[debops.elastic_co] Proxy support in Stretch
Nobody has claimed this yet.
- Dominant language
- Jinja
- Stars
- 1.4k
- Forks
- 379
- Avg merge
- 4d 18h
- Merged PRs (30d)
- 8
Description
Right now it's not possible to add APT repository GPG key when machine doesn't have direct access to the internet. Ansible apt_key module uses apt-key command which uses gpg2 in Stretch. gpg2 uses dirmngr and you can set proxy configuration in dirmngr.conf but it's not possible with apt-key (it creates temporary configuration).
This issue applies not only to this role but to many other like nodejs or nginx. Simple grep -r keyserver: | wc -l in my not so up to date configuration shows 26 occurrences.
There is a numer of potential solutions:
- Don't use
apt_keyand do all keyring manipulation manually - Don't use
idinapt_key, usedataand place whole key in defaults - Add an variable which would allow to use
datainstead ofid.idwould be used by default (so the key would be fetched form key server) but it will be possible switch todataif needed.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the debops.elastic_co role and searching the repository's keyserver occurrences, including the nodejs and nginx roles. Compare the proposed apt_key, manual keyring, and data-based approaches; done requires a decided proxy-compatible way to add APT repository keys across the affected roles.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ansible, debian
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100