echo 'Couldn'\''t find a valid ipv4 address, using the first IP found on the interfaces as the endpoint.'
Couldn't find a valid ipv4 address, using the first IP found on the interfaces as the endpoint.
++ awk '{print $2}'
++ grep -Eo 'dev .*'
++ ip -4 route list match default
DEFAULT_INTERFACE=venet0
++ grep -oE '\b([0-9]{1,3}.){3}[0-9]{1,3}\b'
++ awk '{print $2}'
++ head -n1
++ grep -w inet
++ ip -4 addr sh dev venet0
ENDPOINT=127.0.0.1
export ENDPOINT=127.0.0.1
ENDPOINT=127.0.0.1
echo 'Using 127.0.0.1 as the endpoint'
Using 127.0.0.1 as the endpoint
apt-get install python3-virtualenv jq -y
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
jq is already the newest version (1.6-2.1ubuntu3).
python3-virtualenv is already the newest version (20.13.0+ds-2).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
TASK [Ensure Ansible is not being run in a world writable directory] ***
ok: [localhost] => {
"changed": false,
"msg": "All assertions passed"
}
[DEPRECATION WARNING]: Use 'ansible.utils.ipaddr' module instead. This feature
will be removed from ansible.netcommon in a release after 2024-01-01.
Deprecation warnings can be disabled by setting deprecation_warnings=False in
ansible.cfg.
[WARNING]: The value '' is not a valid IP address or network, passing this
value to ipaddr filter might result in breaking change in future.
TASK [Ensure the requirements installed] ***
ok: [localhost]
TASK [Set required ansible version as a fact] **
ok: [localhost] => (item=ansible==9.1.0)
TASK [Just get the list from default pip] **
ok: [localhost]
TASK [Verify Python meets Algo VPN requirements] ***
ok: [localhost] => {
"changed": false,
"msg": "All assertions passed"
}
[WARNING]: Found variable using reserved name: no_log
TASK [common : Ensure fallback resolvers are set] **
ok: [localhost]
[DEPRECATION WARNING]: Use 'ansible.utils.ipmath' module instead. This feature
will be removed from ansible.netcommon in a release after 2024-01-01.
Deprecation warnings can be disabled by setting deprecation_warnings=False in
ansible.cfg.
TASK [common : Loopback for services configured] ***
ok: [localhost]
curl -s https://raw.githubusercontent.com/trailofbits/algo/master/install.sh | sudo -E bash -x
PLAY [localhost] ***
TASK [Gathering Facts] ***** ok: [localhost]
TASK [Playbook dir stat] *** ok: [localhost]
TASK [Ensure Ansible is not being run in a world writable directory] *** ok: [localhost] => { "changed": false, "msg": "All assertions passed" } [DEPRECATION WARNING]: Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. [WARNING]: The value '' is not a valid IP address or network, passing this value to ipaddr filter might result in breaking change in future.
TASK [Ensure the requirements installed] *** ok: [localhost]
TASK [Set required ansible version as a fact] ** ok: [localhost] => (item=ansible==9.1.0)
TASK [Just get the list from default pip] ** ok: [localhost]
TASK [Verify Python meets Algo VPN requirements] *** ok: [localhost] => { "changed": false, "msg": "All assertions passed" } [WARNING]: Found variable using reserved name: no_log
TASK [Verify Ansible meets Algo VPN requirements] ** ok: [localhost] => { "changed": false, "msg": "All assertions passed" }
PLAY [Ask user for the input] **
TASK [Gathering Facts] ***** ok: [localhost]
TASK [Set facts based on the input] **** ok: [localhost]
TASK [Set facts based on the input] **** ok: [localhost]
PLAY [Provision the server] ****
TASK [Gathering Facts] ***** ok: [localhost]
TASK [Install the requirements] **** ok: [localhost]
TASK [Include a provisioning role] ***** [WARNING]: Not waiting for response to prompt as stdin is not interactive
TASK [local : pause] *** ok: [localhost] => (item=https://trailofbits.github.io/algo/deploy-to-ubuntu.html
Local installation might break your server. Use at your own risk.
Proceed? Press ENTER to continue or CTRL+C and A to abort...)
