trailofbits / algo

Set up a personal VPN in the cloud
https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/
GNU Affero General Public License v3.0
28.98k stars 2.32k forks source link

installation fails on fresh install of LinuxMint 19.2: "Could not find the requested service dnscrypt-proxy: host" #1668

Closed laram1989 closed 4 years ago

laram1989 commented 4 years ago

Describe the bug

Installation of Algo (freshly cloned from github as of Dec 25, 2019) fails on fresh install of Linux Mint 19.2 (based on Ubuntu 18.04 LTS).

To Reproduce

Steps to reproduce the behavior:

  1. Download Algo from Github
  2. Install python3-virtualenv
  3. cd into algo-master folder and run code-block provided in point 4 of Algo installation instructions ("Install Algo's remaining dependencies")
  4. Execute ./algo -vv
  5. Choose "11. Install to existing Ubuntu 18.04, 19.04, or 19.10 server", enter "localhost" as the IP address of the server and the public IP address of my server when prompted for that.

Expected behavior

I expected Algo to install as flawlessly as when I recently installed it on an DigitalOcean instance!

Additional context

Two additional pieces of information in case they are of help:

1) I have noticed that after installing the Algo dependencies (step 3 in the list above) my shell prompt seems to be within the Python virtualenv (ie, it is prefixed with (.env) ). I tried running ./algo both on that prompt as well as after Control-Ding out of it but got the same behavior.

2) The first error message I got pointed out that /etc/dnscrypt-crypt did not exist and the installation was failing for that reason. So I tried installing that package with apt-get install dnscrypt-proxy. Now I get the error message you will find below:

"Could not find the requested service dnscrypt-proxy: host"

Full log

(.env) root@on:~/algo-master# ./algo -vv
ansible-playbook 2.8.3
  config file = /root/algo-master/ansible.cfg
    configured module search path = ['/root/.ansible/plugins/modules',
'/usr/share/ansible/plugins/modules']
  ansible python module location =
/root/algo-master/.env/lib/python3.6/site-packages/ansible
  executable location = /root/algo-master/.env/bin/ansible-playbook
    python version = 3.6.9 (default, Nov  7 2019, 10:44:02) [GCC 8.3.0]
    Using /root/algo-master/ansible.cfg as config file
    statically imported: /root/algo-master/playbooks/cloud-pre.yml
    statically imported: /root/algo-master/playbooks/cloud-post.yml
    statically imported: /root/algo-master/playbooks/tmpfs/main.yml
    statically imported: /root/algo-master/playbooks/tmpfs/macos.yml
    statically imported: /root/algo-master/playbooks/tmpfs/linux.yml
     [WARNING]: Could not match supplied host pattern, ignoring:
vpn-host

statically imported:
/root/algo-master/roles/dns/tasks/dns_adblocking.yml
statically imported: /root/algo-master/roles/wireguard/tasks/keys.yml
statically imported:
/root/algo-master/roles/strongswan/tasks/ipsec_configuration.yml
statically imported:
/root/algo-master/roles/strongswan/tasks/openssl.yml
statically imported:
/root/algo-master/roles/strongswan/tasks/distribute_keys.yml
statically imported:
/root/algo-master/roles/strongswan/tasks/client_configs.yml
statically imported: /root/algo-master/playbooks/tmpfs/umount.yml

PLAYBOOK: main.yml
************************************************************************************
4 plays in main.yml

PLAY [localhost]
**************************************************************************************

TASK [Gathering Facts]
********************************************************************************
task path: /root/algo-master/main.yml:2
ok: [localhost]
META: ran handlers

TASK [Playbook dir stat]
******************************************************************************
task path: /root/algo-master/main.yml:5
ok: [localhost] => {"changed": false, "stat": {"atime":
1577292924.22674, "attr_flags": "e", "attributes": ["extents"],
"block_size": 4096, "blocks": 8, "charset": "binary", "ctime":
1577292921.6427133, "dev": 2050, "device_type": 0, "executable": true,
"exists": true, "gid": 0, "gr_name": "root", "inode": 19923801,
"isblk": false, "ischr": false, "isdir": true, "isfifo": false,
"isgid": false, "islnk": false, "isreg": false, "issock": false,
"isuid": false, "mimetype": "inode/directory", "mode": "0755",
"mtime": 1577292921.6427133, "nlink": 11, "path": "/root/algo-master",
"pw_name": "root", "readable": true, "rgrp": true, "roth": true,
"rusr": true, "size": 4096, "uid": 0, "version": "1692961657", "wgrp":
false, "woth": false, "writeable": true, "wusr": true, "xgrp": true,
"xoth": true, "xusr": true}}

TASK [Ensure Ansible is not being run in a world writable directory]
**********************************
task path: /root/algo-master/main.yml:10
ok: [localhost] => {
    "changed": false,
        "msg": "All assertions passed"
    }

    TASK [Ensure the requirements installed]
**************************************************************
task path: /root/algo-master/main.yml:17
ok: [localhost] => {"censored": "the output has been hidden due to the
fact that 'no_log: true' was specified for this result"}

TASK [Set required ansible version as a fact]
*********************************************************
task path: /root/algo-master/main.yml:24
ok: [localhost] => (item=ansible==2.8.3) => {"ansible_facts":
{"required_ansible_version": {"op": "==", "ver": "2.8.3"}},
"ansible_loop_var": "item", "changed": false, "item": "ansible==2.8.3"}

TASK [Verify Python meets Algo VPN requirements]
******************************************************
task path: /root/algo-master/main.yml:32
ok: [localhost] => {
    "changed": false,
        "msg": "All assertions passed"
    }

    TASK [Verify Ansible meets Algo VPN requirements]
*****************************************************
task path: /root/algo-master/main.yml:40
ok: [localhost] => {
    "changed": false,
        "msg": "All assertions passed"
    }
    META: ran handlers
    META: ran handlers

    PLAY [Ask user for the input]
*************************************************************************

