Failed to execute git clone

Discussion in 'Installation/Configuration' started by brody182, Nov 21, 2018.

  1. brody182

    brody182 Member

    fixed by copying over the server ssl certificate in jailed user
     
    Last edited: Nov 25, 2018
  2. Nap

    Nap Member

    @brody182 could you be more specific please? Paths/filenames?
    I'm getting an error message for the jailed user:
    Code:
    Cloning into 'example'...
    fatal: Unable to find remote helper for 'https'
     
  3. Jesse Norell

    Jesse Norell ISPConfig Developer Staff Member ISPConfig Developer

    Probably you need /etc/ssl/certs/ca-certificates.crt in your jail. On debian 9 this should work for the git section:
    Code:
    [git]
    comment = Fast Version Control System
    executables = /usr/bin/git*, /bin/uname, /usr/bin/expr
    directories = /usr/share/git-core, /usr/lib/git-core
    includesections = editors, netbasics, basicshell
    
    And /etc/ssl/certs/ca-certificates.crt is included in netbasics.
     
    OptimBro likes this.
  4. Tata

    Tata New Member

    for debian 9 additional you must copy from linux system to jailkit subsytem (links + files):
    /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4
    /lib/x86_64-linux-gnu/libexpat.so.1
    /usr/lib/x86_64-linux-gnu/libnghttp2.so.14
    /usr/lib/x86_64-linux-gnu/librtmp.so.1
    /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2
    /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2
    /usr/lib/x86_64-linux-gnu/libsasl2.so.2
     
  5. OptimBro

    OptimBro Member

    Thanks, it fixed the "fatal: unable to find remote helper for 'https' " :)

    While searching for this, I got your this script: https://git.ispconfig.org/ispconfig/ispconfig3/issues/2140 ( I think it updates all Jaikit users with latest config from /etc/jailkit/jk_init.ini

    Thanks so much :)
     
  6. ledufakademy

    ledufakademy Member HowtoForge Supporter

    you can had in issue with...
    fatal: unable to access 'https://github.com/ether/etherpad-lite.git/': server certificate verification failed. CAfile: none CRLfile: none

    issue with jailkit cA-cert ....

    need to had, in /etc/jailkit/jk_init.ini :
    [netbasics]
    comment = common files for all jails that need any internet connectivity
    libraries = /lib/libnss_dns.so.2, /lib64/libnss_dns.so.2, /lib/x86_64-linux-gnu/libnss_dns.so.2
    regularfiles = /etc/resolv.conf, /etc/host.conf, /etc/hosts, /etc/protocols,/etc/ssl/certs/ca-certificates.crt
     
    Last edited: Sep 20, 2020
  7. ledufakademy

    ledufakademy Member HowtoForge Supporter

    solve with :
    jk_cp -j /var/www/clients/client6/web56 /etc/ssl/certs/ca-certificates.crt

    So need to update :
    nano /etc/jailkit/jk_init.ini

    With :
    [netbasics]
    comment = common files for all jails that need any internet connectivity
    libraries = /lib/libnss_dns.so.2, /lib64/libnss_dns.so.2, /lib/x86_64-linux-gnu/libnss_dns.so.2
    regularfiles = /etc/resolv.conf, /etc/host.conf, /etc/hosts, /etc/protocols,/etc/ssl/certs/ca-certificates.crt
     

Share This Page