Foreman » Packaging

What:
In configuring system the foreman-proxy service refuses to start. Upon investigation this is due to a conflict in the default settings.yml file and the systemd service unit. In the settings.yml file the default behavior is to run in the foreground while in the systemd service unit the process is specified as forking, utilizing a pid file. Either the settings file for systemd based systems needs to be changed to reflect the intended behavior of the service unit or the service unit needs to be changed to reflect the desired behavior of settings.yml.

Environment:
$ rpm -qi foreman-proxy
Name : foreman-proxy
Version : 1.10.0
Release : 0.1.RC2.fc19
Architecture: noarch
Install Date: Thu 12 Nov 2015 07:54:38 PM UTC
Group : Applications/System
Size : 275684
License : GPLv3+
Signature : RSA/SHA1, Thu 29 Oct 2015 11:51:38 AM UTC, Key ID c1b2621dbe67e9da
Source RPM : foreman-proxy-1.10.0-0.1.RC2.fc19.src.rpm
Build Date : Thu 29 Oct 2015 10:04:29 AM UTC
Build Host : ip-10-91-31-117
Relocations : (not relocatable)
Packager : Koji
Vendor : Koji
URL : http://theforeman.org/projects/smart-proxy
Summary : Restful Proxy for DNS, DHCP, TFTP, PuppetCA and Puppet
Description :
Manages DNS, DHCP, TFTP and puppet settings though HTTP Restful API
Mainly used by the foreman project (http://theforeman.org)

Logs:
Nov 12 22:44:21 provisioner.lab.example.com systemd¹: Starting Foreman Proxy...
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: [2015-11-12 22:44:21] INFO WEBrick 1.3.1
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: [2015-11-12 22:44:21] INFO ruby 2.2.3 (2015-08-18) [x86_64-linux]
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: [2015-11-12 22:44:21] INFO
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Certificate:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Data:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Version: 3 (0x2)
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Serial Number: 12 (0xc)
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Signature Algorithm: sha256WithRSAEncryption
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Issuer: O=LAB.EXAMPLE.COM, CN=Certificate Authority
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Validity
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Not Before: Nov 12 20:07:49 2015 GMT
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Not After : Nov 12 20:07:49 2017 GMT
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Subject: O=LAB.EXAMPLE.COM, CN=provisioner.lab.example.com
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Subject Public Key Info:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Public Key Algorithm: rsaEncryption
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Public-Key: (2048 bit)
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Modulus:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: cb:41
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Exponent: 65537 (0x10001)
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 extensions:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 Authority Key Identifier:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: keyid:94:CE:20:34:9E:6C:33:CC:1E:F0:02:61:0E:BB:F4:B5:F9:95:4E:9D
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Authority Information Access:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: OCSP - URI:http://ipa-ca.lab.example.com/ca/ocsp
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 Key Usage: critical
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 Extended Key Usage:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: TLS Web Server Authentication, TLS Web Client Authentication
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 CRL Distribution Points:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Full Name:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: URI:http://ipa-ca.lab.example.com/ipa/crl/MasterCRL.bin
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: CRL Issuer:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: DirName: O = ipaca, CN = Certificate Authority
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 Subject Key Identifier:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: 4D:xx:xx:xx:35:32:BF:29:3C:9F:9B:90:B5:73:D3:9F:2D:72:5A:5F
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: X509v3 Subject Alternative Name:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: DNS:provisioner.lab.example.com, othername:<unsupported>, othername:<unsupported>
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: Signature Algorithm: sha256WithRSAEncryption
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: xx:xx:xx:f4
Nov 12 22:44:21 provisioner.lab.example.com smart-proxy²⁹²⁶³: [2015-11-12 22:44:21] INFO WEBrick::HTTPServer#start: pid=29263 port=8443
Nov 12 22:45:51 provisioner.lab.example.com systemd¹: foreman-proxy.service: Start operation timed out. Terminating.
Nov 12 22:45:51 provisioner.lab.example.com smart-proxy²⁹²⁶³: [2015-11-12 22:45:51] INFO going to shutdown ...
Nov 12 22:45:51 provisioner.lab.example.com smart-proxy²⁹²⁶³: [2015-11-12 22:45:51] INFO WEBrick::HTTPServer#start done.
Nov 12 22:45:51 provisioner.lab.example.com systemd¹: Failed to start Foreman Proxy.
Nov 12 22:45:51 provisioner.lab.example.com systemd¹: foreman-proxy.service: Unit entered failed state.
Nov 12 22:45:51 provisioner.lab.example.com systemd¹: foreman-proxy.service: Failed with result 'timeout'.

Test method:
Placing the following systemd drop-in on the host resolves the issue:

$ cat /etc/systemd/system/foreman-proxy.service.d/10-pidfile.conf
[Service]
Type=simple
$ sudo systemctl status foreman-proxy
● foreman-proxy.service - Foreman Proxy
Loaded: loaded (/usr/lib/systemd/system/foreman-proxy.service; disabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/foreman-proxy.service.d
└─10-pidfile.conf
Active: active (running) since Thu 2015-11-12 23:50:02 UTC; 44min ago
Main PID: 31274 (ruby-mri)
CGroup: /system.slice/foreman-proxy.service
└─31274 /usr/bin/ruby-mri /usr/share/foreman-proxy/bin/smart-proxy

Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: xx:xx:xx:f4
Nov 12 23:50:03 provisioner.lab.libcore.so smart-proxy³¹²⁷⁴: [2015-11-12 23:50:03] INFO WEBrick::HTTPServer#start: pid=31274 port=8443