<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> OK, spent some time on this and realized it isn’t going to git to get the packages, but getting them from local. I recloaned what I had, and added pulpcore-selinux. Now the install fails at selinux. <o:p></o:p> <o:p> </o:p> Here is what I ran<o:p></o:p> ansible-galaxy collection install pulp.pulp_installer<o:p></o:p> Process install dependency map<o:p></o:p> Starting collection install process<o:p></o:p> Skipping 'pulp.pulp_installer' as it is already installed<o:p></o:p> <o:p> </o:p> Var.yml<o:p></o:p> pulp_default_admin_password: <o:p></o:p> #pulp_source_dir: '/var/lib/pulp/devel/pulpcore'<o:p></o:p> pulp_install_plugins:<o:p></o:p> # pulp-ansible:<o:p></o:p> # source_dir: "/home/centos/pulp_ansible/"<o:p></o:p> # galaxy-ng:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/galaxy_ng"<o:p></o:p> # pulp-certguard:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp-certguard"<o:p></o:p> # pulp-cookbook:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_cookbook"<o:p></o:p> # pulp-deb:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_deb"<o:p></o:p> # pulp-container:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_container"<o:p></o:p> # pulp-gem:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_gem"<o:p></o:p> # pulp-maven:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_maven"<o:p></o:p> # pulp-npm:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_npm"<o:p></o:p> # pulp-python:<o:p></o:p> # source_dir: "/var/lib/pulp/devel/pulp_python"<o:p></o:p> pulp-rpm:<o:p></o:p> version:"3.7.0"<o:p></o:p> # source_dir: "/home/centos/pulp_rpm_prerequisites"<o:p></o:p> # prereq_role: "pulp.pulp_rpm_prerequisites" # RPM needs a prereq_role: https://github.com/pulp/pulp_rpm_prerequisites<o:p></o:p> # pulp-file:<o:p></o:p> # source_dir: "pulp_file"<o:p></o:p> # version: "0.3.0"<o:p></o:p> developer_user_home: /var/lib/pulp<o:p></o:p> developer_user: pulp<o:p></o:p> pulp_settings:<o:p></o:p> secret_key: <o:p></o:p> content_origin: "http:// pulp3test"<o:p></o:p> <o:p> </o:p> ansible-playbook playbooks/example-use/playbook.yml -u root --ask-become-pass -e @vars.yml<o:p></o:p> BECOME password:<o:p></o:p> <o:p> </o:p> TASK [pulp_common : Check if SELinux is enabled] ********************************************************************<o:p></o:p> ok: [pulp3test]<o:p></o:p> <o:p> </o:p> TASK [pulp_common : Install SELinux policy build dependencies] ******************************************************<o:p></o:p> ok: [pulp3test]<o:p></o:p> <o:p> </o:p> TASK [pulp_common : Ensure that /usr/local/share/selinux/targeted exists] *******************************************<o:p></o:p> changed: [pulp3test]<o:p></o:p> <o:p> </o:p> TASK [pulp_common : Clone SELinux policy from Git] ******************************************************************<o:p></o:p> ok: [pulp3test]<o:p></o:p> <o:p> </o:p> TASK [pulp_common : Compile the SELinux policies] *******************************************************************<o:p></o:p> ok: [pulp3test] => (item=pulpcore_port)<o:p></o:p> ok: [pulp3test] => (item=pulpcore)<o:p></o:p> ok: [pulp3test] => (item=pulpcore_rhsmcertd)<o:p></o:p> <o:p> </o:p> TASK [pulp_common : Install the SELinux policy packages on disk] ****************************************************<o:p></o:p> changed: [pulp3test] => (item=pulpcore_port)<o:p></o:p> changed: [pulp3test] => (item=pulpcore)<o:p></o:p> changed: [pulp3test] => (item=pulpcore_rhsmcertd)<o:p></o:p> <o:p> </o:p> -pulp3test ~]# getenforce<o:p></o:p> Permissive<o:p></o:p> <o:p> </o:p> cat /etc/selinux/config<o:p></o:p> <o:p> </o:p> # This file controls the state of SELinux on the system.<o:p></o:p> # SELINUX= can take one of these three values:<o:p></o:p> # enforcing - SELinux security policy is enforced.<o:p></o:p> # permissive - SELinux prints warnings instead of enforcing.<o:p></o:p> # disabled - No SELinux policy is loaded.<o:p></o:p> SELINUX=permissive<o:p></o:p> # SELINUXTYPE= can take one of three values:<o:p></o:p> # targeted - Targeted processes are protected,<o:p></o:p> # minimum - Modification of targeted policy. Only selected processes are protected.