Skip to main content الرئيسية المنشئون jeremylongshore tons-of-skills-marketplace oraclecloud-common-errors
oraclecloud-common-errors Diagnose and fix Oracle Cloud Infrastructure API errors with real error codes and proven fixes.
Use when encountering OCI ServiceError exceptions, auth failures, SSL issues, or timeout errors.
Trigger with "oci error", "fix oraclecloud", "debug oci", "NotAuthorizedOrNotFound", "oci 401".
الانتقال إلى التثبيت سوق المهارات اكتشف واستكشف مهارات الذكاء الاصطناعي التي بناها المجتمع.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
عرض تفاصيل Prompt يتجاوز الأمر المباشر Prompt المخصّص للمراجعة. افحص المصدر قبل تشغيله.
npx skills add https://github.com/jeremylongshore/tons-of-skills-marketplace --skill oraclecloud-common-errorsيبقى الأمر في سطر واحد. مرّر أفقيًا لمراجعته كاملًا قبل النسخ.
تفضّل نسخة محلية؟ نزّل الملفات المتاحة حاليًا لدى SkillsMP.
تحميل Zip جاري التحميل... المزيد من هذا المستودع langchain-deploy-integration Deploy a LangChain 1.0 / LangGraph 1.0 app to Cloud Run, Vercel, or LangServe correctly — with timeouts sized for chain length, cold-start mitigation, SSE anti-buffering headers, and Secret Manager over .env. Use when prepping a first production deploy, debugging a stream that hangs behind a proxy, or diagnosing p99 latency spikes. Trigger with "langchain deploy", "langchain cloud run", "langchain vercel python", "langchain langserve", or "langchain docker".
langchain-langgraph-agents Build a correct LangGraph 1.0 ReAct agent with create_react_agent — typed tools, error propagation, recursion caps, and stop conditions that actually stop. Use when writing a first tool-calling agent, migrating from AgentExecutor or initialize_agent, or diagnosing an agent that loops on vague prompts. Trigger with "langgraph agent", "create_react_agent", "langgraph tool calling", "AgentExecutor migration", or "agent loop cost".
langchain-langgraph-human-in-loop Build LangGraph 1.0 human-in-the-loop approval flows with interrupt_before /
interrupt_after and Command(resume=...) — JSON-serializable state, clean
resume semantics, and UI wiring for approval decisions. Use when adding an
approval gate before an expensive tool call, wiring a Slack/web UI for agent
approvals, or debugging a graph that crashes on interrupt.
Trigger with "langgraph human in loop", "langgraph interrupt_before",
"langgraph approval flow", "Command resume", "langgraph HITL".
name oraclecloud-common-errors description Diagnose and fix Oracle Cloud Infrastructure API errors with real error codes and proven fixes.
Use when encountering OCI ServiceError exceptions, auth failures, SSL issues, or timeout errors.
Trigger with "oci error", "fix oraclecloud", "debug oci", "NotAuthorizedOrNotFound", "oci 401".
allowed-tools Read, Grep, Bash(oci:*), Bash(pip:*), Bash(openssl:*), Bash(curl:*) version 1.7.0 license MIT author Jeremy Longshore <jeremy@intentsolutions.io> tags ["saas","oraclecloud","oci"] compatibility Designed for Claude Code
Oracle Cloud Common Errors
Overview
OCI API errors are notoriously cryptic. NotAuthorizedOrNotFound (404) could mean an IAM policy is missing or you typed the OCID wrong — the error is intentionally ambiguous for security. NotAuthenticated (401) covers six different config file problems. CERTIFICATE_VERIFY_FAILED has different fixes depending on your SDK language, OS, and whether you are behind a corporate proxy.
Purpose: A diagnostic decoder ring mapping every common OCI error to its real root cause and fix, with runnable diagnostic commands for each scenario.
Prerequisites
An OCI account with ~/.oci/config configured (see oraclecloud-install-auth)
Python 3.8+ with pip install oci installedOCI CLI installed (pip install oci-cli) for diagnostic commands
Instructions
Authentication Errors (401 NotAuthenticated)
The 401 error has six distinct root causes. Run this diagnostic to isolate which one:
import oci
import os
def diagnose_auth ():
"""Diagnose OCI 401 NotAuthenticated errors."""
config_path = os.path.expanduser("~/.oci/config" )
if not os.path.exists(config_path):
return "CAUSE: Config file missing. Run: oci setup config"
config = oci.config.from_file(config_path)
required = ["user" , "fingerprint" , "tenancy" , "region" , "key_file" ]
for field in required:
if field not in config or not config[field]:
return
f"CAUSE: Missing field '{field} ' in ~/.oci/config"
"key_file"
if
not
return
f"CAUSE: Key file not found: {key_path} "
with
open
"r"
as
if
"PUBLIC"
in
return
"CAUSE: key_file points to PUBLIC key. Use the private key (no _public suffix)"
oct
3
if
"600"
return
f"CAUSE: Key permissions are {perms} . Run: chmod 600 {key_path} "
return
"Config looks valid. Fingerprint mismatch? Verify in Console > User Settings > API Keys"
print
Symptom Root Cause Fix did not find a proper configuration for userMissing or malformed ~/.oci/config Recreate with oci setup config could not find private keykey_file path wrong or file missingCheck path; key must exist at that location private key does not matchFingerprint in config does not match uploaded public key Upload correct public key or regenerate pair key_file points to public keykey_file=~/.oci/oci_api_key_public.pemChange to key_file=~/.oci/oci_api_key.pem (private key) permission denied reading keyKey file permissions too open chmod 600 ~/.oci/oci_api_key.pemInvalidKeyIdUser OCID or tenancy OCID wrong Verify OCIDs in Console > Profile > User Settings
Authorization Errors (404 NotAuthorizedOrNotFound) This is the most confusing OCI error. A 404 means either the resource does not exist or you lack IAM permission to see it. OCI hides the distinction intentionally.
