edgedb-cli icon indicating copy to clipboard operation
edgedb-cli copied to clipboard

gel instance link --docker want for password

Open zozzz opened this issue 6 months ago • 1 comments

I have a docker-compose.yml file:

services:
  gel:
    image: geldata/gel:nightly
    environment:
      GEL_SERVER_SECURITY: insecure_dev_mode
      GEL_SERVER_ADMIN_UI: enabled
      GEL_SERVER_USER: "admin"
      GEL_SERVER_PASSWORD: "admin"
      GEL_SERVER_DEFAULT_BRANCH: "main"
      GEL_SERVER_INSTANCE_NAME: "project"
      GEL_DOCKER_EXTENSIONS: postgis

      # valid values are: trace, debug, info, warning, error
      GEL_DOCKER_LOG_LEVEL: "debug"
      GEL_SERVER_DATADIR: "/data"
    ports:
      - "5656:5656"
    volumes:
      - gel:/data
      - ./gel:/dbschema

volumes: { gel }

When i start docker container, and i want to link instance with this command:

gel instance link --non-interactive --trust-tls-cert --tls-security=insecure --overwrite --docker project

The CLI gives me the following error: Connection error: PasswordRequired: Password required for the specified user/host

Full trace log:

[2025-06-15T18:52:20Z DEBUG gel::cli::install] exe_path: "C:\\Users\\zozzz\\AppData\\Roaming\\edgedb\\bin\\gel.exe"
[2025-06-15T18:52:20Z DEBUG gel::cli::install] old_executable: "C:\\Users\\zozzz\\AppData\\Roaming\\edgedb\\bin\\edgedb.exe"
[2025-06-15T18:52:20Z DEBUG gel::cli::install] new_executable: "C:\\Users\\zozzz\\AppData\\Roaming\\edgedb\\bin\\gel.exe"
[2025-06-15T18:52:20Z TRACE gel::version_check] Checking CLI binary dates: modified: SystemTime { intervals: 133944780737054002 }, created: SystemTime { intervals: 133880679334657992 }
[2025-06-15T18:52:20Z TRACE gel::version_check] Modified date is in the past and less than 1 day old, skipping version check
[2025-06-15T18:52:20Z DEBUG gel_cli_instance::docker] Docker command line: /usr/lib/x86_64-linux-gnu/gel-server-7-dev9615/bin/python3 -I /usr/lib/x86_64-linux-gnu/gel-server-7-dev9615/bin/gel-server.py --instance-name=project --bind-address=0.0.0.0 --bind-address=:: --port=5656 --data-dir=/data --runstate-dir=/run/gel --tls-cert-mode=generate_self_signed --tls-cert-file=/data/edbtlscert.pem --tls-key-file=/data/edbprivkey.pem --admin-ui=enabled --default-auth-method=SCRAM --http-endpoint-security=optional --emit-server-status=/tmp/tmp.7skxq75ydL
[2025-06-15T18:52:21Z TRACE gel_dsn::gel] Start: Params { host: Parsed(HostType(Hostname("localhost"))), port: Parsed(5656), tls_ca: Unparsed("-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n"), tls_security: Parsed(Insecure), secret_key: Parsed("edbt_edbt_eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eyJlZGdlZGIuc2VydmVyLmFueV9yb2xlIjp0cnVlLCJqdGkiOiJDcFhwOTBtU1N6dWhtQWlRQWs0Q2hRIn0.wcG2AvdzIH-ByVHbUdwOhuidL1WxJ5U9EslYrZWJcDcv8HFDvLnAVQVAb2y7Y0g6RH8kTvLRGmlHSJUyvxReUg") }
[2025-06-15T18:52:21Z TRACE gel_dsn::gel] Merged: Params { host: Parsed(HostType(Hostname("localhost"))), port: Parsed(5656), tls_ca: Unparsed("-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n"), tls_security: Parsed(Insecure), secret_key: Parsed("edbt_edbt_eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eyJlZGdlZGIuc2VydmVyLmFueV9yb2xlIjp0cnVlLCJqdGkiOiJDcFhwOTBtU1N6dWhtQWlRQWs0Q2hRIn0.wcG2AvdzIH-ByVHbUdwOhuidL1WxJ5U9EslYrZWJcDcv8HFDvLnAVQVAb2y7Y0g6RH8kTvLRGmlHSJUyvxReUg") }
[2025-06-15T18:52:21Z TRACE gel_dsn::gel] Computed: Computed { host: HostType(Hostname("localhost")), port: 5656, tls_ca: [CertificateDer(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)], tls_security: Insecure, secret_key: "edbt_edbt_eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eyJlZGdlZGIuc2VydmVyLmFueV9yb2xlIjp0cnVlLCJqdGkiOiJDcFhwOTBtU1N6dWhtQWlRQWs0Q2hRIn0.wcG2AvdzIH-ByVHbUdwOhuidL1WxJ5U9EslYrZWJcDcv8HFDvLnAVQVAb2y7Y0g6RH8kTvLRGmlHSJUyvxReUg" }
Authenticating to gel://edgedb@localhost:5656/
[2025-06-15T18:52:21Z DEBUG gel::portable::instance::link] connecting with config: Config { host: localhost:5656, db: Default, user: "edgedb", instance_name: None, authentication: SecretKey("edbt_edbt_eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eyJlZGdlZGIuc2VydmVyLmFueV9yb2xlIjp0cnVlLCJqdGkiOiJDcFhwOTBtU1N6dWhtQWlRQWs0Q2hRIn0.wcG2AvdzIH-ByVHbUdwOhuidL1WxJ5U9EslYrZWJcDcv8HFDvLnAVQVAb2y7Y0g6RH8kTvLRGmlHSJUyvxReUg"), client_security: Default, tls_security: Insecure, tls_ca: Some([CertificateDer(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)]), tls_server_name: None, wait_until_available: 30s, connect_timeout: 10s, max_concurrency: None, tcp_keepalive: Default, cloud_certs: None, server_settings: {} }
[2025-06-15T18:52:21Z DEBUG gel_tokio::raw::connection] Connecting to localhost:5656 (TLS)...
