Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-7672

puppet_agent: rhel6 with fips sets up repo for redhatfips-6-x86_64

    Details

    • Type: Bug
    • Status: Accepted
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: puppet_agent
    • Labels:
    • Environment:

      PE 2018.1.0

    • Template:
      MODULES Bug Template
    • Team:
      Platform OS
    • Method Found:
      Needs Assessment
    • QA Risk Assessment:
      Needs Assessment

      Description

      Basic Info
      Module Version: 1.6.2
      Puppet Version: 5.5.1
      OS Name/Version: RedHat 6

      On a RHEL6 system with FIPS enabled, the puppet_agent module sets up /etc/yum.repos.d/pc_repo.repo with a baseurl of:

          baseurl=https://bfdctlvpcm201.test.fdc.ibm:8140/packages/2018.1.0/redhatfips-6-x86_64

      but on my MoM and compile masters I do not have the redhatfips-6-x86_64 pe_repo class or directory as such a thing doesn't appear to exist.

      Also, the package trying to be upgraded to by the puppet_agent module is the puppet-agent-5.5.1-1.redhatfips7 package (which may or may not be expected.

      Desired Behavior: Install the OS/arch appropriate package from a correctly configured repo.

      Actual Behavior: The configured repo points to an invalid baseurl and tries to install a package for RHEL7 instead of RHEL6.

      Sample agent run output using the repo with the above baseurl setting:

       

      [root@bfdctlvpup203 ~]# puppet agent -t --environment puppet_agent
      Info: Using configured environment 'puppet_agent'
      Info: Retrieving pluginfacts
      Info: Retrieving plugin
      Info: Retrieving locales
      Info: Loading facts
      Info: Caching catalog for bfdctlvpup203.test.fdc.ibm
      Info: Applying configuration version 'bfdctlvpcm201-puppet_agent-8d7f706a5a0'
      Notice: /Stage[main]/Puppet_agent::Osfamily::Redhat/Yumrepo[pc_repo]/ensure: created
      Info: Yumrepo[pc_repo](provider=inifile): changing mode of /etc/yum.repos.d/pc_repo.repo from 600 to 644
      Error: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y update puppet-agent-5.5.1-1.redhatfips7' returned 1: Error: Cannot retrieve repository metadata (repomd.xml) for repository: pc_repo. Please verify its path and try again
      Error: /Stage[main]/Puppet_agent::Install/Package[puppet-agent]/ensure: change from '5.5.1-1.el6' to '5.5.1-1.redhatfips7' failed: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y update puppet-agent-5.5.1-1.redhatfips7' returned 1: Error: Cannot retrieve repository metadata (repomd.xml) for repository: pc_repo. Please verify its path and try again
      Info: Class[Puppet_agent]: Unscheduling all events on Class[Puppet_agent]
      Warning: Puppet::Type::Package::ProviderYum: Could not check for updates, '/usr/bin/yum check-update' exited with 1
      Info: Stage[main]: Unscheduling all events on Stage[main]
      Notice: Applied catalog in 7.44 seconds

       

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              mloseke Mike Loseke
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:

                Zendesk Support