[Rails] Secrets decryption error appeared (ActiveSupport::MessageEncryptor::InvalidMessage)

[t***@mipic.co]

Hi,

How to fix the recent error regarding rails secrets encryption and ruby?

I have one container running since week start that allows we to "rails
secrets:edit" successfully. Today, if I carbon copy the source code, do
new bundle install and secrets fail. What is going on?

Message from application: ActiveSupport::MessageEncryptor::InvalidMessage
(ActiveSupport::MessageEncryptor::InvalidMessage)

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:133:in
`rescue in _decrypt'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:111:in
`_decrypt'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:84:in
`decrypt_and_verify'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:55:in
`decrypt'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:96:in
`preprocess'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:27:in `block
in parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in
`each_with_object'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:391:in
`secrets'
/var/www/html/config/initializers/swagger_ui_engine.rb:3:in `block in
<top (required)>'

/bundle/ruby/2.5.0/gems/swagger_ui_engine-1.1.0/lib/swagger_ui_engine.rb:15:in
`configure'
/var/www/html/config/initializers/swagger_ui_engine.rb:1:in `<top
(required)>'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`block in load'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:258:in
`load_dependency'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:655:in `block
in load_config_initializer'

/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/notifications.rb:168:in
`instrument'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:654:in
`load_config_initializer'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:612:in `block
(2 levels) in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `block
in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`instance_exec'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`run'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:59:in
`block in run_initializers'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:228:in `block in
tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:350:in `block (2
levels) in each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:422:in `block (2
levels) in each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:431:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:421:in `block in
each_strongly_connected_component_from'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`tsort_each_child'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:349:in `block in
each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in
`each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:226:in
`tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:205:in
`tsort_each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:58:in
`run_initializers'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:353:in
`initialize!'
/var/www/html/config/environment.rb:5:in `<top (required)>'
config.ru:3:in `require_relative'
config.ru:3:in `block in <main>'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in
`instance_eval'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in `initialize'
config.ru:1:in `new'
config.ru:1:in `<main>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `eval'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `preload_app'
/usr/share/passenger/helper-scripts/rack-preloader.rb:156:in
`<module:App>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:30:in
`<module:PhusionPassenger>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:29:in `<main>'

[t***@mipic.co]

Let me clarify the situation more, I see the typos.

In my rails app, I was able to do "rails secrets:edit". The setup was
stable and worked months, pipeline was building the app container for
release too. This week, I have realized that when the container gets built
in the pipeline then app fails to start with the error below.

While I can run the app in my development container that had bundle
installed weeks ago, in all other containers where bundle install gets
performed, since this week, the app fails to start with the below error.

The app uses ruby 2.5.0 and rails 5.1.5, bundler (1.16.1), rubygems-bundler
(1.4.4)

This error looks the same as a one, a few months ago, when ruby 2.5
required upgrade to the system gemset. Has anyone an idea what had gone
wrong? Comparing Gemfile.lock between containers, bundled gems are of
identical versions. It boils down to the ruby systems gemset, however,
gemset is the latest version per below. Encryption key is identical, 100
times copied over or sent in env var ;) for not believing the app fails to
start.

$ sudo gem update --system
Latest version already installed. Done.