TASK [Gathering Facts]
********************************************************************************
task path: /root/algo-master/input.yml:2
ok: [localhost]
META: ran handlers
[Cloud prompt]
What provider would you like to use?
    1. DigitalOcean
        2. Amazon Lightsail
        3. Amazon EC2
            4. Microsoft Azure
            5. Google Compute Engine
                6. Hetzner Cloud
                7. Vultr
                    8. Scaleway
                    9. OpenStack (DreamCompute optimised)
                        10. CloudStack (Exoscale optimised)
                        11. Install to existing
Ubuntu 18.04, 19.04, or 19.10 server (Advanced)

  Enter the number of your desired provider
  :
  [[
  TASK [Cloud prompt]
***********************************************************************************
task path: /root/algo-master/input.yml:30
ok: [localhost] => {"changed": false, "delta": 1, "echo": true, "rc":
0, "start": "2019-12-25 11:55:29.451360", "stderr": "", "stdout":
"Paused for 0.02 minutes", "stop": "2019-12-25 11:55:30.846541",
"user_input": "11"}

TASK [Set facts based on the input]
*******************************************************************
task path: /root/algo-master/input.yml:42
ok: [localhost] => {"ansible_facts": {"algo_provider": "local"},
"changed": false}
[Cellular On Demand prompt]
Do you want macOS/iOS IPsec clients to enable "Connect On Demand" when
connected to cellular networks?
[y/N]
:
[[
TASK [Cellular On Demand prompt]
**********************************************************************
task path: /root/algo-master/input.yml:56
ok: [localhost] => {"changed": false, "delta": 4, "echo": true, "rc":
0, "start": "2019-12-25 11:55:30.955070", "stderr": "", "stdout":
"Paused for 0.07 minutes", "stop": "2019-12-25 11:55:35.155675",
"user_input": ""}
[Wi-Fi On Demand prompt]
Do you want macOS/iOS IPsec clients to enable "Connect On Demand" when
connected to Wi-Fi?
[y/N]
:
[[
TASK [Wi-Fi On Demand prompt]
*************************************************************************
task path: /root/algo-master/input.yml:64
ok: [localhost] => {"changed": false, "delta": 1, "echo": true, "rc":
0, "start": "2019-12-25 11:55:35.193663", "stderr": "", "stdout":
"Paused for 0.02 minutes", "stop": "2019-12-25 11:55:36.303400",
"user_input": ""}
[Retain the PKI prompt]
Do you want to retain the keys (PKI)? (required to add users in the
future, but less secure)
[y/N]
:
[[
TASK [Retain the PKI prompt]
**************************************************************************
task path: /root/algo-master/input.yml:83
ok: [localhost] => {"changed": false, "delta": 1, "echo": true, "rc":
0, "start": "2019-12-25 11:55:36.367508", "stderr": "", "stdout":
"Paused for 0.03 minutes", "stop": "2019-12-25 11:55:38.015711",
"user_input": "y"}
[DNS adblocking prompt]
Do you want to enable DNS ad blocking on this VPN server?
[y/N]
:
[[
TASK [DNS adblocking prompt]
**************************************************************************
task path: /root/algo-master/input.yml:92
ok: [localhost] => {"changed": false, "delta": 6, "echo": true, "rc":
0, "start": "2019-12-25 11:55:38.052893", "stderr": "", "stdout":
"Paused for 0.11 minutes", "stop": "2019-12-25 11:55:44.871951",
"user_input": ""}
[SSH tunneling prompt]
Do you want each user to have their own account for SSH tunneling?
[y/N]
:
[[
TASK [SSH tunneling prompt]
***************************************************************************
task path: /root/algo-master/input.yml:100
ok: [localhost] => {"changed": false, "delta": 1, "echo": true, "rc":
0, "start": "2019-12-25 11:55:44.935208", "stderr": "", "stdout":
"Paused for 0.02 minutes", "stop": "2019-12-25 11:55:46.371194",
"user_input": ""}

TASK [Set facts based on the input]
*******************************************************************
task path: /root/algo-master/input.yml:108
ok: [localhost] => {"ansible_facts": {"algo_dns_adblocking": false,
"algo_ondemand_cellular": false, "algo_ondemand_wifi": false,
"algo_ondemand_wifi_exclude": "X251bGw=", "algo_server_name": "algo",
"algo_ssh_tunneling": false, "algo_store_pki": true}, "changed": false}
META: ran handlers
META: ran handlers

PLAY [Provision the server]
***************************************************************************

TASK [Gathering Facts]
********************************************************************************
task path: /root/algo-master/cloud.yml:2
ok: [localhost]
META: ran handlers

--> Please include the following block of text when reporting issues:

Algo running on: Linux Mint 19.2
ZIP file created: 2019-12-13 04:35:44.000000000 -0500
Python 3.6.9
Runtime variables:
    algo_provider "local"
        algo_ondemand_cellular "False"
        algo_ondemand_wifi "False"
            algo_ondemand_wifi_exclude "X251bGw="
            algo_dns_adblocking "False"
                algo_ssh_tunneling "False"
                wireguard_enabled "True"
                    dns_encryption "True"

                TASK [Display the invocation
environment]
*************************************************************
task path: /root/algo-master/playbooks/cloud-pre.yml:3
changed: [localhost -> localhost] => {"changed": true, "cmd":
"./algo-showenv.sh  'algo_provider \"local\"'
'algo_ondemand_cellular \"False\"'  'algo_ondemand_wifi \"False\"'
'algo_ondemand_wifi_exclude \"X251bGw=\"'    'algo_dns_adblocking
\"False\"'  'algo_ssh_tunneling \"False\"'  'wireguard_enabled
\"True\"'  'dns_encryption \"True\"'  > /dev/tty\n", "delta":
"0:00:00.008652", "end": "2019-12-25 11:55:47.330966", "rc": 0,
"start": "2019-12-25 11:55:47.322314", "stderr": "", "stderr_lines":
[], "stdout": "", "stdout_lines": []}

