Docker apps using ucs-appbox-4.3 broken?

Hi!

I already “complained” for not being able to fresh install a OpenProject in a freshly updated UCS domain (4.4-3) here: https://help.univention.com/t/openproject-install-usage-fatal-errors/5582/5

but, it seems that it’s the docker image ucs-appbox-4.3 that’s broken… as I tried to install various other dockerized app using the same image and all fails the same way during univention-join:

Copying App Center's setup to container's /usr/share/univention-docker-container-mode/setup_custom
Joining
univention-join: joins a computer to an ucs domain
copyright (c) 2001-2019 Univention GmbH, Germany

Search DC Master:  done
Check DC Master:  done
Search ldap/base done
Search LDAP binddn  done
Join Computer Account: 

**************************************************************************
* Join failed!                                                           *
* Contact your system administrator                                      *
**************************************************************************
* Message:  Please visit https://help.univention.com/t/8842 for common problems during the join and how to fix them -- failed to modify Member Server cn=openp-84840293,cn=memberserver,cn=computers,dc=sih,dc=net [LDAP Error: Type or value exists: krb5Key: value #2 provided more than once]
**************************************************************************
Something went wrong while joining the system
Setup failed
Something went wrong while joining the system

appcenter.log


 27844 actions.install.progress         20-01-22 22:30:00 [   DEBUG]: 50
 27844 actions.install                  20-01-22 22:30:00 [    INFO]: Executing interface restore_data_before_setup for openproject
 27844 actions.install.container.1427   20-01-22 22:30:00 [   DEBUG]: Using container.1427 for container 1427d86ead6a44c4522ce5c2ca$
 27844 actions.install.container.1427   20-01-22 22:30:00 [   DEBUG]: Calling docker exec -u root 1427d86ead6a44c4522ce5c2ca73e540c$
 27844 actions.install.container.1427   20-01-22 22:30:01 [    INFO]: ** Restore forced UCR layer:
 27844 actions.install.container.1427   20-01-22 22:30:01 [    INFO]: ** Restore ldap UCR layer
 27844 actions.install.container.1427   20-01-22 22:30:01 [    INFO]: ** Restore normal UCR layer:
 27844 actions.install                  20-01-22 22:30:01 [    INFO]: Executing interface setup for openproject
 27844 actions.install                  20-01-22 22:30:01 [    INFO]: Copying App Center's setup to container's /usr/share/univenti$
 27844 actions.install.container.1427   20-01-22 22:30:01 [   DEBUG]: Using container.1427 for container 1427d86ead6a44c4522ce5c2ca$
 27844 actions.install.container.1427   20-01-22 22:30:01 [   DEBUG]: Calling docker exec -u root 1427d86ead6a44c4522ce5c2ca73e540c$
 27844 actions.install.container.1427   20-01-22 22:30:01 [    INFO]: Joining
 27844 actions.install.container.1427   20-01-22 22:30:02 [    INFO]: univention-join: joins a computer to an ucs domain
 27844 actions.install.container.1427   20-01-22 22:30:02 [    INFO]: copyright (c) 2001-2019 Univention GmbH, Germany
 27844 actions.install.container.1427   20-01-22 22:30:02 [    INFO]:
 27844 actions.install.container.1427   20-01-22 22:30:03 [    INFO]: Search DC Master:  done
 27844 actions.install.container.1427   20-01-22 22:30:09 [    INFO]: Check DC Master:  done
 27844 actions.install.container.1427   20-01-22 22:30:49 [    INFO]: Search ldap/base done
 27844 actions.install.container.1427   20-01-22 22:30:51 [    INFO]: Search LDAP binddn  done
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: Join Computer Account:
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]:
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: *************************************************************$
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: * Join failed!                                               $
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: * Contact your system administrator                          $
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: *************************************************************$
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: * Message:  Please visit https://help.univention.com/t/8842 f$
 27844 actions.install.container.1427   20-01-22 22:30:54 [    INFO]: *************************************************************$
 27844 actions.install.container.1427   20-01-22 22:30:54 [ WARNING]: Something went wrong while joining the system
 27844 actions.install.container.1427   20-01-22 22:30:54 [ WARNING]: Setup failed
 27844 actions.install.container.1427   20-01-22 22:30:54 [CRITICAL]: Something went wrong while joining the system

 27844 actions.install.container.1427   20-01-22 22:30:54 [CRITICAL]: Setup failed

the funny thing is that if the application being installed is “not autoremoved” by using

univention-app install --do-no-revert xxxx

and then you first delete the LDAP object representing the container machine (ex. openp-237734) and then do a manual univention-join from the caontainer… it WORKS, the machine gets joined “normally”…

BUT… how to “continue” the installation that was “aborted/left” in that “strange state”?
I tried to change the app status to “not installed” with UCR but then the installer just tries to re-create all from scratch and obviously fails.

PLEASE… any hint/suggestion/help would be greatly appreciated as I’m loosing patience with this…

Installing some dockerized app using ucs-appbox-4.2 works normally… so I suppose there should be something wrong with the 4.3 image…

How could I debug the univention-join failure to get some more info to help solve the problem?

Best regards,
M

Mastodon