Cheers, Thomas

Post by t***@mipic.co
Hi,
How to fix the recent error regarding rails secrets encryption and ruby?
I have one container running since week start that allows we to "rails
secrets:edit" successfully. Today, if I carbon copy the source code, do
new bundle install and secrets fail. What is going on?
ActiveSupport::MessageEncryptor::InvalidMessage
(ActiveSupport::MessageEncryptor::InvalidMessage)
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:133:in
`rescue in _decrypt'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:111:in
`_decrypt'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:84:in
`decrypt_and_verify'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:55:in
`decrypt'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:96:in
`preprocess'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:27:in `block
in parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in
`each_with_object'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:391:in
`secrets'
/var/www/html/config/initializers/swagger_ui_engine.rb:3:in `block in
<top (required)>'
/bundle/ruby/2.5.0/gems/swagger_ui_engine-1.1.0/lib/swagger_ui_engine.rb:15:in
`configure'
/var/www/html/config/initializers/swagger_ui_engine.rb:1:in `<top
(required)>'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`block in load'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:258:in
`load_dependency'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:655:in `block
in load_config_initializer'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/notifications.rb:168:in
`instrument'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:654:in
`load_config_initializer'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:612:in `block
(2 levels) in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `block
in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`instance_exec'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`run'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:59:in
`block in run_initializers'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:228:in `block
in tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:350:in `block
(2 levels) in each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:422:in `block
(2 levels) in each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:431:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:421:in `block
in each_strongly_connected_component_from'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`tsort_each_child'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:349:in `block
in each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in
`each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:226:in
`tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:205:in
`tsort_each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:58:in
`run_initializers'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:353:in
`initialize!'
/var/www/html/config/environment.rb:5:in `<top (required)>'
config.ru:3:in `require_relative'
config.ru:3:in `block in <main>'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in
`instance_eval'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in `initialize'
config.ru:1:in `new'
config.ru:1:in `<main>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `eval'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in
`preload_app'
/usr/share/passenger/helper-scripts/rack-preloader.rb:156:in
`<module:App>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:30:in
`<module:PhusionPassenger>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:29:in `<main>'

[t***@mipic.co]

Let's ditch encrypted secrets. Rails 5.2 has been released. Moving to
credentials.

Post by t***@mipic.co
Let me clarify the situation more, I see the typos.
In my rails app, I was able to do "rails secrets:edit". The setup was
stable and worked months, pipeline was building the app container for
release too. This week, I have realized that when the container gets built
in the pipeline then app fails to start with the error below.
While I can run the app in my development container that had bundle
installed weeks ago, in all other containers where bundle install gets
performed, since this week, the app fails to start with the below error.
The app uses ruby 2.5.0 and rails 5.1.5, bundler (1.16.1),
rubygems-bundler (1.4.4)
This error looks the same as a one, a few months ago, when ruby 2.5
required upgrade to the system gemset. Has anyone an idea what had gone
wrong? Comparing Gemfile.lock between containers, bundled gems are of
identical versions. It boils down to the ruby systems gemset, however,
gemset is the latest version per below. Encryption key is identical, 100
times copied over or sent in env var ;) for not believing the app fails to
start.
$ sudo gem update --system
Latest version already installed. Done.
Cheers, Thomas

Post by t***@mipic.co
Hi,
How to fix the recent error regarding rails secrets encryption and ruby?
I have one container running since week start that allows we to "rails
secrets:edit" successfully. Today, if I carbon copy the source code, do
new bundle install and secrets fail. What is going on?
ActiveSupport::MessageEncryptor::InvalidMessage
(ActiveSupport::MessageEncryptor::InvalidMessage)
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:133:in
`rescue in _decrypt'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:111:in
`_decrypt'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:84:in
`decrypt_and_verify'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:55:in
`decrypt'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:96:in
`preprocess'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:27:in
`block in parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in
`each_with_object'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:391:in
`secrets'
/var/www/html/config/initializers/swagger_ui_engine.rb:3:in `block in
<top (required)>'
/bundle/ruby/2.5.0/gems/swagger_ui_engine-1.1.0/lib/swagger_ui_engine.rb:15:in
`configure'
/var/www/html/config/initializers/swagger_ui_engine.rb:1:in `<top
(required)>'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`block in load'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:258:in
`load_dependency'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:655:in
`block in load_config_initializer'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/notifications.rb:168:in
`instrument'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:654:in
`load_config_initializer'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:612:in
`block (2 levels) in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in
`block in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`instance_exec'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`run'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:59:in
`block in run_initializers'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:228:in `block
in tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:350:in `block
(2 levels) in each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:422:in `block
(2 levels) in each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:431:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:421:in `block
in each_strongly_connected_component_from'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`tsort_each_child'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:349:in `block
in each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in
`each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:226:in
`tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:205:in
`tsort_each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:58:in
`run_initializers'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:353:in
`initialize!'
/var/www/html/config/environment.rb:5:in `<top (required)>'
config.ru:3:in `require_relative'
config.ru:3:in `block in <main>'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in
`instance_eval'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in `initialize'
config.ru:1:in `new'
config.ru:1:in `<main>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `eval'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `preload_app'
/usr/share/passenger/helper-scripts/rack-preloader.rb:156:in
`<module:App>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:30:in
`<module:PhusionPassenger>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:29:in `<main>'