[2025-06-15T18:52:21Z DEBUG rustls::client::hs] No cached session for DnsName("localhost")
[2025-06-15T18:52:21Z DEBUG rustls::client::hs] Not resuming any session
[2025-06-15T18:52:21Z TRACE rustls::client::hs] Sending ClientHello Message {
        version: TLSv1_0,
        payload: Handshake {
            parsed: HandshakeMessagePayload {
                typ: ClientHello,
                payload: ClientHello(
                    ClientHelloPayload {
                        client_version: TLSv1_2,
                        random: 32148bdf884814ae59f9a283137f2deaecde792bdb4c34f0f50ce9745afe7f3a,
                        session_id: 55e2b5bb97888ac05ab9a880969b2d982cd43faad3fa430957a2a1825d2d980e,
                        cipher_suites: [
                            TLS13_AES_256_GCM_SHA384,
                            TLS13_AES_128_GCM_SHA256,
                            TLS13_CHACHA20_POLY1305_SHA256,
                            TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
                            TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
                            TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
                            TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                            TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                            TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,
                            TLS_EMPTY_RENEGOTIATION_INFO_SCSV,
                        ],
                        compression_methods: [
                            Null,
                        ],
                        extensions: [
                            KeyShare(
                                [
                                    KeyShareEntry {
                                        group: X25519,
                                        payload: 13a0416b93582f98d5544f444b41a57ed79bbece96622a7e141d7a5562b90f27,
                                    },
                                ],
                            ),
                            CertificateStatusRequest(
                                Ocsp(
                                    OcspCertificateStatusRequest {
                                        responder_ids: [],
                                        extensions: ,
                                    },
                                ),
                            ),
                            ServerName(
                                [
                                    ServerName {
                                        typ: HostName,
                                        payload: HostName(
                                            DnsName(
                                                "localhost",
                                            ),
                                        ),
                                    },
                                ],
                            ),
                            Protocols(
                                [
                                    ProtocolName(
                                        6564676564622d62696e617279,
                                    ),
                                    ProtocolName(
                                        67656c2d62696e617279,
                                    ),
                                ],
                            ),
                            SignatureAlgorithms(
                                [
                                    RSA_PKCS1_SHA1,
                                    ECDSA_SHA1_Legacy,
                                    RSA_PKCS1_SHA256,
                                    ECDSA_NISTP256_SHA256,
                                    RSA_PKCS1_SHA384,
                                    ECDSA_NISTP384_SHA384,
                                    RSA_PKCS1_SHA512,
                                    ECDSA_NISTP521_SHA512,
                                    RSA_PSS_SHA256,
                                    RSA_PSS_SHA384,
                                    RSA_PSS_SHA512,
                                    ED25519,
                                    ED448,
                                ],
                            ),
                            EcPointFormats(
                                [
                                    Uncompressed,
                                ],
                            ),
                            ExtendedMasterSecretRequest,
                            SupportedVersions(
                                [
                                    TLSv1_3,
                                    TLSv1_2,
