

#enter number to choose which plugin

What helped: https://forums.freenas.org/index.ph...erent-mac-address-for-ether-and-hwaddr.68857/