streisand icon indicating copy to clipboard operation
streisand copied to clipboard

Fix #1794 Update OpenVPN repository key

Open felegy opened this issue 4 years ago • 2 comments

felegy avatar Aug 05 '20 10:08 felegy

@felegy I had cloned in a new Streisand repo with your PR and was unable to get past:

  • error: Refresh the Streisand GPG keyring with keyserver information error.
  • same situation on both Digital Ocean and Linode.

full error:

fatal: [167.71.115.86]: FAILED! => {"attempts": 10, "changed": true, "cmd": ["gpg2", "--no-default-keyring", "--keyring", "/root/.gnupg/streisand/pubring.gpg", "--keyserver-options", "timeout=120", "--refresh"], "delta": "0:00:05.295726", "end": "2020-08-27 15:54:33.104050", "msg": "non-zero return code", "rc": 2, "start": "2020-08-27 15:54:27.808324", "stderr": "gpg: refreshing 10 keys from hkps://gpg.mozilla.org\ngpg: keyserver refresh failed: No data", "stderr_lines": ["gpg: refreshing 10 keys from hkps://gpg.mozilla.org", "gpg: keyserver refresh failed: No data"], "stdout": "", "stdout_lines": []}

markthomas93 avatar Aug 27 '20 16:08 markthomas93

@felegy I had cloned in a new Streisand repo with your PR and was unable to get past:

  • error: Refresh the Streisand GPG keyring with keyserver information error.
  • same situation on both Digital Ocean and Linode.

full error:

fatal: [167.71.115.86]: FAILED! => {"attempts": 10, "changed": true, "cmd": ["gpg2", "--no-default-keyring", "--keyring", "/root/.gnupg/streisand/pubring.gpg", "--keyserver-options", "timeout=120", "--refresh"], "delta": "0:00:05.295726", "end": "2020-08-27 15:54:33.104050", "msg": "non-zero return code", "rc": 2, "start": "2020-08-27 15:54:27.808324", "stderr": "gpg: refreshing 10 keys from hkps://gpg.mozilla.org\ngpg: keyserver refresh failed: No data", "stderr_lines": ["gpg: refreshing 10 keys from hkps://gpg.mozilla.org", "gpg: keyserver refresh failed: No data"], "stdout": "", "stdout_lines": []}

I believe that is an existing issue https://github.com/StreisandEffect/streisand/issues/1801 and the workaround for it is setting playbooks/roles/gpg/tasks/main.yml line 89 to when: False

The outdated OpenVPN signing key causes the installer to fail (TASK [openvpn : Add the official OpenVPN APT key; hiding 25 lines of log...] is failing) so this should be merged ASAP!

HR avatar Aug 27 '20 22:08 HR