linux-system-roles / nbde_client

Ansible role for configuring Network Bound Disk Encryption clients (e.g. clevis)
https://linux-system-roles.github.io/nbde_client/
MIT License
14 stars 24 forks source link

CI: Add support for RHEL-9 #35

Closed jharuda closed 3 years ago

jharuda commented 3 years ago

From now the rhel-8-y status is the latest unreleased RHEL-8 and the rhel-x status is pre-released RHEL-9.

richm commented 3 years ago

@sergio-correia any ideas about the test failures with ansible 2.8? e.g. rhel-x/ansible-2.8

TASK [linux-system-roles.nbde_client : Perform clevis operations] **************
task path: /tmp/tmpkswxea4z/tasks/main-clevis.yml:37
fatal: [/cache/rhel-x.qcow2]: FAILED! => {"changed": false, "module_stderr": "Shared connection to 127.0.0.3 closed.\r\n", "module_stdout": "/bin/sh: line 1: 16413 Killed                  /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1614155681.87-116373-19469548412925/AnsiballZ_nbde_client_clevis.py\r\n", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 137}
sergio-correia commented 3 years ago

@sergio-correia any ideas about the test failures with ansible 2.8? e.g. rhel-x/ansible-2.8

TASK [linux-system-roles.nbde_client : Perform clevis operations] **************
task path: /tmp/tmpkswxea4z/tasks/main-clevis.yml:37
fatal: [/cache/rhel-x.qcow2]: FAILED! => {"changed": false, "module_stderr": "Shared connection to 127.0.0.3 closed.\r\n", "module_stdout": "/bin/sh: line 1: 16413 Killed                  /usr/libexec/platform-python /root/.ansible/tmp/ansible-tmp-1614155681.87-116373-19469548412925/AnsiballZ_nbde_client_clevis.py\r\n", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 137}

No ideas yet. I will dig into this.

richm commented 3 years ago

[citest bad]

richm commented 3 years ago

[citest bad]

richm commented 3 years ago

@sergio-correia question about this error from rhel9:

TASK [Format test device as LUKS] **********************************************
task path: /tmp/tmpwqdhy8mj/tests/tasks/setup_test.yml:39
fatal: [/cache/rhel-x.qcow2]: FAILED! => {"changed": false, "cmd": "echo -n test-password-here | cryptsetup luksFormat --pbkdf pbkdf2 --pbkdf-force-iterations 1000 --batch-mode --force-password /tmp/.nbde_client_dev_test\n", "delta": "0:00:00.004085", "end": "2021-02-25 10:52:44.115575", "msg": "non-zero return code", "rc": 127, "start": "2021-02-25 10:52:44.111490", "stderr": "/bin/sh: line 1: cryptsetup: command not found", "stderr_lines": ["/bin/sh: line 1: cryptsetup: command not found"], "stdout": "", "stdout_lines": []}

is the cryptsetup command provided by a different package in rhel9?

sergio-correia commented 3 years ago

@sergio-correia question about this error from rhel9:

TASK [Format test device as LUKS] **********************************************
task path: /tmp/tmpwqdhy8mj/tests/tasks/setup_test.yml:39
fatal: [/cache/rhel-x.qcow2]: FAILED! => {"changed": false, "cmd": "echo -n test-password-here | cryptsetup luksFormat --pbkdf pbkdf2 --pbkdf-force-iterations 1000 --batch-mode --force-password /tmp/.nbde_client_dev_test\n", "delta": "0:00:00.004085", "end": "2021-02-25 10:52:44.115575", "msg": "non-zero return code", "rc": 127, "start": "2021-02-25 10:52:44.111490", "stderr": "/bin/sh: line 1: cryptsetup: command not found", "stderr_lines": ["/bin/sh: line 1: cryptsetup: command not found"], "stdout": "", "stdout_lines": []}

is the cryptsetup command provided by a different package in rhel9?

I don't think so; should still be in the cryptsetup package. Scroll up a little in the log and check whether it was installed successfully... err.. while writing this I realized we also need to provide the list of additional packages to install in tests/vars/RedHat_9.yml (this file still does not exist)

sergio-correia commented 3 years ago

@jharuda: would you please add also tests/vars/RedHat_9.yml?

richm commented 3 years ago

[citest bad]

jharuda commented 3 years ago

@sergio-correia: would you please add also tests/vars/RedHat_9.yml?

I added it in the latest commit.

richm commented 3 years ago

[citest]

richm commented 3 years ago

@sergio-correia is there a cryptsetup log file or verbose level which could give us some more information about the failures?

sergio-correia commented 3 years ago

@sergio-correia is there a cryptsetup log file or verbose level which could give us some more information about the failures?

Right now there isn't a way to provide --debug to cryptsetup, which would be helpful here. I will do a dummy PR adding it to check if we can diagnose this for now.