205002 - Failed to Write Nginx ACL File

Agent error code #205002 means the agent could not rewrite the nginx allow/deny include file. The agent writes to a temp file in the same directory and renames it into place; both steps must succeed.

Steps to Resolve

1. Ensure /etc/nginx/acl/ exists on the agent host and the knocknoc-agent user can write to it. On the agent host, run:

   sudo /opt/knocknoc-agent/knocker/knocker enable nginx
   

2. If SELinux or AppArmor is enforcing, audit-log entries on the agent host will name the denied operation; relax the policy or relabel the directory.

3. Check there is free space and inodes available on the partition holding /etc/nginx/acl/ on the agent host:

   df -h /etc/nginx/acl    # free space
   df -ih /etc/nginx/acl   # free inodes
   

Still Having Issues?

Contact us at support@knocknoc.io.