TASK [Install the requirements]
***********************************************************************
task path: /root/algo-master/playbooks/cloud-pre.yml:19
changed: [localhost -> localhost] => {"changed": true, "cmd":
["/root/algo-master/.env/bin/pip3", "install", "-U", "pyOpenSSL",
"jinja2==2.8", "segno"], "name": ["pyOpenSSL", "jinja2==2.8",
"segno"], "requirements": null, "state": "latest", "stderr": "",
"stderr_lines": [], "stdout": "Collecting pyOpenSSL\n  Using cached
https://files.pythonhosted.org/packages/9e/de/f8342b68fa9e981d348039954657bdf681b2ab93de27443be51865ffa310/pyOpenSSL-19.1.0-py2.py3-none-any.whl\nCollecting
jinja2==2.8\n  Using cached
https://files.pythonhosted.org/packages/96/a1/c56bc4d99dc2663514a8481511e80eba8994133ae75eebdadfc91a5597d9/Jinja2-2.8-py2.py3-none-any.whl\nCollecting
segno\n  Using cached
https://files.pythonhosted.org/packages/3d/ea/c103015d85fb545a15ffbf5711f1679d6e37cb84666a16dbac51c2be94fd/segno-0.3.2-py2.py3-none-any.whl\nRequirement
already satisfied, skipping upgrade: six>=1.5.2 in
/root/algo-master/.env/lib/python3.6/site-packages (from pyOpenSSL)
(1.13.0)\nRequirement already satisfied, skipping upgrade:
cryptography>=2.8 in
/root/algo-master/.env/lib/python3.6/site-packages (from pyOpenSSL)
(2.8)\nRequirement already satisfied, skipping upgrade: MarkupSafe in
/root/algo-master/.env/lib/python3.6/site-packages (from jinja2==2.8)
(1.1.1)\nRequirement already satisfied, skipping upgrade:
cffi!=1.11.3,>=1.8 in
/root/algo-master/.env/lib/python3.6/site-packages (from
cryptography>=2.8->pyOpenSSL) (1.13.2)\nRequirement already satisfied,
skipping upgrade: pycparser in
/root/algo-master/.env/lib/python3.6/site-packages (from
cffi!=1.11.3,>=1.8->cryptography>=2.8->pyOpenSSL) (2.19)\nInstalling
collected packages: pyOpenSSL, jinja2, segno\n  Found existing
installation: Jinja2 2.10.3\n    Uninstalling Jinja2-2.10.3:\n
Successfully uninstalled Jinja2-2.10.3\nSuccessfully installed
jinja2-2.8 pyOpenSSL-19.1.0 segno-0.3.2\n", "stdout_lines":
["Collecting pyOpenSSL", "  Using cached
https://files.pythonhosted.org/packages/9e/de/f8342b68fa9e981d348039954657bdf681b2ab93de27443be51865ffa310/pyOpenSSL-19.1.0-py2.py3-none-any.whl",
"Collecting jinja2==2.8", "  Using cached
https://files.pythonhosted.org/packages/96/a1/c56bc4d99dc2663514a8481511e80eba8994133ae75eebdadfc91a5597d9/Jinja2-2.8-py2.py3-none-any.whl",
"Collecting segno", "  Using cached
https://files.pythonhosted.org/packages/3d/ea/c103015d85fb545a15ffbf5711f1679d6e37cb84666a16dbac51c2be94fd/segno-0.3.2-py2.py3-none-any.whl",
"Requirement already satisfied, skipping upgrade: six>=1.5.2 in
/root/algo-master/.env/lib/python3.6/site-packages (from pyOpenSSL)
(1.13.0)", "Requirement already satisfied, skipping upgrade:
cryptography>=2.8 in
/root/algo-master/.env/lib/python3.6/site-packages (from pyOpenSSL)
(2.8)", "Requirement already satisfied, skipping upgrade: MarkupSafe
in /root/algo-master/.env/lib/python3.6/site-packages (from
jinja2==2.8) (1.1.1)", "Requirement already satisfied, skipping
upgrade: cffi!=1.11.3,>=1.8 in
/root/algo-master/.env/lib/python3.6/site-packages (from
cryptography>=2.8->pyOpenSSL) (1.13.2)", "Requirement already
satisfied, skipping upgrade: pycparser in
/root/algo-master/.env/lib/python3.6/site-packages (from
cffi!=1.11.3,>=1.8->cryptography>=2.8->pyOpenSSL) (2.19)", "Installing
collected packages: pyOpenSSL, jinja2, segno", "  Found existing
installation: Jinja2 2.10.3", "    Uninstalling Jinja2-2.10.3:", "
Successfully uninstalled Jinja2-2.10.3", "Successfully installed
jinja2-2.8 pyOpenSSL-19.1.0 segno-0.3.2"], "version": null,
"virtualenv": null}
statically imported: /root/algo-master/roles/local/tasks/prompts.yml
[local : pause]
Enter the IP address of your server: (or use localhost for local
installation):
[localhost]
:
[[
TASK [local : pause]
**********************************************************************************
task path: /root/algo-master/roles/local/tasks/prompts.yml:2
ok: [localhost] => {"changed": false, "delta": 2, "echo": true, "rc":
0, "start": "2019-12-25 11:55:48.485392", "stderr": "", "stdout":
"Paused for 0.05 minutes", "stop": "2019-12-25 11:55:51.381452",
"user_input": "localhost"}

TASK [local : Set the facts]
**************************************************************************
task path: /root/algo-master/roles/local/tasks/prompts.yml:9
ok: [localhost] => {"ansible_facts": {"cloud_instance_ip":
"localhost"}, "changed": false}
[local : pause]
Enter the public IP address or domain name of your server: (IMPORTANT!
This is used to verify the certificate)
[localhost]
:
[[
TASK [local : pause]
**********************************************************************************
task path: /root/algo-master/roles/local/tasks/prompts.yml:32
ok: [localhost] => {"changed": false, "delta": 15, "echo": true, "rc":
0, "start": "2019-12-25 11:55:51.498890", "stderr": "", "stdout":
"Paused for 0.25 minutes", "stop": "2019-12-25 11:56:06.629259",
"user_input": "XXX.XXX.XXX.XXX"}