                                ],
                            ),
                            NamedGroups(
                                [
                                    X25519,
                                    secp256r1,
                                    secp384r1,
                                ],
                            ),
                            SessionTicket(
                                Request,
                            ),
                            PresharedKeyModes(
                                [
                                    PSK_DHE_KE,
                                ],
                            ),
                        ],
                    },
                ),
            },
            encoded: 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,
        },
    }
[2025-06-15T18:52:21Z TRACE rustls::client::hs] We got ServerHello ServerHelloPayload {
        extensions: [
            SupportedVersions(
                TLSv1_3,
            ),
            KeyShare(
                KeyShareEntry {
                    group: X25519,
                    payload: 1b76ee1115eac710f923a7e35d2e937498b82de117816ba4bf0a5379c9831013,
                },
            ),
        ],
        legacy_version: TLSv1_2,
        random: eb4cfe27e0db69cc61fdabd7e0508dc0a02c95c8f8468795c4bc90f14823e8d9,
        session_id: 55e2b5bb97888ac05ab9a880969b2d982cd43faad3fa430957a2a1825d2d980e,
        cipher_suite: TLS13_AES_256_GCM_SHA384,
        compression_method: Null,
    }
[2025-06-15T18:52:21Z DEBUG rustls::client::hs] Using ciphersuite TLS13_AES_256_GCM_SHA384
[2025-06-15T18:52:21Z DEBUG rustls::client::tls13] Not resuming
[2025-06-15T18:52:21Z TRACE rustls::client::client_conn] EarlyData rejected
[2025-06-15T18:52:21Z TRACE rustls::conn] Dropping CCS
[2025-06-15T18:52:21Z DEBUG rustls::client::tls13] TLS1.3 encrypted extensions: [ServerNameAck, Protocols([ProtocolName(6564676564622d62696e617279)])]
[2025-06-15T18:52:21Z DEBUG rustls::client::hs] ALPN protocol is Some(b"edgedb-binary")
[2025-06-15T18:52:21Z TRACE rustls::client::tls13] Server cert is CertificateChain([CertificateDer(0x308202cc308201b4a00302010202100ffcbac30ffd4425829f956266802a70300d06092a864886f70d01010b050030153113301106035504030c0a47656c20536572766572301e170d3235303330393134313535385a170d3434303530393134313535385a30153113301106035504030c0a47656c2053657276657230820122300d06092a864886f70d01010105000382010f003082010a0282010100c144543cb016bc12fe708e562544dc187907e644c669b9a7e2a4b3e291049b2e880447858d79e38b6c513e38ef997d8aa490c25e1a1aa304417b75c8e1d2b7f9dddb0b5f34503228d5664c30e3e43457c0947cfa5c1b8357656004a73b2646b08ad1ad7657d2fef7679e267800b08ccb4a379ec530c65af052214b39f22a8ee2d0ce2b489e685961576aa2dba12f483c0df2533c9507cf07a684436d86fea106bdd97cf745b2b0b4ed6f4c8bfb8597632691e1e805eb80c609ceec253d2b1e8a798b699f30c13388dbe8b36ea2fefc0e9055b0a776ab93ec198a34d1e49157164dd30c48f87cab581e725172495bc9f2ef449621d78744fb3618b573611dc9b30203010001a318301630140603551d11040d300b82096c6f63616c686f7374300d06092a864886f70d01010b050003820101000a1f9fa28009a6b07c13894d236b8fd6f7c1e28b4a8935b79f88c88acf4c1768115679ddb1f0fb0592cd07dd44aec5d1de4e2f8c8c2e7e0e409698bd3d116929aa96d53b01c22e92953ee7a730aad132a2000bc855ae134ae5df718d0e5a613f87f9fdc0e482c3d7764b652017e0a34ae16ad0f946f4e43aa64bfb579dcc7eada39e983a53114455f0157080eba05817bded33e94030f5ff86d5ee70b6269b3c79504b7f5caad858793ab04a1e0d8a0819e4f063e91683c5f74830ef41de7eae328a465f815296243557d12e18828136ad9e5d6e66e6e7983ae61e7a7ca5623157088c4cf864db84c274ae6aa74d179077ddbfe2a5d51741d4dd0ebfb7c7cc0b)])
[2025-06-15T18:52:21Z DEBUG edgedb::outgoing::frame] Frame Contents: ClientHandshake(
        ClientHandshake {
            major_ver: 3,
            minor_ver: 0,
            params: {
                "user": "edgedb",
                "secret_key": "edbt_edbt_eyJ0eXAiOiJKV1QiLCJhbGciOiJFUzI1NiJ9.eyJlZGdlZGIuc2VydmVyLmFueV9yb2xlIjp0cnVlLCJqdGkiOiJDcFhwOTBtU1N6dWhtQWlRQWs0Q2hRIn0.wcG2AvdzIH-ByVHbUdwOhuidL1WxJ5U9EslYrZWJcDcv8HFDvLnAVQVAb2y7Y0g6RH8kTvLRGmlHSJUyvxReUg",
                "database": "edgedb",
                "branch": "__default__",
            },
            extensions: {},
        },
    )
[2025-06-15T18:52:21Z DEBUG edgedb::incoming::frame] Frame Contents: Authentication(
        Sasl {
            methods: [
                "SCRAM-SHA-256",
            ],
        },
    )
  • Gel Version: 7-dev9615
  • Gel CLI Version: 7.7.0-dev.1400+2f78a4e
  • OS Version: Windows 11

zozzz avatar Jun 15 '25 19:06 zozzz

I found the problem, if i provide GEL_SERVER_PASSWORD then the password is always required.

zozzz avatar Jun 16 '25 09:06 zozzz