We're Hiring!

Remote Client Installation

Having a problem deploying OMERO? Please ask new questions at https://forum.image.sc/tags/omero
Please note:
Historical discussions about OMERO. Please look for and ask new questions at https://forum.image.sc/tags/omero

The OMERO.server installation documentation begins here and you can find OMERO.web deployment documentation here.

Remote Client Installation

Postby etienne.dumoulin » Wed Aug 15, 2018 3:51 pm

Hello everyone,

At work, we are running Omero for a couple of month now, and it was time for us to think about continuous integration.

Omero is available on docker (https://hub.docker.com/r/openmicroscopy/omero-server/), so we installed it. I also installed another Omero Cli container to connect to the server container where I downloaded our internal code as well. Both are using the latest 5.4.7 Omero version.

I can use the omero command line from the omero-server container.
On the client side, I use Ubuntu 18. I have installed Omero Server as described https://docs.openmicroscopy.org/omero/5.4.3/sysadmins/unix/server-ubuntu-ice36.html (with very minor changes due to the OS version difference).

I have both containers running on the same docker network.

When I test the remote CLI (from the ubuntu container), I get an SSL error:
Code: Select all
$ /opt/omero/OMERO.server/bin/omero group add -s omero-server -u root -w omero-root-password --type read-write test
WARNING:omero.client:..Ignoring error in client.__del__:<class 'Ice.ProtocolException'>
InternalException: Failed to connect: exception ::Ice::ProtocolException
{
    reason = SSL error occurred for new outgoing connection:
remote address = 172.18.0.3:4064
no ciphers available
}


I think it could make sense since I have not registered any certificate. But, I don't know how to fix this and I don't think I have any log to troubleshoot. I have read this page https://docs.openmicroscopy.org/omero/5.4.7/users/cli/installation.html, but there is nothing about SSL... I would appreciate any hint, guidance or documentation regarding fixing that issue.

Thank you for your time,

Etienne

Ubuntu installation script:
Code: Select all
#!/bin/bash
set -x
OMERO_OPT_DIR=/opt/omero
apt-get update

# installed for convenience
apt-get -y install unzip wget bc

# install Java
apt-get -y install software-properties-common
add-apt-repository -y ppa:openjdk-r/ppa
apt-get update
apt-get -y install openjdk-8-jre

# install dependencies
apt-get update
apt-get -y install \
   unzip \
   wget \
   python-{pip,tables,virtualenv,yaml,jinja2}

# Omero Core
apt-get -y install zlib1g-dev
apt-get -y install python-{pillow,numpy}

# Install Ice
export DEBIAN_FRONTEND=noninteractive
apt-get -y install db5.3-util
apt-get -y install libssl-dev libbz2-dev libmcpp-dev libdb++-dev libdb-dev

apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 5E6DA83306132997
apt-add-repository "deb http://zeroc.com/download/apt/ubuntu`lsb_release -rs` stable main"
apt-get update
apt-get -y install zeroc-ice-all-runtime zeroc-ice-all-dev

pip install "zeroc-ice>3.5,<3.7"

# install Postgres
apt-get -y install apt-transport-https
add-apt-repository -y "deb https://apt.postgresql.org/pub/repos/apt/ xenial-pgdg main 9.6"
wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add -
apt-get update
apt-get -y install postgresql-9.6

mkdir -p "$OMERO_OPT_DIR"
cd $OMERO_OPT_DIR
SERVER=https://downloads.openmicroscopy.org/latest/omero5/server-ice36.zip
wget $SERVER -O OMERO.server-ice36.zip
unzip -q OMERO.server*

ln -s OMERO.server-*/ OMERO.server
etienne.dumoulin
 
Posts: 22
Joined: Tue Aug 14, 2018 3:43 pm

Re: Remote Client Installation

Postby mtbc » Wed Aug 15, 2018 4:32 pm

Dear Etienne,

Could it be that you are running into the issue described at https://docs.openmicroscopy.org/latest/ ... sl-version?

Cheers,
Mark
User avatar
mtbc
Team Member
 
Posts: 282
Joined: Tue Oct 23, 2012 10:59 am
Location: Dundee, Scotland

Re: Remote Client Installation

Postby etienne.dumoulin » Wed Aug 15, 2018 7:18 pm

Hi Mark,

Thank you for your reply. After executing the sed and the python line, it fails on the server side now:
Code: Select all
$ ./OMERO.server/bin/omero group add -s localhost -u root -w omero-root-password --type read-write phenomic
InternalException: Failed to connect: exception ::Ice::PluginInitializationException
{
    reason = IceSSL: unable to set ciphers using `ADH:@SECLEVEL=0':
invalid command
}
etienne.dumoulin
 
Posts: 22
Joined: Tue Aug 14, 2018 3:43 pm

Re: Remote Client Installation

Postby jmoore » Thu Aug 16, 2018 11:14 am

Hi Etienne,

I've been struggling with the same issue in several of my PRs:


So far, I haven't found anything that will work in all combination. In order to try to reproduce what you are seeing, can you share your entire CLI Dockerfile with me?

