Stuck on "Starting Watchtower ......................... OK"

[BlueskyFR]

Sorry for duplicate but I really need help with this, and exporting public ip adresse doesn't change anything.

Thanks for your help.

[timmmmmmmmm]

You'll get this message when you don't have all your ports open on your server. I got stuck on it on Aliyun too, untill I added a security rule to open them all. Outline chooses a randomized port, I guess after setup you can close all unneeded ports again except the configured one.
Check out: #22

[bestserver868]

What i did was "iptables -A INPUT -p tcp -m multiport --dports 1024:65535 -j ACCEPT" on a debian server, before starting the watch tower script.
I was able to complete the installation after that, but still no luck with the server software "outline manager" it fails to connect to API on the specific port.

[4044ever]

@thomamvt
I tried it on my Raspberry:

iptables -A INPUT -p tcp -m multiport --dports 1024:65535 -j ACCEPT

All routerports 1080 - 65535 are open.

It hangs here after doing the bash -x:

+ curl --cacert /root/.shadowbox/persisted-state/shadowbox-selfsigned.crt -s https://66.222.164.21:26392/vayH6RGFxCuU_PbLQyHHYA/access-keys

What might the problem be?

[4044ever]

Slightly different here:

user@raspberrypi:/home/pi# sudo wget -qO- https://raw.githubusercontent.com/Jigsaw-Code/outline-server/master/src/server_manager/install_scripts/install_server.sh | bash

> Verifying that Docker is installed .......... OK
> Verifying that Docker daemon is running ..... OK
> Creating persistent state dir ............... OK
> Generating secret key ....................... OK
> Generating TLS certificate .................. OK
> Generating SHA-256 certificate fingerprint .. OK
> Starting Shadowbox .......................... OK
> Starting Watchtower ......................... OK
> Waiting for Outline server to be healthy ....  

Hanging at "Waiting for Outline server to be healthy"

What does it mean?

[bestserver868]

I'm not an expert, but i think its means, some ports are not open.

[bestserver868]

@4044ever I've no idea why it hangs, you can try the below command. Then try the installation again.

iptables -A INPUT -p tcp --dport 1024:65535 -j ACCEPT
iptables -A INPUT -p udp --dport 1024:65535 -j ACCEPT

[4044ever]

@thomamvt
Same problem. When I do a bash -x I get stuck at that line:

+ curl --insecure -s https://localhost:25629/zWCZyr1pleXCQMEpp8AeQA/access-keys

For some reasons it changed from the external IP to 'localhost'

[bestserver868]

I've no idea why its changing from external to localhost. I had no issues on debian 64 bit on amazon EC2.

…

On Mon, Mar 26, 2018 at 9:05 PM, 4044ever ***@***.***> wrote: @thomamvt <https://github.com/thomamvt> Same problem. When I do a bash -x now it looks like that: + curl --insecure -s https://localhost:25629/ zWCZyr1pleXCQMEpp8AeQA/access-keys For some reasons it changed from the external IP to 'localhost' — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#27 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/Aj_RDh15tAdwI6mM_5O17Zn96acz4D66ks5tiZBxgaJpZM4S3tj2> .

[fortuna]

@thomamvt It's using localhost in order to check the health of the service without hitting external firewalls.

The script has been updated. Please try again

[fortuna]

@4044ever It was hanging there waiting the service to be ready, but the check was likely being blocked by a firewall. We've updated the script to better communicate that.

[fortuna]

The original issue was likely due to a firewall. #38 should have clarified what's going on in the installation and provide the information needed for you to unblock the ports.

I'm marking this as closed. We can reopen as a different issue if needed.

[4044ever]

I still get stuck at the same spot. With bash -x

+ curl --insecure -s https://localhost:29639/W4YolAMs4ArLXXs3oUU1ig/access-keys

With bash only:

> Verifying that Docker is installed .......... OK
> Verifying that Docker daemon is running ..... OK
> Creating persistent state dir ............... OK
> Generating secret key ....................... OK
> Generating TLS certificate .................. OK
> Generating SHA-256 certificate fingerprint .. OK
> Starting Shadowbox .......................... OK
> Starting Watchtower ......................... OK
> Waiting for Outline server to be healthy ....

Just in case it makes a different, it's a Raspberry Pi3 and the OS is Raspian. It runs already ShadowsocksR and V2Ray successfully for a few week.

The Raspi is directly LAN connected to a router. All ports (1080-6635) are UDP/TCP forwarded/open.
Is there any other Firewall somewhere? It seems strange because other ports I opened for SSR and V2Ray work.

[fortuna]

@404ever: Things to try when the script gets stuck there::

• Run docker logs shadowboxto get the shadowbox logs
• Run curl --insecure -s -v https://localhost:29639/<secret>/access-keys with the -v for verbose output

It seems the server never goes up, or the port was blocked somehow.

[4044ever]

@fortuna
Thanks, here is what happens.....

curl --insecure -s -v https://localhost:29639/<secret>/access-keys -v

Nothing happens, no output or error on any type. I used of course my data.

docker logs shadowbox

returns:

standard_init_linux.go:190: exec user process caused "exec format error"

Does Outline support the Raspberry ARM architecture?

[ex7r3me]

I've built an image on an arm64 processor and published on docker hub (ex7r3me/shadowbox) which works on the Scaleway servers. it might work on Raspberry too.
here is the link to gist for install script (use the first comment for single line installation): https://gist.github.com/ex7r3me/1f06273da6b77d756811102e604e19b6
issue #31 might be related

[fortuna]

@ex7r3me did you have to change anything in the install script other than the image name to make it work?

If not, then you can specify your image with SB_IMAGE. Example:

{ export SB_IMAGE=ex7r3me/shadowbox; sudo wget -qO- https://raw.githubusercontent.com/Jigsaw-Code/outline-server/master/src/server_manager/install_scripts/install_server.sh | bash; }

[MaestroJurko]

@fortuna I tried your suggestion, but still, it gets stuck on

Waiting for Outline server to be healthy ....

I am trying to use Raspberry pie 3 and also trying on Raspberry pi Zero W.

[PekopT]

FYI: check if there is curl installed in OS.