[Ralph Shnelvar]

<html><head><title>Re: [Rails] Re: Secrets decryption error appeared (ActiveSupport::MessageEncryptor::InvalidMessage)</title>
</head>
<body>
<span style=" font-family:'Times New Roman'; font-size: 14pt;">Thomas,<br>
<br>
Could you point me at documentation about credentials v. encrypted secrets, please?<br>
<br>
Ralph<br>
<br>
<br>
<br>
Friday, April 13, 2018, 4:13:35 AM, you wrote:<br>
<br>
</span><table>
<tr>
<td width=2 bgcolor= #0000ff><br>
</td>
<td><span style=" font-family:'times new roman'; font-size: 14pt;">Let's ditch encrypted secrets. &nbsp;Rails 5.2 has been released. &nbsp;Moving to credentials.<br>
<br>
On Friday, April 13, 2018 at 9:17:43 AM UTC+1, ***@mipic.co wrote:<br>
Let me clarify the situation more, I see the typos.<br>
<br>
In my rails app, I was able to do "rails secrets:edit". &nbsp;The setup was stable and worked months, pipeline was building the app container for release too. &nbsp;This week, I have realized that when the container gets built in the pipeline then app fails to start with the error below.<br>
<br>
While I can run the app in my development container that had bundle installed weeks ago, in all other containers where bundle install gets performed, since this week, the app fails to start with the below error.<br>
<br>
The app uses ruby 2.5.0 and rails 5.1.5, bundler (1.16.1), rubygems-bundler (1.4.4)<br>
<br>
This error looks the same as a one, a few months ago, when ruby 2.5 required upgrade to the system gemset. &nbsp;Has anyone an idea what had gone wrong? &nbsp;Comparing Gemfile.lock between containers, bundled gems are of identical versions. &nbsp;It boils down to the ruby systems gemset, however, gemset is the latest version per below. &nbsp;Encryption key is identical, 100 times copied over &nbsp;or sent in env var ;) for not believing the app fails to start.<br>
<br>
$ sudo gem update --system<br>
Latest version already installed. Done.<br>
<br>
Cheers, Thomas<br>
<br>
On Thursday, April 12, 2018 at 6:52:40 PM UTC+1, ***@mipic.co wrote:<br>
Hi,<br>
<br>
How to fix the recent error regarding rails secrets encryption and ruby?<br>
<br>
I have one container running since week start that allows we to "rails secrets:edit" successfully. &nbsp;Today, if I carbon copy the source code, do new bundle install and secrets fail. &nbsp;What is going on?<br>
<br>
&nbsp;Message from application: ActiveSupport::MessageEncryptor::InvalidMessage (ActiveSupport::MessageEncryptor::InvalidMessage)<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:133:in `rescue in _decrypt'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:111:in `_decrypt'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:84:in `decrypt_and_verify'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:55:in `decrypt'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:96:in `preprocess'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:27:in `block in parse'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `each'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `each_with_object'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `parse'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:391:in `secrets'<br>
&nbsp;/var/www/html/config/initializers/swagger_ui_engine.rb:3:in `block in &lt;top (required)&gt;'<br>
&nbsp;/bundle/ruby/2.5.0/gems/swagger_ui_engine-1.1.0/lib/swagger_ui_engine.rb:15:in `configure'<br>
&nbsp;/var/www/html/config/initializers/swagger_ui_engine.rb:1:in `&lt;top (required)&gt;'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in `load'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in `block in load'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:258:in `load_dependency'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in `load'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:655:in `block in load_config_initializer'<br>
