Sonarr/Radarr (probably other *arr) jails unable to verify SSL certificates after latest update

SlackerDude

Explorer
Joined
Feb 1, 2014
Messages
76

SlackerDude

Explorer
Joined
Feb 1, 2014
Messages
76
Went to the trouble of a full password reset and logging into the forums for the first time in years just to say THANK YOU. This was the fix and many thanks for saving me time and stress!
You are quite welcome, and Wow! I appreciate the effort just to let me know that.
 

jax

Cadet
Joined
Apr 16, 2022
Messages
3
Hey Folks,

The help is greatly appreciated as I too am experiencing this cert issue, but I can't even get past the install of wget.

I'm stumped, any suggestions? Thanks

root@sonarr:/ # pkg install wget
Updating iocage-plugins repository catalogue...
iocage-plugins repository is up to date.
All repositories are up to date.
pkg: No packages available to install matching 'wget' have been found in the repositories
root@sonarr:/ #

root@sonarr:/ # pkg update
Updating iocage-plugins repository catalogue...
iocage-plugins repository is up to date.
All repositories are up to date.
root@sonarr:/ #

root@sonarr:/ # pkg update -f
Updating iocage-plugins repository catalogue...
[sonarr] Fetching meta.txz: 100% 940 B 0.9kB/s 00:01
[sonarr] Fetching packagesite.txz: 100% 296 KiB 302.7kB/s 00:01
Processing entries: 100%
iocage-plugins repository update completed. 1467 packages processed.
All repositories are up to date.

root@sonarr:/ # pkg install wget
Updating iocage-plugins repository catalogue...
[sonarr] Fetching meta.txz: 100% 940 B 0.9kB/s 00:01
iocage-plugins repository is up to date.
All repositories are up to date.
pkg: No packages available to install matching 'wget' have been found in the repositories
root@sonarr:/ #

== == == == == == == == == ==
Intel(R) Pentium(R) CPU G3240 @ 3.10GHz
16GB ECC Ram
8 WD Red Nas 4Tb
TrueNAS-12.0-U8.1
 

jax

Cadet
Joined
Apr 16, 2022
Messages
3
Never mind, I was able to get it to work with the help of this post...


Thanks everyone.
 

SlackerDude

Explorer
Joined
Feb 1, 2014
Messages
76
Never mind, I was able to get it to work with the help of this post...


Thanks everyone.
Sorry I only saw this today, Jax. It sounds like your issue was a bit more complex than mine. Thanks for sharing the solution you found, others will no doubt benefit from it.
 

legionfalls

Cadet
Joined
Sep 3, 2016
Messages
1
I found this worked for me:
Certificate fix for Jackett, Sonarr, & Radarr
Run these two lines from inside the jail shell: ( wget was not installed in my jails)
Code:
pkg install wget

Code:
wget -O - https://curl.haxx.se/ca/cacert.pem | cert-sync --user /dev/stdin

Stop the jail
and then...
This from inside the TrueNAS shell:
Code:
cp -R /mnt/media/iocage/jails/jackett_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:
cp -R /mnt/media/iocage/jails/radarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:
cp -R /mnt/media/iocage/jails/sonarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono
Thank you SO much. Worked perfectly, just had to change around the paths in the
Code:
cp -r
command (obviously)
 

SlackerDude

Explorer
Joined
Feb 1, 2014
Messages
76
Thank you SO much. Worked perfectly, just had to change around the paths in the
Code:
cp -r
command (obviously)
Happy to hear my workaround solution helped you. :smile:
 

Chlorus

Dabbler
Joined
Feb 21, 2020
Messages
11
I'm not using the sonarr plugin directly, but I am using it in a jail alongside radarr & lidarr, but I've got a similar trust issue.
I've got a local root CA that I use for all my stuff-
I was able to add pretty easily to radarr via certmgr to /usr/share/.mono/certs/Trust which works just fine, but sonarr isn't seeing it, presumably because it uses a different mono install.
Trouble is, I can't find out where the trust store for that is supposed to live - I've tried copying to /usr/local/share, /usr/local/share/.mono, /usr/local/share/sonarr/.mono, even ./root/.config/.mono/ out of desperation, but it never seems to pick it up.

Any theories where that trust store lives?
Code:
/usr/local/bin/mono --debug /usr/local/share/sonarr/bin/Sonarr.exe --nobrowser --data=/usr/
/usr/local/bin/mono --version
Mono JIT compiler version 6.8.0.123 (tarball Mon Jul  4 01:22:35 UTC 2022)
Copyright (C) 2002-2014 Novell, Inc, Xamarin Inc and Contributors. www.mono-project.com
        TLS:           __thread
        SIGSEGV:       altstack
        Notification:  kqueue
        Architecture:  amd64
        Disabled:      none
        Misc:          softdebug
        Interpreter:   yes
        LLVM:          supported, not enabled.
        Suspend:       preemptive
        GC:            sgen (concurrent by default)


I know I probably should just bite the bullet and split them out into separate jails & use jackett, but I'd like to understand what's going on here first.
 

Pancackewaffle

Dabbler
Joined
Aug 19, 2017
Messages
41
This issue was really bothering me and was just random; couldn't update Jackett for some reason, indexers all failed but this fix worked for me.

As an additional note, ensure that when you copy to your iocage jails that you select the running release you have. In my case I have a mix of 12.1, 12.2, and 12.3. I ran the same CP command for all 3 versions.
 

egdm

Cadet
Joined
Sep 8, 2023
Messages
1
I found this worked for me:
Certificate fix for Jackett, Sonarr, & Radarr
Run these two lines from inside the jail shell: ( wget was not installed in my jails)
Code:
pkg install wget

Code:
wget -O - https://curl.haxx.se/ca/cacert.pem | cert-sync --user /dev/stdin

Stop the jail
and then...
This from inside the TrueNAS shell:
Code:
cp -R /mnt/media/iocage/jails/jackett_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:
cp -R /mnt/media/iocage/jails/radarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

Code:
cp -R /mnt/media/iocage/jails/sonarr_2021/root/root/.config/.mono/ /mnt/media/iocage/releases/12.2-RELEASE/root/usr/share/.mono

This still worked two years later when Sonarr suddenly stopped working after update. Thanks!~
 
Top