ansible-community / ansible-community/molecule-plugins

sudo: unable to send audit message: Operation not permitted

Open
#80 1 comment 1 reaction 0 assignees View on GitHub
Dominant language
Python
Stars
164
Forks
113
Avg merge
4d 20h
Merged PRs (30d)
1

Description

After upgrading to `containers.podman==1.6.2` and trying to user the molecule-podman driver from main, I encountered failure to gather facts in prepare step like:

```
TASK [Gathering Facts] ***************************************************************************************************************************************
[WARNING]: Unhandled error in Python interpreter discovery for host centos8: Expecting value: line 1 column 1 (char 0)
fatal: [centos8]: FAILED! => changed=false
ansible_facts: {}
failed_modules:
setup:
ansible_facts:
discovered_interpreter_python: /usr/bin/python3.6
failed: true
module_stderr: |-
sudo: unable to send audit message: Operation not permitted
module_stdout: ''
msg: |-
MODULE FAILURE
See stdout/stderr for the exact error
rc: 0
warnings:
- Platform linux on host centos8 is using the discovered Python interpreter at /usr/bin/python3.6, but future installation of another Python interpreter could change this. See https://docs.ansible.com/ansible/2.9/reference_appendices/interpreter_discovery.html for more information.
msg: |-
The following modules failed to execute: setup
```

This happened with https://opendev.org/openstack/ansible-role-collect-logs/src/branch/master/roles/collect_logs/molecule/default scenario, the only change made was to switch driver from docker to podman.

I checked and container is running ok.

After removing pipelining option from config gathering started to work. Still this is a bug because we should not need to tune the config to make it work.
```
ssh_connection:
pipelining: true
```

@sshnaidm we should look into this tomorrow.

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the failure in the roles/collect_logs/molecule/default scenario after switching from Docker to the Podman driver, with ssh_connection.pipelining enabled. Compare the failing fact-gathering output with pipelining removed, then trace the molecule-Podman and Ansible setup path to identify why sudo cannot send the audit message. Done means fact gathering works without requiring users to disable pipelining.

Written by the indexing model from the issue text.

Assessment

Tech stack
ansible, python
Domain
devops, testing
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.