TASK [local : Set the facts] *** ok: [localhost]
TASK [local : Set the facts] *** ok: [localhost]
TASK [Set subjectAltName as a fact] **** ok: [localhost]
TASK [Add the server to an inventory group] **** changed: [localhost]
TASK [Linux | set OS specific facts] *** ok: [localhost]
TASK [Set config paths as facts] *** ok: [localhost]
TASK [Update config paths] ***** changed: [localhost]
TASK [debug] *** ok: [localhost] => { "IP_subject_alt_name": "127.0.0.1" } [WARNING]: Reset is not implemented for this connection
TASK [Wait 600 seconds for target connection to become reachable/usable] *** ok: [localhost] => (item=localhost)
PLAY [Configure the server and install required software] **
TASK [common : Check the system] *** ok: [localhost]
TASK [common : include_tasks] ** included: /opt/algo/roles/common/tasks/ubuntu.yml for localhost
TASK [common : Gather facts] *** ok: [localhost]
TASK [common : Install unattended-upgrades] **** ok: [localhost]
TASK [common : Configure unattended-upgrades] ** ok: [localhost]
TASK [common : Periodic upgrades configured] *** ok: [localhost]
TASK [common : Disable MOTD on login and SSHD] ***** ok: [localhost] => (item={'regexp': '^session.optional.pam_motd.so.', 'line': '# MOTD DISABLED', 'file': '/etc/pam.d/login'}) ok: [localhost] => (item={'regexp': '^session.optional.pam_motd.so.', 'line': '# MOTD DISABLED', 'file': '/etc/pam.d/sshd'})
TASK [common : Ensure fallback resolvers are set] ** ok: [localhost] [DEPRECATION WARNING]: Use 'ansible.utils.ipmath' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
TASK [common : Loopback for services configured] *** ok: [localhost]
TASK [common : systemd services enabled and started] *** ok: [localhost] => (item=systemd-networkd) ok: [localhost] => (item=systemd-resolved)
TASK [common : Check apparmor support] ***** fatal: [localhost]: FAILED! => {"changed": false, "cmd": ["apparmor_status"], "delta": "0:00:00.003685", "end": "2024-01-16 08:48:22.799598", "msg": "non-zero return code", "rc": 1, "start": "2024-01-16 08:48:22.795913", "stderr": "apparmor not present.", "stderr_lines": ["apparmor not present."], "stdout": "", "stdout_lines": []} ...ignoring
TASK [common : Define facts] *** ok: [localhost]
TASK [common : Set facts] ** ok: [localhost]
TASK [common : Set IPv6 support as a fact] ***** ok: [localhost]
TASK [common : Check size of MTU] ** ok: [localhost]
TASK [common : Set OS specific facts] ** ok: [localhost]
TASK [common : Install tools] ** ok: [localhost]
TASK [common : include_tasks] ** included: /opt/algo/roles/common/tasks/iptables.yml for localhost
TASK [common : Iptables configured] **** ok: [localhost] => (item={'src': 'rules.v4.j2', 'dest': '/etc/iptables/rules.v4'})
TASK [common : Sysctl tuning] ** ok: [localhost] => (item={'item': 'net.ipv4.ip_forward', 'value': 1}) ok: [localhost] => (item={'item': 'net.ipv4.conf.all.forwarding', 'value': 1})
TASK [dns : Include tasks for Ubuntu] ** included: /opt/algo/roles/dns/tasks/ubuntu.yml for localhost
TASK [dns : Install dnscrypt-proxy] **** ok: [localhost]
TASK [dns : Ubuntu | Configure AppArmor policy for dnscrypt-proxy] ***** ok: [localhost]
TASK [dns : Ubuntu | Enforce the dnscrypt-proxy AppArmor policy] *** fatal: [localhost]: FAILED! => {"changed": false, "cmd": ["aa-enforce", "usr.bin.dnscrypt-proxy"], "delta": "0:00:00.207941", "end": "2024-01-16 08:48:28.741736", "msg": "non-zero return code", "rc": 1, "start": "2024-01-16 08:48:28.533795", "stderr": "\nERROR: Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.)\nWarning: unable to find a suitable fs in /proc/mounts, is it mounted?\nUse --subdomainfs to override.", "stderr_lines": ["", "ERROR: Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.)", "Warning: unable to find a suitable fs in /proc/mounts, is it mounted?", "Use --subdomainfs to override."], "stdout": "Setting /etc/apparmor.d/usr.bin.dnscrypt-proxy to enforce mode.", "stdout_lines": ["Setting /etc/apparmor.d/usr.bin.dnscrypt-proxy to enforce mode."]}
TASK [include_tasks] *** included: /opt/algo/playbooks/rescue.yml for localhost
TASK [debug] *** ok: [localhost] => { "fail_hint": [ "Sorry, but something went wrong!", "Please check the troubleshooting guide.", "https://trailofbits.github.io/algo/troubleshooting.html" ] }
TASK [Fail the installation] *** fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failed as requested from task"}
PLAY RECAP ***** localhost : ok=48 changed=2 unreachable=0 failed=1 skipped=34 rescued=1 ignored=1