Your entropy pool is low

I had a working Passbolt installation with docker compose, i tried to add traefik - removed it and got SSL runing afterwards i had problems with admin user registration, the browser plug in wont recognize itself and i didnt receive registration mail. (test mail worked fine)

SO I RESET

Removed all docker images, networks and volumes. Deleted the dir, that i created for passbolt - everything as it was before - recreated my dir:
now i get this lovely error mssg:

Your entropy pool is low. This situation could lead GnuPG to not
passbolt | be able to create the gpg serverkey so the container start process will hang
passbolt | until enough entropy is obtained.
passbolt | Please consider installing rng-tools and/or virtio-rng on your host as the
passbolt | preferred method to generate random numbers using a TRNG.
passbolt | If rngd (rng-tools) does not provide enough or fast enough randomness you could
passbolt | consider installing haveged as a helper to speed up this process.
passbolt | Using haveged as a replacement for rngd is not recommended. You can read more
passbolt | about this topic here: https://lwn.net/Articles/525459/

I did everything “HELP” suggested. No change.
I checked if i was referring the volumes to an existing dir, but no - i removed the created dir run the compose again Error stays.

Chown www-data doesnt work since the container wont get created…

this is my compose

version: “3.9”
services:
db:
image: mariadb:10.11
container_name: mysql
restart: unless-stopped
environment:
MARIADB_ROOT_PASSWORD: ${ROOT_PASSWORD}
MARIADB_DATABASE: “passbolt”
MARIADB_USER: ${DB_USER}
MARIADB_PASSWORD: ${DB_PASSWORD}
volumes:
- ${DISK}/mysql:/var/lib/mysql

passbolt:
image: passbolt/passbolt:4.8.0-1-ce
#Alternatively you can use rootless:
#image: passbolt/passbolt:4.8.0
container_name: passbolt
restart: unless-stopped
depends_on:
- db
environment:
APP_FULL_BASE_URL: https://passbolt.XXX.to
DATASOURCES_DEFAULT_HOST: mysql
DATASOURCES_DEFAULT_USERNAME: ${DB_USER}
DATASOURCES_DEFAULT_PASSWORD: ${DB_PASSWORD}
DATASOURCES_DEFAULT_DATABASE: “passbolt”
EMAIL_TRANSPORT_DEFAULT_HOST: ${EMAIL_TRANSPORT_HOST}
EMAIL_TRANSPORT_DEFAULT_PORT: ${EMAIL_TRANSPORT_PORT}
EMAIL_TRANSPORT_DEFAULT_USERNAME: ${EMAIL_TRANSPORT_USERNAME}
EMAIL_TRANSPORT_DEFAULT_PASSWORD: ${EMAIL_TRANSPORT_PASSWORD}
EMAIL_TRANSPORT_DEFAULT_TLS: null
volumes:
- ${DISK}/gpg:/etc/passbolt/gpg
- ${DISK}/jwt:/etc/passbolt/jwt:ro
- ${DISK}/certs/XXX.to.crt:/etc/ssl/certs/certificate.crt
- ${DISK}/certs/XXX.to.key:/etc/ssl/certs/certificate.key
command:
[
“/usr/bin/wait-for.sh”,
“-t”,
“0”,
“mysql:3306”,
“–”,
“/docker-entrypoint.sh”,
]
ports:
- 80:80
- 443:443

In this case you could always create a GPG key yourself and use that one instead. Our environment variable page should help with setting that up in your compose file

forgot to send last line:

-bash: line 1: /etc/passbolt/gpg/serverkey_private.asc: Permission denied

i am totally new to the it world, i am a little lost :confused:

Hey clayton,

i managed to create the keys with env. and those commands:
gpg --full-generate-key
did step 1- 9
than
gpg --armor --export F5B94A730D636A18815046C1408B779FE1951A9A > public.key
gpg --armor --export-secret-keys F5B94A730D636A18815046C1408B779FE1951A9A > private.key

The encyption is missing, even after:

gpg --armor --export-secret-keys SERVER_KEY@EMAIL.TEST > /var/www/passbolt/config/gpg/serverkey_private.asc

the keys arent encypted - maybe u got an idea?