root@app01:~# nslookup intro.repositoryhosting.com
Server: 8.8.8.8
Address: 8.8.8.8#53
Non-authoritative answer:
intro.repositoryhosting.com canonical name =
na-va-app-1.repositoryhosting.com.
Name: na-va-app-1.repositoryhosting.com
Address: 174.129.252.219
root@app01:~# host intro.repositoryhosting.com
intro.repositoryhosting.com is an alias for na-va-app-1.repositoryhosting.com.
na-va-app-1.repositoryhosting.com has address 174.129.252.219
root@app01:~# ssh-keyscan intro.repositoryhosting.com
# intro.repositoryhosting.com SSH-2.0-OpenSSH_5.1p1 Debian-5
intro.repositoryhosting.com ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAQEAtC70z+dO6++V+qMRE37WUMiGkuNVPdYG8mB/EsJ010YCbc/VeotkPTqinE+gX1EGvdBmZn3DYSK5Cqt4Mh/waBQHfiCK4Lm8BJyQ6vJQf+l8u1bL59pGuAk6XEpoa9nE1eWpXSr7UpENcV/iDi/8Xc5qYrTJgmlK8z8H0XWigwkIEP2DtgysU2swwsa7rcyNnrNzdKstezf7Gd7qEqb8yKnIirkxcV2Q9Kt2ERvl1h+j0miZlWPPiLSBPJi38VZdWPSp3qOBCqqDy4GuUNahXl7H3IvIa0CV0AFPzcoes+1VHmoZmaC1wzV7jmrxRFS7c80BDbwSQ625v9Wb75IWTQ==
Looks fine. Here's the vvvv if I hop onto the box and clone the repo and accept
the key manually. Then re-run the playbook.
TASK: [webservers | checkout the site] ****************************************
<app01> ESTABLISH CONNECTION FOR USER: root
<app01> REMOTE_MODULE git
repo=ssh:********@intro.repositoryhosting.com/intro/onsite.git
dest=/var/www/onsite accept_hostkey=true
<app01> EXEC ['ssh', '-C', '-tt', '-vvv', '-o', 'ControlMaster=auto', '-o',
'ControlPersist=60s', '-o',
'ControlPath=/root/.ansible/cp/ansible-ssh-%h-%p-%r', '-o', 'Port=22', '-o',
'KbdInteractiveAuthentication=no', '-o',
'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey',
'-o', 'PasswordAuthentication=no', '-o', 'ConnectTimeout=10', 'app01', "/bin/sh
-c 'mkdir -p $HOME/.ansible/tmp/ansible-tmp-1395786695.84-167115969213287 &&
echo $HOME/.ansible/tmp/ansible-tmp-1395786695.84-167115969213287'"]
<app01> PUT /tmp/tmpyHkG3V TO
/root/.ansible/tmp/ansible-tmp-1395786695.84-167115969213287/git
<app01> EXEC ['ssh', '-C', '-tt', '-vvv', '-o', 'ControlMaster=auto', '-o',
'ControlPersist=60s', '-o',
'ControlPath=/root/.ansible/cp/ansible-ssh-%h-%p-%r', '-o', 'Port=22', '-o',
'KbdInteractiveAuthentication=no', '-o',
'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey',
'-o', 'PasswordAuthentication=no', '-o', 'ConnectTimeout=10', 'app01', "/bin/sh
-c '/usr/bin/python
/root/.ansible/tmp/ansible-tmp-1395786695.84-167115969213287/git; rm -rf
/root/.ansible/tmp/ansible-tmp-1395786695.84-167115969213287/ >/dev/null 2>&1'"]
ok: [app01] => {"after": "41ce80a70ab048c46c306bf4a34f66fd61ebb979", "before":
"41ce80a70ab048c46c306bf4a34f66fd61ebb979", "changed": false, "item": ""}
On 25 Mar 2014, at 22:22, James Tanner <[email protected]> wrote:
Can the host resolve the fqdn?
