f5-ansible icon indicating copy to clipboard operation
f5-ansible copied to clipboard

Add support for ISO file authenticity verification

Open merillr opened this issue 3 years ago • 0 comments

Is your feature request related to a problem? Please describe.

When using the bigip_software_install module to install a new image, installation fails if the liveinstall.checksig database key is enabled and the .sig for the ISO is not pre-uploaded to /shared/images. See K15226.

Describe the solution you'd like

Provide a new module to upload .sig files or modify the bigip_software_image or bigip_software_install module to include this functionality.

Describe alternatives you've considered

I'm not sure that the ansible.builtin.copy module is an option because of the connection: local in the playbook and user accounts defaulting to tmsh. Disabling liveinstall.checksig prior to a bigip_software_install task is a workaround, but defeats the purpose.

Additional context

Resulting error is: failed (Signature file not found - /shared/images/BIGIP-<Version-Build>.iso.sig)

merillr avatar Aug 26 '21 07:08 merillr