TASK [local : Set the facts]
**************************************************************************
task path: /root/algo-master/roles/local/tasks/prompts.yml:39
ok: [localhost] => {"ansible_facts": {"IP_subject_alt_name":
"XXX.XXX.XXX.XXX"}, "changed": false}

TASK [Set subjectAltName as a fact]
*******************************************************************
task path: /root/algo-master/playbooks/cloud-post.yml:2
ok: [localhost] => {"ansible_facts": {"IP_subject_alt_name":
"XXX.XXX.XXX.XXX"}, "changed": false}
creating host via 'add_host': hostname=localhost

TASK [Add the server to an inventory group]
***********************************************************
task path: /root/algo-master/playbooks/cloud-post.yml:6
changed: [localhost] => {"add_host": {"groups": ["vpn-host"],
"host_name": "localhost", "host_vars": {"IP_subject_alt_name":
"XXX.XXX.XXX.XXX", "algo_dns_adblocking": false,
"algo_ondemand_cellular": false, "algo_ondemand_wifi": false,
"algo_ondemand_wifi_exclude": "X251bGw=", "algo_provider": "local",
"algo_server_name": "algo", "algo_ssh_tunneling": false,
"algo_store_pki": true, "ansible_connection": "local",
"ansible_python_interpreter": "/usr/bin/python3", "ansible_ssh_user":
"root"}}, "changed": true}

TASK [debug]
******************************************************************************************
task path: /root/algo-master/playbooks/cloud-post.yml:47
ok: [localhost] => {
    "IP_subject_alt_name": "XXX.XXX.XXX.XXX"
    }
    Pausing for 20 seconds
    (ctrl+C then 'C' = continue early, ctrl+C then 'A' = abort)

    TASK [A short pause, in order to be sure the instance is ready]
***************************************
task path: /root/algo-master/playbooks/cloud-post.yml:50
ok: [localhost] => {"changed": false, "delta": 20, "echo": true, "rc":
0, "start": "2019-12-25 11:56:06.928376", "stderr": "", "stdout":
"Paused for 20.0 seconds", "stop": "2019-12-25 11:56:26.928884",
"user_input": ""}
META: ran handlers
META: ran handlers

PLAY [Configure the server and install required software]
*********************************************
META: ran handlers

TASK [common : Check the system]
**********************************************************************
task path: /root/algo-master/roles/common/tasks/main.yml:2
ok: [localhost] => {"changed": false, "rc": 0, "stderr": "",
"stderr_lines": [], "stdout": "Linux on 4.15.0-54-generic #58-Ubuntu
SMP Mon Jun 24 10:55:24 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux\n",
"stdout_lines": ["Linux on 4.15.0-54-generic #58-Ubuntu SMP Mon Jun 24
10:55:24 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux"]}
statically imported:
/root/algo-master/roles/common/tasks/unattended-upgrades.yml
statically imported: /root/algo-master/roles/common/tasks/facts.yml
included: /root/algo-master/roles/common/tasks/ubuntu.yml for localhost

TASK [common : Gather facts]
**************************************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:2
ok: [localhost]

TASK [common : Install unattended-upgrades]
***********************************************************
task path:
/root/algo-master/roles/common/tasks/unattended-upgrades.yml:2
ok: [localhost] => {"cache_update_time": 1577289523, "cache_updated":
false, "changed": false}

TASK [common : Configure unattended-upgrades]
*********************************************************
task path:
/root/algo-master/roles/common/tasks/unattended-upgrades.yml:7
ok: [localhost] => {"changed": false, "checksum":
"f0cebd7ebf9763e40ada03e364e2e769758c312e", "dest":
"/etc/apt/apt.conf.d/50unattended-upgrades", "gid": 0, "group":
"root", "mode": "0644", "owner": "root", "path":
"/etc/apt/apt.conf.d/50unattended-upgrades", "size": 3797, "state":
"file", "uid": 0}

TASK [common : Periodic upgrades configured]
**********************************************************
task path:
/root/algo-master/roles/common/tasks/unattended-upgrades.yml:15
ok: [localhost] => {"changed": false, "checksum":
"eac74547eec217a356899a6d8a377d3f1522851a", "dest":
"/etc/apt/apt.conf.d/10periodic", "gid": 0, "group": "root", "mode":
"0644", "owner": "root", "path": "/etc/apt/apt.conf.d/10periodic",
"size": 168, "state": "file", "uid": 0}

TASK [common : Disable MOTD on login and SSHD]
********************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:42
ok: [localhost] => (item={'regexp':
'^session.*optional.*pam_motd.so.*', 'line': '# MOTD DISABLED',
'file': '/etc/pam.d/login'}) => {"ansible_loop_var": "item",
"changed": false, "item": {"file": "/etc/pam.d/login", "line": "# MOTD
DISABLED", "regexp": "^session.*optional.*pam_motd.so.*"}, "msg": ""}
ok: [localhost] => (item={'regexp':
'^session.*optional.*pam_motd.so.*', 'line': '# MOTD DISABLED',
'file': '/etc/pam.d/sshd'}) => {"ansible_loop_var": "item", "changed":
false, "item": {"file": "/etc/pam.d/sshd", "line": "# MOTD DISABLED",
"regexp": "^session.*optional.*pam_motd.so.*"}, "msg": ""}

TASK [common : Loopback for services configured]
******************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:48
ok: [localhost] => {"changed": false, "checksum":
"8c8c749e6818c35bdb85350d3864d401aa6bfe43", "dest":
"/etc/systemd/network/10-algo-lo100.network", "gid": 0, "group":
"root", "mode": "0644", "owner": "root", "path":
"/etc/systemd/network/10-algo-lo100.network", "size": 97, "state":
"file", "uid": 0}