- shell: nslookup intro.repositoryhosting.com
- shell: host intro.repositoryhosting.com
- shell: sshkeyscan intro.repositoryhost.com
On Mar 25, 2014, at 6:14 PM, [email protected] wrote:
> TASK: [webservers | checkout the site]
> ****************************************
> <app01> ESTABLISH CONNECTION FOR USER: root
> <app01> REMOTE_MODULE git
> repo=ssh:********@intro.repositoryhosting.com/intro/onsite.git
> dest=/var/www/onsite accept_hostkey=true
> <app01> EXEC ['ssh', '-C', '-tt', '-vvv', '-o', 'ControlMaster=auto', '-o',
> 'ControlPersist=60s', '-o',
> 'ControlPath=/root/.ansible/cp/ansible-ssh-%h-%p-%r', '-o', 'Port=22', '-o',
> 'KbdInteractiveAuthentication=no', '-o',
> 'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey',
> '-o', 'PasswordAuthentication=no', '-o', 'ConnectTimeout=10', 'app01',
> "/bin/sh -c 'mkdir -p
> $HOME/.ansible/tmp/ansible-tmp-1395785319.12-187266324329683 && echo
> $HOME/.ansible/tmp/ansible-tmp-1395785319.12-187266324329683'"]
> <app01> PUT /tmp/tmptO5e80 TO
> /root/.ansible/tmp/ansible-tmp-1395785319.12-187266324329683/git
> <app01> EXEC ['ssh', '-C', '-tt', '-vvv', '-o', 'ControlMaster=auto', '-o',
> 'ControlPersist=60s', '-o',
> 'ControlPath=/root/.ansible/cp/ansible-ssh-%h-%p-%r', '-o', 'Port=22', '-o',
> 'KbdInteractiveAuthentication=no', '-o',
> 'PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey',
> '-o', 'PasswordAuthentication=no', '-o', 'ConnectTimeout=10', 'app01',
> "/bin/sh -c '/usr/bin/python
> /root/.ansible/tmp/ansible-tmp-1395785319.12-187266324329683/git; rm -rf
> /root/.ansible/tmp/ansible-tmp-1395785319.12-187266324329683/ >/dev/null
> 2>&1'"]
> failed: [app01] => {"failed": true, "item": ""}
> msg: failed to add intro.repositoryhosting.com hostkey: getaddrinfo >>: Name
> or service not known
>
>
> FATAL: all hosts have already failed -- aborting
>
> PLAY RECAP
> ********************************************************************
> to retry, use: --limit @/root/webservers.retry
>
> app01 : ok=7 changed=0 unreachable=0 failed=1
>
> yaml code is:
>
> - name: checkout the site
> git: repo=ssh://[email protected]/intro/onsite.git dest={{
> nginx_webroot }}/{{ app_name }} accept_hostkey=true
>
> Just checked again... if I clone this repo on the host and accept the key
> then run the playbook it's fine. remove the known_hosts and it bails out.
>
> In the ansible.cfg the HostKeyChecking=False is commented out which I assume
> means it's on and the git accept_hostkey setting will be parsed.
>
> On Tuesday, March 25, 2014 9:17:37 PM UTC, James Tanner wrote:
> Can we see the yaml syntax and the -vvvv output for the failed task?
>
> On Mar 25, 2014, at 1:44 PM, [email protected] wrote:
>
>> Is anyone else having issues with this feature. If the host key is on the
>> machine my Ansible git checkout works perfectly.
>>
>> If the host key isn't on the box and even with accept_hostkey=yes the
>> checkout fails. I'm on Ansible 1.5.2
>>
>> Error is also ambiguous as it says set accept_hostkey to True!!
>>
>> TASK: [webservers | checkout the site]
>> ****************************************
>> failed: [app01] => {"failed": true, "item": ""}
>> msg: intro.repositoryhosting.com has an unknown hostkey. Set accept_hostkey
>> to True or manually add the hostkey prior to running the git module
>>
>> FATAL: all hosts have already failed -- aborting
>>
>>
>>
>> On Saturday, January 11, 2014 4:34:12 PM UTC, James Tanner wrote:
>> I created a new feature in the git module to help with hostkey
>> management and prevent task hangs with unknown keys:
>>
>> https://github.com/ansible/ansible/commit/8665b0638a1d3a70f985126b0f007a26c81273cb
>>
>> https://github.com/ansible/ansible/commit/eeee1e1c5aa9dd4f84175966e0f9e467fd7fc600
>>
>>
>> The module should fail early on if the hostkey is unknown instead of
>> hanging indefinitely.
>>
>> If the user adds "accept_hostkey=yes" to the git parameters, the key
>> will be automatically
>> added to the known_hosts file.
>>
>> Hopefully this makes the git module easier for our new users.
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Ansible Project" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To post to this group, send email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ansible-project/6bb95a06-bc62-4745-9466-8ea5778698ae%40googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/e48e9e39-579c-425c-b5c4-caad6c365f43%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to a topic in the Google
Groups "Ansible Project" group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/ansible-project/d5OVhIWQ8AI/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
[email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/9AA31C99-8A00-4D5A-AE23-F22FFEF7D26C%40gmail.com.
For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/66C25FF0-E613-4C09-8939-740C2200CFF4%40introlabs.net.
For more options, visit https://groups.google.com/d/optout.
