Even so I explicitly set python3 as default, I still get the same error as
mentioned. This is what I do on my ci-server
- apt-get install python3.7 python3-apt -qy
- update-alternatives --install /usr/bin/python python /usr/bin/python3.7 1
- update-alternatives --set python /usr/bin/python3.7
I can confirm that on my ci-server python 3.7 is installed as default
python --version
Python 3.7.3
On Thursday, August 13, 2020 at 10:13:07 AM UTC+2 Papanito wrote:
> Ok got it, the ci-machine runs on python 2 whereas on my dev-machine I
> have python 3.
>
> On Thursday, August 13, 2020 at 9:35:59 AM UTC+2 Papanito wrote:
>
>> I am using ansible 2.9.11 on my dev machine (arch linux) where I
>> encrypted ./resources/cloudflare/cert.pem. using ansible-vault with a
>> password file. I have commited the file to source control.
>>
>> I can run the playbook without issues on my dev-machine i.e. decryption
>> works
>>
>> Now on my ci machine - which is running ubuntu and ansible 2.7.7 - the
>> run of the playbook fails with
>>
>>
>> Tried to use the vault secret (default) to decrypt
>> (/builds/papanito/infrastructure/resources/cloudflare/cert.pem) but it
>> failed. Error: HMAC verification failed: Signature did not match digest.
>> fatal: [node003]: FAILED! => {
>> "msg": "Decryption failed (no vault secrets were found that could
>> decrypt) on /builds/papanito/infrastructure/resources/cloudflare/cert.pem"
>>
>> I can confirm that I have the password-file on the ci-machine and the
>> password in it is correct. So what's going on here? Why decryption does not
>> work?
>>
>
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to ansible-project+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/1f3fc51e-4e93-4b16-9233-099274f6e1c5n%40googlegroups.com.