TASK [common : systemd services enabled and started]
**************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:55
ok: [localhost] => (item=systemd-networkd) => {"ansible_loop_var":
"item", "changed": false, "enabled": true, "item": "systemd-networkd",
"name": "systemd-networkd", "state": "started", "status":
{"ActiveEnterTimestamp": "Wed 2019-12-25 10:58:40 EST",
"ActiveEnterTimestampMonotonic": "515277890008",
"ActiveExitTimestamp": "Wed 2019-12-25 10:58:40 EST",
"ActiveExitTimestampMonotonic": "515277802881", "ActiveState":
"active", "After": "systemd-sysusers.service dns-clean.service
network-pre.target systemd-udevd.service -.mount
systemd-journald.socket systemd-sysctl.service system.slice
systemd-networkd.socket", "AllowIsolate": "no", "AmbientCapabilities":
"cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw",
"AssertResult": "yes", "AssertTimestamp": "Wed 2019-12-25 10:58:40
EST", "AssertTimestampMonotonic": "515277820645", "Before":
"apt-daily.service shutdown.target
systemd-networkd-wait-online.service network.target multi-user.target
systemd-resolved.service", "BlockIOAccounting": "no", "BlockIOWeight":
"[not set]", "CPUAccounting": "no", "CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]",
"CPUUsageNSec": "[not set]", "CPUWeight": "[not set]",
"CacheDirectoryMode": "0755", "CanIsolate": "no", "CanReload": "no",
"CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet":
"cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw",
"CollectMode": "inactive", "ConditionResult": "yes",
"ConditionTimestamp": "Wed 2019-12-25 10:58:40 EST",
"ConditionTimestampMonotonic": "515277820618",
"ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/systemd-networkd.service",
"ControlPID": "0", "DefaultDependencies": "no", "Delegate": "no",
"Description": "Network Service", "DevicePolicy": "auto",
"Documentation": "man:systemd-networkd.service(8)", "DynamicUser":
"no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "14782", "ExecMainStartTimestamp": "Wed 2019-12-25
10:58:40 EST", "ExecMainStartTimestampMonotonic": "515277821135",
"ExecMainStatus": "0", "ExecStart": "{
path=/lib/systemd/systemd-networkd ;
argv[]=/lib/systemd/systemd-networkd ; ignore_errors=no ;
start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0
}", "FailureAction": "none", "FileDescriptorStoreMax": "0",
"FragmentPath": "/lib/systemd/system/systemd-networkd.service", "GID":
"102", "GuessMainPID": "yes", "IOAccounting": "no",
"IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight":
"[not set]", "IPAccounting": "no", "IPEgressBytes":
"18446744073709551615", "IPEgressPackets": "18446744073709551615",
"IPIngressBytes": "18446744073709551615", "IPIngressPackets":
"18446744073709551615", "Id": "systemd-networkd.service",
"IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes",
"InactiveEnterTimestamp": "Wed 2019-12-25 10:58:40 EST",
"InactiveEnterTimestampMonotonic": "515277820251",
"InactiveExitTimestamp": "Wed 2019-12-25 10:58:40 EST",
"InactiveExitTimestampMonotonic": "515277821157", "InvocationID":
"ebf6cb91353946db932a6448fd9c0621", "JobRunningTimeoutUSec":
"infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity",
"KeyringMode": "private", "KillMode": "control-group", "KillSignal":
"15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE":
"infinity", "LimitCORESoft": "0", "LimitCPU": "infinity",
"LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft":
"infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "16777216", "LimitMEMLOCKSoft": "16777216",
"LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE":
"0", "LimitNICESoft": "0", "LimitNOFILE": "4096", "LimitNOFILESoft":
"1024", "LimitNPROC": "79335", "LimitNPROCSoft": "79335", "LimitRSS":
"infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft":
"infinity", "LimitSIGPENDING": "79335", "LimitSIGPENDINGSoft":
"79335", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608",
"LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1",
"LogsDirectoryMode": "0755", "MainPID": "14782", "MemoryAccounting":
"no", "MemoryCurrent": "[not set]", "MemoryDenyWriteExecute": "yes",
"MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0",
"MemoryMax": "infinity", "MemorySwapMax": "infinity", "MountAPIVFS":
"no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0",
"Names": "systemd-networkd.service", "NeedDaemonReload": "no", "Nice":
"0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess":
"main", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace",
"PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices":
"no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers":
"no", "ProtectControlGroups": "yes", "ProtectHome": "yes",
"ProtectKernelModules": "yes", "ProtectKernelTunables": "no",
"ProtectSystem": "strict", "RefuseManualStart": "no",
"RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no",
"RequiredBy": "systemd-networkd-wait-online.service", "Requires":
"-.mount system.slice", "RequiresMountsFor": "/run/systemd/netif",
"Restart": "on-failure", "RestartUSec": "0", "RestrictNamespaces":
"no", "RestrictRealtime": "yes", "Result": "success",
"RootDirectoryStartOnly": "no", "RuntimeDirectory": "systemd/netif",
"RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "yes",
"RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits":
"0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice":
"system.slice", "StandardError": "inherit", "StandardInput": "null",
"StandardInputData": "", "StandardOutput": "journal",
"StartLimitAction": "none", "StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]", "StateChangeTimestamp": "Wed
2019-12-25 10:58:40 EST", "StateChangeTimestampMonotonic":
"515277890008", "StateDirectoryMode": "0755", "StatusErrno": "0",
"StatusText": "Processing requests...", "StopWhenUnneeded": "no",
"SubState": "running", "SuccessAction": "none", "SyslogFacility": "3",
"SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority":
"30", "SystemCallArchitectures": "native", "SystemCallErrorNumber":
"0", "SystemCallFilter": "~_sysctl add_key adjtimex afs_syscall
bdflush break chroot clock_adjtime clock_settime create_module
delete_module finit_module ftime get_kernel_syms getpmsg gtty idle
init_module ioperm iopl kexec_file_load kexec_load keyctl lock
lookup_dcookie modify_ldt mount mpx pciconfig_iobase pciconfig_read
pciconfig_write perf_event_open pivot_root process_vm_readv
process_vm_writev prof profil ptrace putpmsg query_module reboot
request_key rtas s390_pci_mmio_read s390_pci_mmio_write
s390_runtime_instr security settimeofday sgetmask ssetmask stime stty
subpage_prot swapoff swapon switch_endian sysfs tuxcall ulimit umount
umount2 uselib ustat vm86 vm86old vserver", "TTYReset": "no",
"TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting":
"yes", "TasksCurrent": "1", "TasksMax": "4915", "TimeoutStartUSec":
"1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000",
"Transient": "no", "TriggeredBy": "systemd-networkd.socket", "Type":
"notify", "UID": "100", "UMask": "0022", "UnitFilePreset": "enabled",
"UnitFileState": "enabled", "User": "systemd-network", "UtmpMode":
