geerlingguy
commented
1 month ago It's failing in CI as well... I wonder if some other repository may have GPG keys that aren't signed with SHA1 :/
See: Enhancing RHEL Security: Understanding SHA-1 deprecation on RHEL 9.
For now, I'm going to disable RHEL-based CI tests. If nobody can work on getting this working, I may elect to drop Red Hat-based OS support from this role; I don't do much with Erlang so I can't speak too much to easier installation methods.
I am not sure if Rocky 9 is supported or not. I tried to use the role to install RabbitMQ on Rocky 9.3 and I get the following error.
task path: /tmp/galaxy/roles/geerlingguy.rabbitmq/tasks/setup-RedHat.yml:7 failed: [rabbitmq01] (item=https://packagecloud.io/gpg.key) => changed=false ansible_loop_var: item item: https://packagecloud.io/gpg.key msg: |- warning: Signature not supported. Hash algorithm SHA1 not available. error: /tmp/tmpmr4u5_j7: key 1 import failed. failed: [rabbitmq01] (item=https://packagecloud.io/rabbitmq/erlang/gpgkey) => changed=false ansible_loop_var: item item: https://packagecloud.io/rabbitmq/erlang/gpgkey msg: |- warning: Signature not supported. Hash algorithm SHA1 not available. error: /tmp/tmpkyu1vb90: key 1 import failed. failed: [rabbitmq01] (item=https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey) => changed=false ansible_loop_var: item item: https://packagecloud.io/rabbitmq/rabbitmq-server/gpgkey msg: |- warning: Signature not supported. Hash algorithm SHA1 not available. error: /tmp/tmp7hl9751l: key 1 import failed. changed: [rabbitmq01] => (item=https://github.com/rabbitmq/signing-keys/releases/download/2.0/rabbitmq-release-signing-key.asc) => changed=true ansible_loop_var: item item: https://github.com/rabbitmq/signing-keys/releases/download/2.0/rabbitmq-release-signing-key.asc