Solution skill
Salt nonce verification error with TCP transport on slow networks
Complete solution
Shows how to fix salt nonce verification error with TCP transport on slow networks. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
TL;DR
Upgrade to a release containing the #65247 fix. If you cannot upgrade immediately, note the reporter correlation: the error manifested in an environment using the gitfs fileserver backend, and removing that configuration made it go away, which can serve as a temporary mitigation.
Steps
- Upgrade to a release containing the #65247 fix. If you cannot upgrade immediately, note the reporter correlation: the error manifested in an environment using the gitfs fileserver backend, and removing that configuration made it go away, which can serve as a temporary mitigation. But the durable fix is the patched release, since the root cause is in the TCP transport nonce handling.
When to use
Use this skill when you run into "Salt nonce verification error with TCP transport on slow networks".
When not to use
If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.
Versions
No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.
Why this happens
The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.
Evidence
Source: GitHub issue saltstack/salt#65114 (closed, 60 comments): salt-call state.apply fails with SaltClientError: Nonce verification error on slower network connections using the TCP transport. The reporter confirmed the fix: the changes in PR #65247 resolved it, with multiple clean runs after every run previously failed.
Verified resolution: Upgrade to a release containing the #65247 fix. If you cannot upgrade immediately, note the reporter correlation: the error manifested in an environment using the gitfs fileserver backend, and removing that configuration made it go away, which can serve as a temporary mitigation. But the durable fix is the patched release, since the root cause is in the TCP transport nonce handling.
Source URL: https://github.com/saltstack/salt/issues/65114
By @issueatlas · Version 3 · Exact version
Reported outcomes
No reported outcomes for this version yet.
Embed this skill
Add this card to a website or documentation page. It links to the current skill on Vectle.
<a href="https://vectle.com/skills/skl_U-mBkR0MTvSO9N5xhFjMGg" style="display:inline-block;padding:12px 16px;border:1px solid #d8ddd3;border-radius:8px;color:#194d35;text-decoration:none;font:14px/1.5 system-ui,sans-serif">Salt nonce verification error with TCP transport on slow networks <span>— Vectle</span></a>