"init", "WantedBy": "multi-user.target", "Wants": "network.target",
"WatchdogTimestamp": "Wed 2019-12-25 11:56:15 EST",
"WatchdogTimestampMonotonic": "518733291554", "WatchdogUSec": "3min"}}
ok: [localhost] => (item=systemd-resolved) => {"ansible_loop_var":
"item", "changed": false, "enabled": true, "item": "systemd-resolved",
"name": "systemd-resolved", "state": "started", "status":
{"ActiveEnterTimestamp": "Thu 2019-12-19 11:50:47 EST",
"ActiveEnterTimestampMonotonic": "5674561",
"ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After":
"system.slice systemd-networkd.service systemd-tmpfiles-setup.service
systemd-journald.socket -.mount systemd-sysusers.service",
"AllowIsolate": "no", "AmbientCapabilities": "cap_setpcap
cap_net_bind_service cap_net_raw", "AssertResult": "yes",
"AssertTimestamp": "Thu 2019-12-19 11:50:47 EST",
"AssertTimestampMonotonic": "5532065", "Before": "shutdown.target
network.target nss-lookup.target", "BlockIOAccounting": "no",
"BlockIOWeight": "[not set]", "CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity", "CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight":
"[not set]", "CacheDirectoryMode": "0755", "CanIsolate": "no",
"CanReload": "no", "CanStart": "yes", "CanStop": "yes",
"CapabilityBoundingSet": "cap_setpcap cap_net_bind_service
cap_net_raw", "CollectMode": "inactive", "ConditionResult": "yes",
"ConditionTimestamp": "Thu 2019-12-19 11:50:47 EST",
"ConditionTimestampMonotonic": "5532064",
"ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/systemd-resolved.service",
"ControlPID": "0", "DefaultDependencies": "no", "Delegate": "no",
"Description": "Network Name Resolution", "DevicePolicy": "closed",
"Documentation": "man:systemd-resolved.service(8)
https://www.freedesktop.org/wiki/Software/systemd/resolved
https://www.freedesktop.org/wiki/Software/systemd/writing-network-configuration-managers
https://www.freedesktop.org/wiki/Software/systemd/writing-resolver-clients",
"DynamicUser": "no", "ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "563",
"ExecMainStartTimestamp": "Thu 2019-12-19 11:50:47 EST",
"ExecMainStartTimestampMonotonic": "5535373", "ExecMainStatus": "0",
"ExecStart": "{ path=/lib/systemd/systemd-resolved ;
argv[]=/lib/systemd/systemd-resolved ; ignore_errors=no ;
start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0
}", "FailureAction": "none", "FileDescriptorStoreMax": "0",
"FragmentPath": "/lib/systemd/system/systemd-resolved.service", "GID":
"103", "GuessMainPID": "yes", "IOAccounting": "no",
"IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight":
"[not set]", "IPAccounting": "no", "IPEgressBytes":
"18446744073709551615", "IPEgressPackets": "18446744073709551615",
"IPIngressBytes": "18446744073709551615", "IPIngressPackets":
"18446744073709551615", "Id": "systemd-resolved.service",
"IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Thu
2019-12-19 11:50:47 EST", "InactiveExitTimestampMonotonic": "5535405",
"InvocationID": "98373ca4d6314e1d908041f0eea6d8e8",
"JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode":
"control-group", "KillSignal": "15", "LimitAS": "infinity",
"LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft":
"0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA":
"infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "16777216",
"LimitMEMLOCKSoft": "16777216", "LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0",
"LimitNOFILE": "4096", "LimitNOFILESoft": "1024", "LimitNPROC":
"79335", "LimitNPROCSoft": "79335", "LimitRSS": "infinity",
"LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft":
"0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "79335", "LimitSIGPENDINGSoft": "79335",
"LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState":
"loaded", "LockPersonality": "yes", "LogLevelMax": "-1",
"LogsDirectoryMode": "0755", "MainPID": "563", "MemoryAccounting":
"no", "MemoryCurrent": "[not set]", "MemoryDenyWriteExecute": "yes",
"MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0",
"MemoryMax": "infinity", "MemorySwapMax": "infinity", "MountAPIVFS":
"no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0",
"Names": "systemd-resolved.service", "NeedDaemonReload": "no", "Nice":
"0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess":
"main", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace",
"PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices":
"yes", "PrivateNetwork": "no", "PrivateTmp": "yes", "PrivateUsers":
"no", "ProtectControlGroups": "yes", "ProtectHome": "yes",
"ProtectKernelModules": "yes", "ProtectKernelTunables": "yes",
"ProtectSystem": "strict", "RefuseManualStart": "no",
"RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no",
"Requires": "system.slice -.mount", "RequiresMountsFor": "/tmp
/var/tmp /run/systemd/resolve", "Restart": "always", "RestartUSec":
"0", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "Result":
"success", "RootDirectoryStartOnly": "no", "RuntimeDirectory":
"systemd/resolve", "RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "yes", "RuntimeMaxUSec": "infinity",
"SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no",
"SendSIGKILL": "yes", "Slice": "system.slice", "StandardError":
"inherit", "StandardInput": "null", "StandardInputData": "",
"StandardOutput": "journal", "StartLimitAction": "none",
"StartLimitBurst": "5", "StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]",
"StateChangeTimestamp": "Thu 2019-12-19 11:50:47 EST",
"StateChangeTimestampMonotonic": "5674561", "StateDirectoryMode":
"0755", "StatusErrno": "0", "StatusText": "Processing requests...",
"StopWhenUnneeded": "no", "SubState": "running", "SuccessAction":
"none", "SyslogFacility": "3", "SyslogLevel": "6",
"SyslogLevelPrefix": "yes", "SyslogPriority": "30",
"SystemCallArchitectures": "native", "SystemCallErrorNumber": "0",
"SystemCallFilter": "~_sysctl add_key adjtimex afs_syscall bdflush
break chroot clock_adjtime clock_settime create_module delete_module
finit_module ftime get_kernel_syms getpmsg gtty idle init_module
ioperm iopl kexec_file_load kexec_load keyctl lock lookup_dcookie
modify_ldt mount mpx pciconfig_iobase pciconfig_read pciconfig_write
perf_event_open pivot_root process_vm_readv process_vm_writev prof
profil ptrace putpmsg query_module reboot request_key rtas
s390_pci_mmio_read s390_pci_mmio_write s390_runtime_instr security
settimeofday sgetmask ssetmask stime stty subpage_prot swapoff swapon
switch_endian sysfs tuxcall ulimit umount umount2 uselib ustat vm86
vm86old vserver", "TTYReset": "no", "TTYVHangup": "no",
"TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent":
"1", "TasksMax": "4915", "TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient":
"no", "Type": "notify", "UID": "101", "UMask": "0022",
"UnitFilePreset": "enabled", "UnitFileState": "enabled", "User":
"systemd-resolve", "UtmpMode": "init", "WantedBy":
"multi-user.target", "Wants": "nss-lookup.target",
"WatchdogTimestamp": "Wed 2019-12-25 11:55:05 EST",
"WatchdogTimestampMonotonic": "518663291692", "WatchdogUSec": "3min"}}
META: ran handlers

