Apps FAQs

I think the app is causing problems on my Guardium system.

If you suspect Ecosystem might be causing a problem on the Guardium® system:

turn off the Ecosystem with the CLI command:
store system ecosystem off.
You can turn it back on with:
store system ecosystem on

Why does Guardium log me out?

All HTTP 40x and 50x errors cause Guardium to close its current session. Remember that a URL in an HTTP post is not allowed. This gives HTTP error 403; see Guardium CSRF token. For other errors, see the log files (Where are log files located?).

Does the data saved in the /store folder persist after application or machine restart?

On a Guardium system, the /store folder is persistent even after application or machine restarts; it is mounted to a docker "volume", which is stored on the Guardium system. However, when you test your app locally thru a docker (using grd_sdk run -d), a new volume is assigned each time (and a new docker image is created in each local run).

Where are log files located?

  • From the UI, navigate to Setup > Tools and Views > Application Lifecycle and download the log of the app activity by clicking download icon in the Application Log column of the row of the app.
  • fileserver command = /store/log. See App logs
  • See /debug and /debug_view in Support functions

My application does not stop when I run it through Docker container. Why?

Threads that perform background tasks, like sending keepalive packets, or performing periodic garbage collection, must have thread.daemon=True. By setting them as daemon threads, they are killed automatically when the program quits.

Error "failed to validate application signature" or How to deploy unsigned apps

Guardium, by default, does not allow you to run unsigned apps, to protect your system. To enable unsigned apps, only in your test system, run the command store system signature off.

"[Error -2] Name or service not known" occurs while running an app using DockerToolbox in Windows.

There is a DNS resolving problem in your DockerToolbox environment. Please fix your DNS service or use the Guardium machine IP address instead of hostname.

Error "keyring.backends._OS_X_API.Error: (-25293, "Can't fetch password from system") occurs when I run an application.

This error indicates that the SDK can't reach your password manager.

Perform these steps.
  1. Uninstall any non-used python packages, enter pip2 uninstall <package name>
  2. Uninstall python, enter brew uninstall python
  3. Enable dev tools, enter xcode-select --install
  4. Reinstall python, enter brew install python@2
  5. Reinstall the SDK. See Installing the SDK.

Alternatively: Mark the SDK Python environment as trusted, by typing codesign -f -s - /usr/local/etc/GuardiumAppSDK/guard_sdk_venv/bin/python