<o:p></o:p> # mls - Multi Level Security protection.<o:p></o:p> SELINUXTYPE=targeted<o:p></o:p> <o:p> </o:p> It is running on Centos 7 in AWS<o:p></o:p> cat /etc/centos-release<o:p></o:p> CentOS Linux release 7.8.2003 (Core)<o:p></o:p> <o:p> </o:p> Here is where it fails now,<o:p></o:p> <o:p> </o:p> RUNNING HANDLER [pulp_common : Load the SELinux policy packages] ****************************************************<o:p></o:p> failed: [pulp3test] (item=pulpcore_port) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore_port.pp", "item": "pulpcore_port", "msg": "[Errno 2] No such file or directory", "rc": 2}<o:p></o:p> failed: [pulp3test] (item=pulpcore) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore.pp", "item": "pulpcore", "msg": "[Errno 2] No such file or directory", "rc": 2}<o:p></o:p> failed: [pulp3test] (item=pulpcore_rhsmcertd) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore_rhsmcertd.pp", "item": "pulpcore_rhsmcertd", "msg": "[Errno 2] No such file or directory", "rc": 2}<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Probably missing something, but can’t figure out what. <o:p> </o:p> <o:p> </o:p> Thanks for looking.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"> From: Mike DePaulo <mikedep333@redhat.com> Sent: Wednesday, October 7, 2020 3:10 PM To: Heide, Todd <Todd.Heide@sccompanies.com> Cc: Tatiana Tereshchenko <ttereshc@redhat.com>; pulp-list <pulp-list@redhat.com> Subject: Re: [Pulp-list] pulp_rpm 3.7.0 is Generally Available<o:p></o:p> </div> </div> <o:p> </o:p> <div style="border:solid black 1.0pt;padding:2.0pt 2.0pt 2.0pt 2.0pt"> [EXTERNAL] This message originated outside of the organization. Use caution when opening files or following links in this email!<o:p></o:p> </div> <div> <div> <div> <div> Hi Todd,<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> 1. You appear to be running the latest master branch of pulp_installer. You should (but are not yet required to) follow our new process to install pulp_installer as an ansible galaxy collection. You would get the latest stable release 3.7.1, which does not contain that particular failing task.<o:p></o:p> </div> <div> <a href="https://pulp-installer.readthedocs.io/en/latest/quickstart/#installation" target="_blank">https://pulp-installer.readthedocs.io/en/latest/quickstart/#installation</a><o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> 2. That particular task should not be failing.<o:p></o:p> </div> <div> To help us debug this issue on our master branch, can you show the output from several tasks?<o:p></o:p> </div> <div> The 1st task: "Install SELinux policy build dependencies"<o:p></o:p> </div> <div> The final task: "Install the SELinux policy packages on disk"<o:p></o:p> </div> <div> Also run these commands for our info:<o:p></o:p> </div> <div> $ getenforce<o:p></o:p> </div> <div> $ cat /etc/selinux/config<o:p></o:p> </div> <div> And what Linux distro & version of it are you running?<o:p></o:p> </div> <div> And are you running in any sort of container? If so, what is the host like?<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> Also, FYI: This issue is in pulp_installer itself, not pulp-rpm or its pulp-rpm specific codepaths.<o:p></o:p> </div> <div> <o:p> </o:p> </div> <div> -Mike<o:p></o:p> </div> </div> <o:p> </o:p> <div> <div> On Wed, Oct 7, 2020 at 12:59 PM Heide, Todd <<a href="mailto:Todd.Heide@sccompanies.com" target="_blank">Todd.Heide@sccompanies.com</a>> wrote:<o:p></o:p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> OK, I must have done something wrong, not sure what. RUNNING HANDLER [pulp_common : Load the SELinux policy packages] *************** failed: [pulp3test] (item=pulpcore_port) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i usr/local/share/selinux/targeted/pulpcore_port.pp", "item": "pulpcore_port", "msg": "[Errno 2] No such file or directory", "rc": 2} failed: [pulp3test] (item=pulpcore) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore.pp","item": "pulpcore", "msg": "[Errno 