critical/Application: Error: getrandom - kernel syscall missing (Boost UUID) on cPanel

[ErikTMA]

Describe the bug

I have installed icinga2 on an already existing CentOS 7 installation with cPanel.

It fails creating any self-signed certificate and when I try to run "icinga2 console", I get an error critical/Application: Error: getrandom

I have this error across 6 different cPanel servers, all running this rather old kernel:
Linux hostname 3.10.0-229.14.1.el7.centos.onapp.x86_64 #1 SMP Wed Sep 16 17:54:07 EEST 2015 x86_64 x86_64 x86_64 GNU/Linux

To Reproduce

1. Install CentOS, cPanel, this kernel 3.10.0-229.14.1.el7.centos.onapp.x86_64 and of course GDB and required debuginfo
2. Install icinga2 from official repository
3. Run icinga2 console and get the error.

Expected behavior

I expected it to run normally as on all other newer servers.

Your Environment

Include as many relevant details about the environment you experienced the problem in

• Version used (icinga2 --version): 2.11.0-1

• Operating System and version: CentOS Linux release 7.7.1908 (Core)

• Enabled features (icinga2 feature list): Enabled features: checker mainlog notification

• Icinga Web 2 version and modules (System - About): None

• Config validation (icinga2 daemon -C): [2019-10-07 05:59:57 +0100] information/cli: Icinga application loader (version: 2.11.0-1)
  [2019-10-07 05:59:57 +0100] information/cli: Loading configuration file(s).
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Committing config item(s).
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 ScheduledDowntime.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 FileLogger.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 2 NotificationCommands.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 NotificationComponent.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 12 Notifications.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 IcingaApplication.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 2 HostGroups.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 Host.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 CheckerComponent.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 3 Zones.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 Endpoint.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 UserGroup.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 235 CheckCommands.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 3 TimePeriods.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 1 User.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 11 Services.
  [2019-10-07 05:59:57 +0100] information/ConfigItem: Instantiated 3 ServiceGroups.
  [2019-10-07 05:59:57 +0100] information/ScriptGlobal: Dumping variables to file '/var/cache/icinga2/icinga2.vars'
  [2019-10-07 05:59:57 +0100] information/cli: Finished validating the configuration file(s).

• If you run multiple Icinga 2 instances, the zones.conf file (or icinga2 object list --type Endpoint and icinga2 object list --type Zone) from all affected nodes.

Additional context

Pastebin of full stacktrace: https://pastebin.com/GHhsa4ua

[dnsmichi]

I have seen this with OpenVZ already, where the old kernel does not expose specific syscalls required by the running VM. This is Boost related and unfortunately out of our scope. I don't know how cPanel works in the background, but highly likely it is the same with running guests on a host with an old kernel.

https://community.icinga.com/t/director-stage-deployment-fails-in-openvz-centos-7/2271/23

[ErikTMA]

That is unfortunate. I will see what we can do to update the kernel. Might not be possible depending on the virtualization software they are running. The servers are just something I should take over monitoring on.

[dnsmichi]

Best would be to open a support call at cPanel raising awareness. Maybe they even have a solution for this, or any specific workaround.

[dnsmichi]

boostorg/uuid#91 (comment)
microsoft/onnxruntime#1471

https://bugzilla.redhat.com/show_bug.cgi?id=1330000

Verify that the Kernel at least matches the mentioned version in the linked ticket: kernel-3.10.0-544.el7