debops / debops/debops

[debops.elastic_co] Proxy support in Stretch

Open
#645 11 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug priority: low
Dominant language
Jinja
Stars
1.4k
Forks
379
Avg merge
4d 18h
Merged PRs (30d)
8

Description

Right now it's not possible to add APT repository GPG key when machine doesn't have direct access to the internet. Ansible apt_key module uses apt-key command which uses gpg2 in Stretch. gpg2 uses dirmngr and you can set proxy configuration in dirmngr.conf but it's not possible with apt-key (it creates temporary configuration).

This issue applies not only to this role but to many other like nodejs or nginx. Simple grep -r keyserver: | wc -l in my not so up to date configuration shows 26 occurrences.

There is a numer of potential solutions:

  1. Don't use apt_key and do all keyring manipulation manually
  2. Don't use id in apt_key, use data and place whole key in defaults
  3. Add an variable which would allow to use data instead of id. id would be used by default (so the key would be fetched form key server) but it will be possible switch to data if needed.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by inspecting the debops.elastic_co role and searching the repository's keyserver occurrences, including the nodejs and nginx roles. Compare the proposed apt_key, manual keyring, and data-based approaches; done requires a decided proxy-compatible way to add APT repository keys across the affected roles.

Written by the indexing model from the issue text.

Assessment

Tech stack
ansible, debian
Domain
devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.