2] No such file or directory", "rc": 2} failed: [pulp3test] (item=pulpcore_rhsmcertd) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore_rhsmcertd.pp", "item": "pulpcore_rhsmcertd", "msg": "[Errno 2] No such file or directory", "rc": 2} pulp3test : ok=67 changed=11 unreachable=0 failed=1 s kipped=42 rescued=0 ignored=0 -----Original Message----- From: Mike DePaulo <<a href="mailto:mikedep333@redhat.com" target="_blank">mikedep333@redhat.com</a>> Sent: Tuesday, October 6, 2020 2:23 PM To: Heide, Todd <<a href="mailto:Todd.Heide@sccompanies.com" target="_blank">Todd.Heide@sccompanies.com</a>> Cc: Tatiana Tereshchenko <<a href="mailto:ttereshc@redhat.com" target="_blank">ttereshc@redhat.com</a>>; pulp-list <<a href="mailto:pulp-list@redhat.com" target="_blank">pulp-list@redhat.com</a>> Subject: Re: [Pulp-list] pulp_rpm 3.7.0 is Generally Available [EXTERNAL] This message originated outside of the organization. Use caution when opening files or following links in this email! Hi Heide, The only special upgrade instructions since 3.0 are to not set this variable anymore: pulp_use_system_wide_pkgs Other than that, run the latest pulp_installer with the same set of variables as you originally ran it, but make the variable pulp_install_plugins set as follows. (Assuming pulp-rpm is the only plugin you have installed.): pulp_install_plugins: pulp-rpm: version: "3.7.0" -Mike On Tue, Oct 6, 2020 at 12:25 PM Heide, Todd <<a href="mailto:Todd.Heide@sccompanies.com" target="_blank">Todd.Heide@sccompanies.com</a>> wrote: > > Hi all, is there a doc on upgrading a 3.0.2 version to this one with Ansible? > > > > From: <a href="mailto:pulp-list-bounces@redhat.com" target="_blank">pulp-list-bounces@redhat.com</a> <<a href="mailto:pulp-list-bounces@redhat.com" target="_blank">pulp-list-bounces@redhat.com</a>> On > Behalf Of Tatiana Tereshchenko > Sent: Thursday, September 24, 2020 12:45 PM > To: pulp-list <<a href="mailto:pulp-list@redhat.com" target="_blank">pulp-list@redhat.com</a>> > Subject: [Pulp-list] pulp_rpm 3.7.0 is Generally Available > > > > [EXTERNAL] This message originated outside of the organization. Use caution when opening files or following links in this email! > > pulp_rpm 3.7.0 has been released. It is compatible with pulpcore 3.7 and future pulpcore 3.8. > > PyPI: <a href="https://pypi.org/project/pulp-rpm/3.7.0/" target="_blank">https://pypi.org/project/pulp-rpm/3.7.0/</a> > Changelog: <a href="https://pulp-rpm.readthedocs.io/en/3.7/changes.html#id1" target="_blank"> https://pulp-rpm.readthedocs.io/en/3.7/changes.html#id1</a> > Docs: <a href="https://pulp-rpm.readthedocs.io/" target="_blank">https://pulp-rpm.readthedocs.io/</a> Python bindings: > <a href="https://pypi.org/project/pulp-rpm-client/3.7.0/" target="_blank">https://pypi.org/project/pulp-rpm-client/3.7.0/</a> > Ruby bindings: > <a href="https://rubygems.org/gems/pulp_rpm_client/versions/3.7.0/" target="_blank"> https://rubygems.org/gems/pulp_rpm_client/versions/3.7.0/</a> > > _______________________________________________ > Pulp-list mailing list > <a href="mailto:Pulp-list@redhat.com" target="_blank">Pulp-list@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/pulp-list" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-list</a> -- Mike DePaulo He / Him / His Service Reliability Engineer, Pulp Red Hat IM: mikedep333 GPG: 51745404<o:p></o:p> </blockquote> </div> -- <o:p></o:p> <div> <div> Mike DePaulo<o:p></o:p> He / Him / His<o:p></o:p> Service Reliability Engineer, Pulp<o:p></o:p> <a href="https://www.redhat.com/" target="_blank">Red Hat</a><o:p></o:p> IM: mikedep333<o:p></o:p> GPG: 51745404<o:p></o:p> <div style="margin-top:9.0pt"> <table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0"> <tbody> <tr> <td style="padding:.75pt .75pt .75pt .75pt"> <a href="https://www.redhat.com/" target="_blank"><img border="0" width="90" style="width:.9416in" id="_x0000_i1025" src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png"></a><o:p></o:p> </td> </tr> </tbody> </table> <o:p> </o:p> </div> </div> </div> </div> </div> </div> </body> </html>