Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-5145

puppet_agent: rhel6 with fips sets up repo for redhatfips-6-x86_64

    XMLWordPrintable

Details

    • Bug
    • Status: Accepted
    • Normal
    • Resolution: Unresolved
    • None
    • None
    • puppet_agent
    • PE 2018.1.0

    • Platform OS
    • Needs Assessment
    • Needs Assessment

    Description

      Basic Info
      Module Version: 1.6.2
      Puppet Version: 5.5.1
      OS Name/Version: RedHat 6

      On a RHEL6 system with FIPS enabled, the puppet_agent module sets up /etc/yum.repos.d/pc_repo.repo with a baseurl of:

          baseurl=https://bfdctlvpcm201.test.fdc.ibm:8140/packages/2018.1.0/redhatfips-6-x86_64

      but on my MoM and compile masters I do not have the redhatfips-6-x86_64 pe_repo class or directory as such a thing doesn't appear to exist.

      Also, the package trying to be upgraded to by the puppet_agent module is the puppet-agent-5.5.1-1.redhatfips7 package (which may or may not be expected.

      Desired Behavior: Install the OS/arch appropriate package from a correctly configured repo.

      Actual Behavior: The configured repo points to an invalid baseurl and tries to install a package for RHEL7 instead of RHEL6.

      Sample agent run output using the repo with the above baseurl setting:

       

      [root@bfdctlvpup203 ~]# puppet agent -t --environment puppet_agent
      Info: Using configured environment 'puppet_agent'
      Info: Retrieving pluginfacts
      Info: Retrieving plugin
      Info: Retrieving locales
      Info: Loading facts
      Info: Caching catalog for bfdctlvpup203.test.fdc.ibm
      Info: Applying configuration version 'bfdctlvpcm201-puppet_agent-8d7f706a5a0'
      Notice: /Stage[main]/Puppet_agent::Osfamily::Redhat/Yumrepo[pc_repo]/ensure: created
      Info: Yumrepo[pc_repo](provider=inifile): changing mode of /etc/yum.repos.d/pc_repo.repo from 600 to 644
      Error: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y update puppet-agent-5.5.1-1.redhatfips7' returned 1: Error: Cannot retrieve repository metadata (repomd.xml) for repository: pc_repo. Please verify its path and try again
      Error: /Stage[main]/Puppet_agent::Install/Package[puppet-agent]/ensure: change from '5.5.1-1.el6' to '5.5.1-1.redhatfips7' failed: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y update puppet-agent-5.5.1-1.redhatfips7' returned 1: Error: Cannot retrieve repository metadata (repomd.xml) for repository: pc_repo. Please verify its path and try again
      Info: Class[Puppet_agent]: Unscheduling all events on Class[Puppet_agent]
      Warning: Puppet::Type::Package::ProviderYum: Could not check for updates, '/usr/bin/yum check-update' exited with 1
      Info: Stage[main]: Unscheduling all events on Stage[main]
      Notice: Applied catalog in 7.44 seconds

       

      Attachments

        Activity

          People

            Unassigned Unassigned
            mloseke Mike Loseke
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:

              Zendesk Support