&nbsp;/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/notifications.rb:168:in `instrument'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:654:in `load_config_initializer'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:612:in `block (2 levels) in &lt;class:Engine&gt;'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `each'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `block in &lt;class:Engine&gt;'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in `instance_exec'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in `run'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:59:in `block in run_initializers'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:228:in `block in tsort_each'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:350:in `block (2 levels) in each_strongly_connected_component'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:422:in `block (2 levels) in each_strongly_connected_component_from'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:431:in `each_strongly_connected_component_from'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:421:in `block in each_strongly_connected_component_from'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in `each'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in `tsort_each_child'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in `call'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in `each_strongly_connected_component_from'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:349:in `block in each_strongly_connected_component'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `each'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `call'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `each_strongly_connected_component'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:226:in `tsort_each'<br>
&nbsp;/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:205:in `tsort_each'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:58:in `run_initializers'<br>
&nbsp;/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:353:in `initialize!'<br>
&nbsp;/var/www/html/config/environment.rb:5:in `&lt;top (required)&gt;'<br>
&nbsp;config.ru:3:in `require_relative'<br>
&nbsp;config.ru:3:in `block in &lt;main&gt;'<br>
&nbsp;/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in `instance_eval'<br>
&nbsp;/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in `initialize'<br>
&nbsp;config.ru:1:in `new'<br>
&nbsp;config.ru:1:in `&lt;main&gt;'<br>
&nbsp;/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `eval'<br>
&nbsp;/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `preload_app'<br>
&nbsp;/usr/share/passenger/helper-scripts/rack-preloader.rb:156:in `&lt;module:App&gt;'<br>
&nbsp;/usr/share/passenger/helper-scripts/rack-preloader.rb:30:in `&lt;module:PhusionPassenger&gt;'<br>
&nbsp;/usr/share/passenger/helper-scripts/rack-preloader.rb:29:in `&lt;main&gt;'<br>
-- <br>
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.<br>
To unsubscribe from this group and stop receiving emails from it, send an email to </span><a style=" font-family:'times new roman'; font-size: 14pt;" href="mailto:rubyonrails-talk+***@googlegroups.com">rubyonrails-talk+***@googlegroups.com</a><span style=" font-family:'times new roman'; font-size: 14pt;">.<br>
To post to this group, send email to </span><a style=" font-family:'times new roman'; font-size: 14pt;" href="mailto:rubyonrails-***@googlegroups.com">rubyonrails-***@googlegroups.com</a><span style=" font-family:'times new roman'; font-size: 14pt;">.<br>
To view this discussion on the web visit </span><a style=" font-family:'times new roman'; font-size: 14pt;" href="https://groups.google.com/d/msgid/rubyonrails-talk/c262ea56-237a-4bd0-adcc-a23d41f67ae9%40googlegroups.com?utm_medium=email&amp;utm_source=footer">https://groups.google.com/d/msgid/rubyonrails-talk/c262ea56-237a-4bd0-adcc-a23d41f67ae9%40googlegroups.com</a><span style=" font-family:'times new roman'; font-size: 14pt;">.<br>
For more options, visit </span><a style=" font-family:'times new roman'; font-size: 14pt;" href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a><span style=" font-family:'times new roman'; font-size: 14pt;">.</td>
</tr>
</table>
<br><br>
<br>
<br>
<span style=" font-family:'Times New Roman'; font-size: 14pt;">Ralph</body></html>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &quot;Ruby on Rails: Talk&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="mailto:rubyonrails-talk+***@googlegroups.com">rubyonrails-talk+***@googlegroups.com</a>.<br />
To post to this group, send email to <a href="mailto:rubyonrails-***@googlegroups.com">rubyonrails-***@googlegroups.com</a>.<br />
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/rubyonrails-talk/55528152.20180413043050%40dos32.com?utm_medium=email&utm_source=footer">https://groups.google.com/d/msgid/rubyonrails-talk/55528152.20180413043050%40dos32.com</a>.<br />
For more options, visit <a href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br />

