adoptium / adoptium/infrastructure

Ansible request for GIT_Source role on CentOS6

Open
#3,946 3 comments 0 reactions 0 assignees View on GitHub
ansible
Dominant language
Python
Stars
96
Forks
106
Avg merge
1d 23h
Merged PRs (30d)
13

Description

Delete as appropriate from this list:

- Bug in ansible playbook

Details:
Git_Source role is failing in VPC on the [CentOS 6 job](https://ci.adoptium.net/view/Tooling/job/VagrantPlaybookCheck/OS=CentOS6,label=vagrant/2093/console):
```
14:11:54 TASK [GIT_Source : Download git source] ****************************************
14:11:54 FAILED - RETRYING: Download git source (3 retries left).
14:11:54 FAILED - RETRYING: Download git source (2 retries left).
14:11:56 FAILED - RETRYING: Download git source (1 retries left).
14:11:56 fatal: [localhost]: FAILED! => {"attempts": 3, "changed": false, "msg": "Failed to validate the SSL certificate for www.kernel.org:443. Make sure your managed systems have a valid CA certificate installed. If the website serving the url uses SNI you need python >= 2.7.9 on your managed machine (the python executable used (/usr/bin/python) is version: 2.6.6 (r266:84292, Jun 20 2019, 14:14:55) [GCC 4.4.7 20120313 (Red Hat 4.4.7-23)]) or you can install the `urllib3`, `pyOpenSSL`, `ndg-httpsclient`, and `pyasn1` python modules to perform SNI verification in python >= 2.6. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible. The exception msg was: hostname 'www.kernel.org' doesn't match 'm.sni-311-default.ssl.fastly.net'."}
```

Contributor guide

Open the contributing guide

Research direction

Start with the VagrantPlaybookCheck CentOS6 job log and the GIT_Source role's "Download git source" task. Check the reported Python and SSL/CA requirements around the www.kernel.org request, then rerun the CentOS6 job. Done means the role completes with certificate validation intact and the job passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
ansible, python
Domain
devops, infrastructure
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.