echo "ocid1.instance.oc1.iad.aaaa..." | grep -P '^ocid1\.\w+\.oc1\.'
oci compute instance list --compartment-id <COMPARTMENT_OCID> --limit 1
oci iam policy list --compartment-id <TENANCY_OCID> --all \
--query "data[?contains(statements[0], 'instances')]"
# Allow a group to manage compute in a compartment
allow group Developers to manage instances in compartment MyCompartment
# Allow a group to read all resources (useful for debugging)
allow group Developers to read all-resources in tenancy
SSL Certificate Errors (CERTIFICATE_VERIFY_FAILED)
import ssl
print (ssl.get_default_verify_paths())
import os
os.environ["REQUESTS_CA_BUNDLE" ] = "/etc/ssl/certs/ca-certificates.crt"
Environment Fix Linux (system Python) pip install --upgrade certifimacOS brew install ca-certificates + update certifiCorporate proxy Add proxy CA cert to certifi bundle Docker container Copy CA bundle: COPY ca-bundle.crt /etc/ssl/certs/ Air-gapped Set REQUESTS_CA_BUNDLE to local CA file
Rate Limit Errors (429 TooManyRequests) OCI does not send a Retry-After header. You must implement your own backoff:
import oci
import time
import random
def handle_rate_limit (fn, max_retries=5 ):
"""Handle OCI 429 errors. No Retry-After header — use jittered backoff."""
for attempt in range (max_retries):
try :
return fn()
except oci.exceptions.ServiceError as e:
if e.status == 429 :
delay = (2 ** attempt) + random.uniform(0 , 2 )
print (f"Rate limited. Waiting {delay:.1 f} s (attempt {attempt + 1 } )" )
time.sleep(delay)
else :
raise
raise RuntimeError("Rate limit retries exhausted" )
compute = oci.core.ComputeClient(
config, retry_strategy=oci.retry.DEFAULT_RETRY_STRATEGY
)
Timeout Errors (ServiceError status -1) A ServiceError with status == -1 means the SDK timed out before the server responded:
import oci
config = oci.config.from_file("~/.oci/config" )
compute = oci.core.ComputeClient(
config,
timeout=(10 , 60 )
)
object_storage = oci.object_storage.ObjectStorageClient(
config,
timeout=(10 , 600 )
)
Internal Server Errors (500 InternalError) import oci
compute = oci.core.ComputeClient(
oci.config.from_file("~/.oci/config" ),
retry_strategy=oci.retry.DEFAULT_RETRY_STRATEGY
)
Output After working through this diagnostic guide you will have:
Identified the exact root cause of your OCI error from the error code and message
A runnable diagnostic script for 401 auth errors that checks all six failure modes
IAM policy statements to resolve 404 authorization errors
Correct timeout and retry configuration for 429 and 500 errors
SSL certificate fixes for your specific environment
Error Handling Complete OCI Error Reference Table:
Error Status Exception Root Cause Fix NotAuthenticated 401 ServiceErrorWrong config, key, or fingerprint Run diagnose_auth() above NotAuthorizedOrNotFound 404 ServiceErrorMissing IAM policy OR wrong OCID Check OCID format, then IAM policies TooManyRequests 429 ServiceErrorRate limit exceeded Backoff with jitter (no Retry-After header) InternalError 500 ServiceErrorOCI service error Retry; check https://ocistatus.oraclecloud.com Timeout -1 ServiceErrorNo response in time Set timeout=(connect, read) on client CERTIFICATE_VERIFY_FAILED — SSLErrorCA bundle outdated or proxy Update certifi or set REQUESTS_CA_BUNDLE InvalidParameter 400 ServiceErrorMalformed request body Check OCID format and required fields Out of host capacity 500 ServiceErrorNo hosts available (ARM shapes) Retry loop; see oraclecloud-hello-world
Examples One-command connectivity test:
oci iam region list --output table 2>&1 || echo "FAILED — run oraclecloud-common-errors diagnostic"
Catch-all error handler for scripts:
import oci
import sys
config = oci.config.from_file("~/.oci/config" )
compute = oci.core.ComputeClient(config)
try :
compute.list_instances(compartment_id=config["tenancy" ])
print ("OK" )
except oci.exceptions.ServiceError as e:
print (f"OCI Error: {e.status} {e.code} " )
print (f"Message: {e.message} " )
print (f"Request ID: {e.request_id} " )
if e.status == 401 :
print ("ACTION: Check ~/.oci/config — see oraclecloud-install-auth" )
elif e.status == 404 :
print ("ACTION: Verify OCID and IAM policies — see 404 section above" )
elif e.status == 429 :
print ("ACTION: Rate limited — implement backoff" )
elif e.status == -1 :
print ("ACTION: Timeout — increase client timeout values" )
sys.exit(1 )
except oci.exceptions.ConfigFileNotFoundError:
print ("ACTION: ~/.oci/config not found. Run: oci setup config" )
sys.exit(1 )
Resources
Next Steps Once errors are resolved, see oraclecloud-sdk-patterns for retry and timeout patterns to prevent errors proactively, or oraclecloud-local-dev-loop for a productive development workflow with fast feedback.