[t***@mipic.co]

http://guides.rubyonrails.org/security.html#custom-credentials

Post by Ralph Shnelvar
Thomas,
Could you point me at documentation about credentials v. encrypted
secrets, please?
Ralph
Let's ditch encrypted secrets. Rails 5.2 has been released. Moving to
credentials.
Let me clarify the situation more, I see the typos.
In my rails app, I was able to do "rails secrets:edit". The setup was
stable and worked months, pipeline was building the app container for
release too. This week, I have realized that when the container gets built
in the pipeline then app fails to start with the error below.
While I can run the app in my development container that had bundle
installed weeks ago, in all other containers where bundle install gets
performed, since this week, the app fails to start with the below error.
The app uses ruby 2.5.0 and rails 5.1.5, bundler (1.16.1),
rubygems-bundler (1.4.4)
This error looks the same as a one, a few months ago, when ruby 2.5
required upgrade to the system gemset. Has anyone an idea what had gone
wrong? Comparing Gemfile.lock between containers, bundled gems are of
identical versions. It boils down to the ruby systems gemset, however,
gemset is the latest version per below. Encryption key is identical, 100
times copied over or sent in env var ;) for not believing the app fails to
start.
$ sudo gem update --system
Latest version already installed. Done.
Cheers, Thomas
Hi,
How to fix the recent error regarding rails secrets encryption and ruby?
I have one container running since week start that allows we to "rails
secrets:edit" successfully. Today, if I carbon copy the source code, do
new bundle install and secrets fail. What is going on?
Message from application: ActiveSupport::MessageEncryptor::InvalidMessage
(ActiveSupport::MessageEncryptor::InvalidMessage)
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:133:in
`rescue in _decrypt'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:111:in
`_decrypt'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/message_encryptor.rb:84:in
`decrypt_and_verify'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:55:in
`decrypt'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:96:in
`preprocess'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:27:in `block
in parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in
`each_with_object'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/secrets.rb:24:in `parse'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:391:in
`secrets'
/var/www/html/config/initializers/swagger_ui_engine.rb:3:in `block in
<top (required)>'
/bundle/ruby/2.5.0/gems/swagger_ui_engine-1.1.0/lib/swagger_ui_engine.rb:15:in
`configure'
/var/www/html/config/initializers/swagger_ui_engine.rb:1:in `<top
(required)>'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`block in load'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:258:in
`load_dependency'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/dependencies.rb:286:in
`load'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:655:in `block
in load_config_initializer'
/bundle/ruby/2.5.0/gems/activesupport-5.1.5/lib/active_support/notifications.rb:168:in
`instrument'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:654:in
`load_config_initializer'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:612:in `block
(2 levels) in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/engine.rb:611:in `block
in <class:Engine>'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`instance_exec'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:30:in
`run'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:59:in
`block in run_initializers'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:228:in `block in
tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:350:in `block (2
levels) in each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:422:in `block (2
levels) in each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:431:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:421:in `block in
each_strongly_connected_component_from'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:48:in
`tsort_each_child'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:415:in
`each_strongly_connected_component_from'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:349:in `block in
each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in `call'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:347:in
`each_strongly_connected_component'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:226:in
`tsort_each'
/usr/local/rvm/rubies/ruby-2.5.1/lib/ruby/2.5.0/tsort.rb:205:in
`tsort_each'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/initializable.rb:58:in
`run_initializers'
/bundle/ruby/2.5.0/gems/railties-5.1.5/lib/rails/application.rb:353:in
`initialize!'
/var/www/html/config/environment.rb:5:in `<top (required)>'
config.ru:3:in `require_relative'
config.ru:3:in `block in <main>'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in
`instance_eval'
/bundle/ruby/2.5.0/gems/rack-2.0.4/lib/rack/builder.rb:55:in `initialize'
config.ru:1:in `new'
config.ru:1:in `<main>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `eval'
/usr/share/passenger/helper-scripts/rack-preloader.rb:110:in `preload_app'
/usr/share/passenger/helper-scripts/rack-preloader.rb:156:in
`<module:App>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:30:in
`<module:PhusionPassenger>'
/usr/share/passenger/helper-scripts/rack-preloader.rb:29:in `<main>'
--
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/rubyonrails-talk/c262ea56-237a-4bd0-adcc-a23d41f67ae9%40googlegroups.com
<https://groups.google.com/d/msgid/rubyonrails-talk/c262ea56-237a-4bd0-adcc-a23d41f67ae9%40googlegroups.com?utm_medium=email&utm_source=footer>
.
For more options, visit https://groups.google.com/d/optout.
Ralph