AWS Greengrass does not start on TX2

0

The error I have:

$ sudo ./greengrassd start
    Setting up greengrass daemon
    Validating hardlink/softlink protection
    Waiting for up to 40s for Daemon to start
    Error occured while generating TLS config: open /greengrass/certs/root.ca.pem: no such file or directory
    The Greengrass daemon process with [pid = 6333] died

But I have non-empty root.ca.pem in certs folder according to https://docs.aws.amazon.com/greengrass/latest/developerguide/gg-dg.pdf
System: Ubuntu 16.04 (JetPack 3.3) on TX2
config.json:

{
  "coreThing" : {
    "caPath" : "root.ca.pem",
    "certPath" : "6c6e554fbc.cert.pem",
    "keyPath" : "6c6e554fbc.private.key",
    "thingArn" : "arn:aws:iot:us-east-1:321505833208:thing/TestGroup_Core",
    "iotHost" : "acqp0wuopnefo-ats.iot.us-east-1.amazonaws.com",
    "ggHost" : "greengrass-ats.iot.us-east-1.amazonaws.com",
    "keepAlive" : 600
  },
  "runtime" : {
    "cgroup" : {
      "useSystemd" : "yes"
    }
  },
  "managedRespawn" : false,
  "crypto" : {
    "principals" : {
      "SecretsManager" : {
        "privateKeyPath" : "file:///greengrass/certs/6c6e554fbc.private.key"
      },
      "IoTCertificate" : {
        "privateKeyPath" : "file:///greengrass/certs/6c6e554fbc.private.key",
        "certificatePath" : "file:///greengrass/certs/6c6e554fbc.cert.pem"
      }
    },
    "caPath" : "file:///greengrass/certs/root.ca.pem"
  }
}
ac4289
asked 5 years ago215 views
5 Answers
0

Hi Ac4289,

Where did you install Greengrass? What are the contents of /greengrass/certs?

Are there any messages in /greengrass/ggc/var/log/crash.log?

Thanks,
Keagen

AWS
KR-AWS
answered 5 years ago
0

Hi Keagen,

Thank you for checking!
I install Greengrass under /home/nvidia/greengrass.
Here are the contents in certs folder:

$ ls
6c6e554fbc.cert.pem     6c6e554fbc.public.key  root.ca.pem  6c6e554fbc.private.key  README

And here is the crash.log:

Error occured while generating TLS config: open /greengrass/certs/root.ca.pem: no such file or directory
The Greengrass daemon process with [pid = 6333] died

Edited by: ac4289 on Jan 4, 2019 9:11 AM

ac4289
answered 5 years ago
0

Hi Ac4289,

You'll need to modify your config.json file to list the correct paths for all your certs. It looks like your certs are in /home/nvidia/greengrass/certs

Thanks,
Keagen

AWS
KR-AWS
answered 5 years ago
0

Yes, this works! Thank you very much!

ac4289
answered 5 years ago
0

I had the same issue & I solved it using
{
"coreThing" : {
"caPath" : "root.ca.pem",
"certPath" : "45d9a43e88.cert.pem",
"keyPath" : "45d9a43e88.private.key",
"thingArn" : "arn:aws:iot:us-east-1:934217359568:thing/GG_FirstProject_Core",
"iotHost" : "a3rw3vn9ktjnsh-ats.iot.us-east-1.amazonaws.com",
"ggHost" : "greengrass-ats.iot.us-east-1.amazonaws.com",
"keepAlive" : 600
},
"runtime" : {
"cgroup" : {
"useSystemd" : "yes"
}
},
"managedRespawn" : false,
"crypto" : {
"principals" : {
"SecretsManager" : {
"privateKeyPath" : "file://certs/45d9a43e88.private.key"
},
"IoTCertificate" : {
"privateKeyPath" : "file://certs/45d9a43e88.private.key",
"certificatePath" : "file://certs/45d9a43e88.cert.pem"
}
},
"caPath" : "file://certs/root.ca.pem"
}
}

answered 4 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions