search

chef-cookbooks / chef_client_updater

Chef Cookbook to update the chef client on nodes
https://supermarket.chef.io/cookbooks/chef_client_updater
Apache License 2.0
54 stars 79 forks source link

Cookbook hangs when upgrading on Solaris #226

Open btm opened 3 years ago

btm commented 3 years ago

Chef Infra 15.x,16.8.9, 16.9.16 Platform: solaris2 version 5.11 chef_client_updater: 3.11.1 Customer issue: https://github.com/chef/customer-bugs/issues/299

Upgrading by hand works fine, when upgrading with the cookbook it is hanging at: 

* chef_client_updater[Install latest Chef Infra Client] action update[2021-01-08T14:07:21-07:00] INFO: Processing chef_client_updater[Install latest Chef Infra Client] action update (cvs_chef_client::default line 49)

[2021-01-08T14:07:21-07:00] DEBUG: Found gem version 3.1.4. Desired version is >= 2.6.11

[2021-01-08T14:07:21-07:00] INFO: mixlib-install gem not found. Installing now

* chef_gem[mixlib-install] action install[2021-01-08T14:07:21-07:00] INFO: Processing chef_gem[mixlib-install] action install (/var/chef/cache/cookbooks/chef_client_updater/providers/default.rb line 36)
ayushbhatt29 commented 3 years ago

While trying to reproduce this issue and using chef-client-updater cookbook i am facing the following error

cannot verify omnitruck.chef.io's certificate, issued by ‘/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Atlas R3 DV TLS CA 2020’:
  Unable to locally verify the issuer's authority.
To connect to omnitruck.chef.io insecurely, use `--no-check-certificate'.

Any thoughts on how I can pass in either the --no-check-certificate or find a way to do this securely, in Solaris while using chef-client updater cookbook?

When faced the same error while bootstrapping the solaris vm i used this bootstrap option --bootstrap-install-command 'sudo wget https://packages.chef.io/files/stable/chef/16.8.9/solaris2/5.11/chef-16.8.9-1.i386.p5p -P /tmp -nc --no-check-certificate;pkg install -g file:/tmp/chef-16.8.9-1.i386.p5p chef to install chef-client successfully.