TASK [common : Check apparmor support]
****************************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:67
ok: [localhost] => {"changed": false, "cmd": ["apparmor_status"],
"delta": "0:00:00.058453", "end": "2019-12-25 11:56:31.506982", "rc":
0, "start": "2019-12-25 11:56:31.448529", "stderr": "",
"stderr_lines": [], "stdout": "apparmor module is loaded.\n21 profiles
are loaded.\n19 profiles are in enforce mode.\n   /sbin/dhclient\n
/usr/bin/man\n   /usr/lib/NetworkManager/nm-dhcp-client.action\n
/usr/lib/NetworkManager/nm-dhcp-helper\n
/usr/lib/connman/scripts/dhclient-script\n
/usr/lib/cups/backend/cups-pdf\n
/usr/lib/lightdm/lightdm-guest-session\n
/usr/lib/lightdm/lightdm-guest-session//chromium\n
/usr/sbin/cups-browsed\n   /usr/sbin/cupsd\n
/usr/sbin/cupsd//third_party\n   /usr/sbin/ippusbxd\n
/usr/sbin/ntpd\n   /usr/sbin/tcpdump\n   libreoffice-senddoc\n
libreoffice-soffice//gpg\n   libreoffice-xpdfimport\n   man_filter\n
man_groff\n2 profiles are in complain mode.\n   libreoffice-oopslash\n
libreoffice-soffice\n4 processes have profiles defined.\n4 processes
are in enforce mode.\n   /sbin/dhclient (1013) \n
/usr/sbin/cups-browsed (11680) \n   /usr/sbin/cupsd (11679) \n
/usr/sbin/ntpd (1206) \n0 processes are in complain mode.\n0 processes
are unconfined but have a profile defined.", "stdout_lines":
["apparmor module is loaded.", "21 profiles are loaded.", "19 profiles
are in enforce mode.", "   /sbin/dhclient", "   /usr/bin/man", "
/usr/lib/NetworkManager/nm-dhcp-client.action", "
/usr/lib/NetworkManager/nm-dhcp-helper", "
/usr/lib/connman/scripts/dhclient-script", "
/usr/lib/cups/backend/cups-pdf", "
/usr/lib/lightdm/lightdm-guest-session", "
/usr/lib/lightdm/lightdm-guest-session//chromium", "
/usr/sbin/cups-browsed", "   /usr/sbin/cupsd", "
/usr/sbin/cupsd//third_party", "   /usr/sbin/ippusbxd", "
/usr/sbin/ntpd", "   /usr/sbin/tcpdump", "   libreoffice-senddoc", "
libreoffice-soffice//gpg", "   libreoffice-xpdfimport", "
man_filter", "   man_groff", "2 profiles are in complain mode.", "
libreoffice-oopslash", "   libreoffice-soffice", "4 processes have
profiles defined.", "4 processes are in enforce mode.", "
/sbin/dhclient (1013) ", "   /usr/sbin/cups-browsed (11680) ", "
/usr/sbin/cupsd (11679) ", "   /usr/sbin/ntpd (1206) ", "0 processes
are in complain mode.", "0 processes are unconfined but have a profile
defined."]}

