Bug:

[vitorallo]

Describe the bug
Redeploying and updating to 9.5.2, got an issue with caddy certs, so decided to clean all the permanent storage, do a clean install. now with a clean install I get:

ERR: logger=pki.ca.local msg=failed to install root certificate error=failed to execute tee: exit status 1 certificate_file=storage:pki/authorities/local/root.crt

on the caddygateway machine, it cannot sign the local cert with the internal CA.
I tried a bit of everything, also internally and manually, but cannot figure out the problem.

obviously the gateway is unusable, and access to vectr doesn't work

To Reproduce
Steps to reproduce the behavior:

1. deploy using portainer and swarn
2. check gateway container logs

Expected behavior
sign the cert and be able to serve

User Platform(please complete the following information):

• debian
• docker
• swarm
• portainer
• version 9.5.2 and 9.5.3 as well

[SRAPSpencer]

Can you clarify on the runtime you're using? Community Edition doesn't explicitly support Swarm or Portainer, I'm not sure how certificate generation would be impacted by using those runtimes.

What I can advise is that this sounds like a file permissions issue. We did have a user on Discord report this, and this is what he had to do to resolve the issue as we have been unable to recreate it.

"To make it work, I have issued these commands:

sudo addgroup --gid 10001 vectr
73 sudo usermod -aG vectr pedro
74 sudo usermod -g vectr pedro
75 sudo vi /etc/login.defs

Changed UMASK from 022 to 002.

7  sudo mkdir -p /opt/vectr/resources
8  sudo mkdir -p /opt/vectr/cert
9  sudo mkdir -p /opt/vectr/user

10 sudo mkdir -p /opt/vectr/logs
11 sudo mkdir -p /opt/vectr/rta
12 sudo mkdir -p /opt/vectr/static
13 sudo mkdir -p /opt/vectr/app
14 sudo mkdir -p /opt/vectr/release/scripts/shared
15 sudo chown -R :vectr /opt/vectr/*
16 sudo chmod -R 775 /opt/vectr/*
18 cd /opt/vectr/
19 sudo docker compose down
20 docker image rm securityriskadvisors/vectr_tomcat:9.2.1

and finally docker compose up -d!"

https://discord.com/channels/844560084906147870/844572063586189382/1257972520947023942