Thanks,
~Josh
User avatar
jmoore
Site Admin
 
Posts: 1591
Joined: Fri May 22, 2009 1:29 pm
Location: Germany

Re: Remote Client Installation

Postby etienne.dumoulin » Thu Aug 16, 2018 1:31 pm

Hi Josh,

Please find my scripts attached:

1. execute bin/start-docker.sh
It will create the omero-server, phenomic and postgres containers
Code: Select all
$MY_FOLDER/bin/start-docker.sh

2. go into the the phenomic container and execute /code/bin/install-omerocli-ubuntu.sh
Code: Select all
docker exec -it phenomic /bin/bash
/code/bin/install-omerocli-ubuntu.sh

3. Login as phenomic user
Code: Select all
su - phenomic

4. try any omero command
Code: Select all
/opt/omero/OMERO.server/bin/omero group add -s omero-server -u root -w omero-root-password --type read-write phenomicai


Thank you so much for looking into this.

Etienne
Attachments
docker-min-env.tar.gz
Minimum docker environment
(1.45 KiB) Downloaded 124 times
etienne.dumoulin
 
Posts: 22
Joined: Tue Aug 14, 2018 3:43 pm

Re: Remote Client Installation

Postby jmoore » Thu Aug 16, 2018 2:55 pm

Hi Etienne,

I ran the first few lines of your install script and saw OpenJDK8 being installed. Then I kicked off the full script and saw OpenJDK11 being installed!

Code: Select all
root@126b8c3cb7db:/code# java -version
openjdk version "11" 2018-09-25
OpenJDK Runtime Environment (build 11+24-Ubuntu-118.04)
OpenJDK 64-Bit Server VM (build 11+24-Ubuntu-118.04, mixed mode, sharing)


I haven't tracked down what flipped the Java version, but I would definitely suggest getting back JDK8 as a first step. I was using the `openjdk` docker image and it recently went from 8 to 10. I'm beginning to suspect this may have been my problem all along as well:

see https://github.com/openmicroscopy/openmicroscopy/pull/5787/commits/48fcfeea55a6a697c0ee1309f07e019f4ddf41d1

Cheers,
~Josh
User avatar
jmoore
Site Admin
 
Posts: 1591
Joined: Fri May 22, 2009 1:29 pm
Location: Germany

Re: Remote Client Installation

Postby etienne.dumoulin » Thu Aug 16, 2018 7:07 pm

Hi Josh,

Here is what I did:
Code: Select all
$ update-alternatives --config java
$ java -version
openjdk version "1.8.0_171"
OpenJDK Runtime Environment (build 1.8.0_171-8u171-b11-0ubuntu0.18.04.1-b11)
OpenJDK 64-Bit Server VM (build 25.171-b11, mixed mode)


Unfortunately, I still get the same error:
Code: Select all
$ /opt/omero/OMERO.server/bin/omero group add -s omero-server -u root -w omero-root-password --type read-write phenomicai
WARNING:omero.client:..Ignoring error in client.__del__:<class 'Ice.ProtocolException'>
InternalException: Failed to connect: exception ::Ice::ProtocolException
{
    reason = SSL error occurred for new outgoing connection:
remote address = 172.18.0.3:4064
no ciphers available
}
etienne.dumoulin
 
Posts: 22
Joined: Tue Aug 14, 2018 3:43 pm

Re: Remote Client Installation

Postby jmoore » Thu Aug 16, 2018 7:54 pm

Thanks for checking. I'll retry tomorrow (CEST) based on an openjdk8. Just to confirm: no modifications have been applied to the server docker? ~J
User avatar
jmoore
Site Admin
 
Posts: 1591
Joined: Fri May 22, 2009 1:29 pm
Location: Germany

Re: Remote Client Installation

Postby etienne.dumoulin » Thu Aug 16, 2018 8:10 pm

No, I use the latest omero-server version available on dockerhub.
etienne.dumoulin
 
Posts: 22
Joined: Tue Aug 14, 2018 3:43 pm

Re: Remote Client Installation

Postby etienne.dumoulin » Fri Aug 17, 2018 4:01 pm

Hi everyone,

I did not have to use Ubuntu 18.04 for my use case. I just use to stick to the latest LTS.
After trying the exact same script on 16.04, it is working for me.
I can still work collaboratively to make this config work on 18.04, but this question lost its urgency for my personal case.

Thank you for looking into it!
etienne.dumoulin
 
Posts: 22
Joined: Tue Aug 14, 2018 3:43 pm

Next

Return to Installation and Deployment

Who is online

Users browsing this forum: No registered users and 1 guest

cron