TASK [common : Set fact if apparmor enabled]
**********************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:73
ok: [localhost] => {"ansible_facts": {"apparmor_enabled": true},
"changed": false}

TASK [common : Define facts]
**************************************************************************
task path: /root/algo-master/roles/common/tasks/facts.yml:2
ok: [localhost] => {"ansible_facts": {"p12_export_password":
"B53OnBw05"}, "changed": false}

TASK [common : Set facts]
*****************************************************************************
task path: /root/algo-master/roles/common/tasks/facts.yml:7
ok: [localhost] => {"ansible_facts": {"CA_password":
"0FaAT3Yn365ht6aD", "IP_subject_alt_name": "XXX.XXX.XXX.XXX"},
"changed": false}

TASK [common : Set IPv6 support as a fact]
************************************************************
task path: /root/algo-master/roles/common/tasks/facts.yml:12
ok: [localhost] => {"ansible_facts": {"ipv6_support": false},
"changed": false}

TASK [common : Check size of MTU]
*********************************************************************
task path: /root/algo-master/roles/common/tasks/facts.yml:17
ok: [localhost] => {"ansible_facts": {"reduce_mtu": "0"}, "changed":
false}

TASK [common : Set OS specific facts]
*****************************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:81
ok: [localhost] => {"ansible_facts": {"sysctl": [{"item":
"net.ipv4.ip_forward", "value": 1}, {"item":
"net.ipv4.conf.all.forwarding", "value": 1}, {"item": "", "value":
1}], "tools": ["git", "screen", "apparmor-utils", "uuid-runtime",
"coreutils", "iptables-persistent", "cgroup-tools", "openssl",
"gnupg2"]}, "changed": false}

TASK [common : Install tools]
*************************************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:101
ok: [localhost] => {"cache_update_time": 1577289523, "cache_updated":
false, "changed": false}

TASK [common : Install headers]
***********************************************************************
task path: /root/algo-master/roles/common/tasks/ubuntu.yml:107
ok: [localhost] => {"cache_update_time": 1577289523, "cache_updated":
false, "changed": false}
included: /root/algo-master/roles/common/tasks/iptables.yml for
localhost

TASK [common : Iptables configured]
*******************************************************************
task path: /root/algo-master/roles/common/tasks/iptables.yml:3
ok: [localhost] => (item={'src': 'rules.v4.j2', 'dest':
'/etc/iptables/rules.v4'}) => {"ansible_loop_var": "item", "changed":
false, "checksum": "c34ea03b2a45427291d2262d17942f99ecd85364", "dest":
"/etc/iptables/rules.v4", "gid": 0, "group": "root", "item": {"dest":
"/etc/iptables/rules.v4", "src": "rules.v4.j2"}, "mode": "0640",
"owner": "root", "path": "/etc/iptables/rules.v4", "size": 3210,
"state": "file", "uid": 0}

TASK [common : Sysctl tuning]
*************************************************************************
task path: /root/algo-master/roles/common/tasks/main.yml:19
ok: [localhost] => (item={'item': 'net.ipv4.ip_forward', 'value': 1})
=> {"ansible_loop_var": "item", "changed": false, "item": {"item":
"net.ipv4.ip_forward", "value": 1}}
ok: [localhost] => (item={'item': 'net.ipv4.conf.all.forwarding',
'value': 1}) => {"ansible_loop_var": "item", "changed": false, "item":
{"item": "net.ipv4.conf.all.forwarding", "value": 1}}
META: ran handlers

TASK [dns : dnscrypt-proxy ip-blacklist configured]
***************************************************
task path: /root/algo-master/roles/dns/tasks/main.yml:10
ok: [localhost] => {"changed": false, "checksum":
"f9e1e90a62a59006ee6fa326cea98aab81bc5e44", "dest":
"/etc/dnscrypt-proxy/ip-blacklist.txt", "gid": 0, "group": "root",
"mode": "0644", "owner": "root", "path":
"/etc/dnscrypt-proxy/ip-blacklist.txt", "size": 529, "state": "file",
"uid": 0}

TASK [dns : dnscrypt-proxy configured]
****************************************************************
task path: /root/algo-master/roles/dns/tasks/main.yml:17
ok: [localhost] => {"changed": false, "checksum":
"c5ad02416e53f4d4c8fed5da6c40ff5d57167391", "dest":
"/etc/dnscrypt-proxy/dnscrypt-proxy.toml", "gid": 0, "group": "root",
"mode": "0644", "owner": "root", "path":
"/etc/dnscrypt-proxy/dnscrypt-proxy.toml", "size": 15762, "state":
"file", "uid": 0}
 [WARNING]: flush_handlers task does not support when conditional

 META: ran handlers

 TASK [dns : dnscrypt-proxy enabled and started]
*******************************************************
task path: /root/algo-master/roles/dns/tasks/main.yml:30
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Could not
find the requested service dnscrypt-proxy: host"}
included: /root/algo-master/playbooks/rescue.yml for localhost

TASK [debug]
******************************************************************************************
task path: /root/algo-master/playbooks/rescue.yml:2
ok: [localhost] => {
    "fail_hint": [
            "Sorry, but something went wrong!",
                "Please check the troubleshooting guide.",
                    "https://trailofbits.github.io/algo/troubleshooting.html"
                    ]
                }

                TASK [Fail the installation]
**************************************************************************
task path: /root/algo-master/playbooks/rescue.yml:5
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failed as
requested from task"}

PLAY RECAP
********************************************************************************************
localhost                  : ok=52   changed=3    unreachable=0
failed=1    skipped=25   rescued=1    ignored=0   
davidemyers commented 4 years ago

The instructions for doing a local install say:

Install to existing Ubuntu 18.04, 19.04, or 19.10 server (Advanced)

Make sure your target server is running an unmodified copy of the operating system version specified.

So you're on your own with Mint.

laram1989 commented 4 years ago

For others trying to install and run algo locally on a Linux Mint 19 machine, here is how I got it working. Running as root:

I am sure there is a more straightforward way to do this (eg, by adding Linux Mint as an accepted ansible_distribution value throughout the algo playbooks), but at least on my system it failed when trying to install wireguard and dnscrypt-proxy from the two PPAs listed above. (If I got that correctly, the issue seems to be that the Linux Mint version names don't match the version names on the PPAs.) So the approach that worked for me was to add the PPAs manually, install both packages from them and then run the algo install script mindful that any errors are basically due to tasks listed in the ubuntu.yml files not getting executed. To get around the latter, either tweak the test in the main.yml files so that they also accept "Linux Mint" as the ansible_distribution or manually copy the required tasks into the main.yml file at the same point where the ubuntu.yml file is getting included.

jackivanov commented 4 years ago

We don't support Linux Mint, sorry.