Azure / azure-linux-extensions

Linux Virtual Machine Extensions for Azure
Apache License 2.0
301 stars 251 forks source link

[Issue] AADSSHLoginForLinux VM extension install fails on Oracle Linux #1902

Open alarischu opened 4 months ago

alarischu commented 4 months ago

Description

AADSSHLoginForLinux VM extension deployment fails on Oracle Linux images.

Current behavior

Using Azure Portal, adding "Azure AD based SSH Login" extension to Oracle Linux image based VM, fails with error message:

The handler for VM extension type 'Microsoft.Azure.ActiveDirectory.AADSSHLoginForLinux' has reported terminal failure for VM extension 'AADSSHLogin' with error message: '[ExtensionOperationError] Non-zero exit code: 20, /var/lib/waagent/Microsoft.Azure.ActiveDirectory.AADSSHLoginForLinux-1.0.2385.1/./installer.sh install
[stdout]
Machine OS: ol v9.3 x86_64
OS similar to: rhel
Installing...
This is an Azure machine
Configuring microsoft-prod repo

[stderr]
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100    16  100    16    0     0   1142      0 --:--:-- --:--:-- --:--:--  1230
Cannot access https://packages.microsoft.com/ol/. HTTP Code: 403
'.

'Install handler failed for the extension. More information on troubleshooting is available at https://aka.ms/vmextensionlinuxtroubleshoot' (Code: VMExtensionHandlerNonTransientError)

Expected behavior

Install of extension should succeed with the following message:

Machine OS: ol v9.2 x86_64
OS similar to: rhel
Installing...
This is an Azure machine
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    16  100    16    0     0   1333      0 --:--:-- --:--:-- --:--:--  1454
Configuring microsoft-prod repo
There is no dedicated repo for ol; trying rhel instead
Installing aadsshlogin-selinux
Installing aadsshlogin

Installed:
  aadsshlogin-1.0.023850001-1.x86_64
  aadsshlogin-selinux-1.0.023850001-1.x86_64

Done.

Environment

Region: West Europe "imageReference": { "publisher": "Oracle", "offer": "Oracle-Linux", "sku": "ol92-lvm", "version": "latest", "exactVersion": "9.2.2" } "extensionProperties": { "autoUpgradeMinorVersion": true, "provisioningState": "Failed", "enableAutomaticUpgrade": false, "suppressFailures": false, "publisher": "Microsoft.Azure.ActiveDirectory", "type": "AADSSHLoginForLinux", "typeHandlerVersion": "1.0" }

Additional information

Temporary workaround is editing installer script line 316 manually and re-running in VM. Issue appears to be in Frontdoor config of https://packages.microsoft.com/ol - instead of expected response HTTP 404 (not found) it responds with HTTP 403 (forbidden). Possibly a duplicate of issue 1875.