OK, spent some time on this and realized it isn’t going to git to get the 
packages, but getting them from local. I recloaned what I had, and added 
pulpcore-selinux.  Now the install fails at selinux.

Here is what I ran
ansible-galaxy collection install pulp.pulp_installer
Process install dependency map
Starting collection install process
Skipping 'pulp.pulp_installer' as it is already installed

Var.yml
pulp_default_admin_password:
#pulp_source_dir: '/var/lib/pulp/devel/pulpcore'
pulp_install_plugins:
  # pulp-ansible:
  #   source_dir: "/home/centos/pulp_ansible/"
  # galaxy-ng:
  #   source_dir: "/var/lib/pulp/devel/galaxy_ng"
  # pulp-certguard:
  #   source_dir: "/var/lib/pulp/devel/pulp-certguard"
  # pulp-cookbook:
  #   source_dir: "/var/lib/pulp/devel/pulp_cookbook"
  # pulp-deb:
  #   source_dir: "/var/lib/pulp/devel/pulp_deb"
  # pulp-container:
  #   source_dir: "/var/lib/pulp/devel/pulp_container"
  # pulp-gem:
  #   source_dir: "/var/lib/pulp/devel/pulp_gem"
  # pulp-maven:
  #   source_dir: "/var/lib/pulp/devel/pulp_maven"
  # pulp-npm:
  #   source_dir: "/var/lib/pulp/devel/pulp_npm"
  # pulp-python:
  #   source_dir: "/var/lib/pulp/devel/pulp_python"
   pulp-rpm:
      version:"3.7.0"
  #   source_dir: "/home/centos/pulp_rpm_prerequisites"
  #   prereq_role: "pulp.pulp_rpm_prerequisites" # RPM needs a prereq_role: 
https://github.com/pulp/pulp_rpm_prerequisites
  # pulp-file:
  #   source_dir: "pulp_file"
  #   version: "0.3.0"
developer_user_home: /var/lib/pulp
developer_user: pulp
pulp_settings:
  secret_key:
  content_origin: "http:// pulp3test"

ansible-playbook playbooks/example-use/playbook.yml -u root --ask-become-pass 
-e @vars.yml
BECOME password:

TASK [pulp_common : Check if SELinux is enabled] 
********************************************************************
ok: [pulp3test]

TASK [pulp_common : Install SELinux policy build dependencies] 
******************************************************
ok: [pulp3test]

TASK [pulp_common : Ensure that /usr/local/share/selinux/targeted exists] 
*******************************************
changed: [pulp3test]

TASK [pulp_common : Clone SELinux policy from Git] 
******************************************************************
ok: [pulp3test]

TASK [pulp_common : Compile the SELinux policies] 
*******************************************************************
ok: [pulp3test] => (item=pulpcore_port)
ok: [pulp3test] => (item=pulpcore)
ok: [pulp3test] => (item=pulpcore_rhsmcertd)

TASK [pulp_common : Install the SELinux policy packages on disk] 
****************************************************
changed: [pulp3test] => (item=pulpcore_port)
changed: [pulp3test] => (item=pulpcore)
changed: [pulp3test] => (item=pulpcore_rhsmcertd)

-pulp3test ~]# getenforce
Permissive

cat /etc/selinux/config

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are 
protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

It is running on Centos 7 in AWS
cat /etc/centos-release
CentOS Linux release 7.8.2003 (Core)

Here is where it fails now,

RUNNING HANDLER [pulp_common : Load the SELinux policy packages] 
****************************************************
failed: [pulp3test] (item=pulpcore_port) => {"ansible_loop_var": "item", 
"changed": false, "cmd": "semodule -i 
/usr/local/share/selinux/targeted/pulpcore_port.pp", "item": "pulpcore_port", 
"msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore) => {"ansible_loop_var": "item", "changed": 
false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore.pp", 
"item": "pulpcore", "msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore_rhsmcertd) => {"ansible_loop_var": "item", 
"changed": false, "cmd": "semodule -i 
/usr/local/share/selinux/targeted/pulpcore_rhsmcertd.pp", "item": 
"pulpcore_rhsmcertd", "msg": "[Errno 2] No such file or directory", "rc": 2}


Probably missing something, but can’t figure out what.

Thanks for looking.


From: Mike DePaulo <[email protected]>
Sent: Wednesday, October 7, 2020 3:10 PM
To: Heide, Todd <[email protected]>
Cc: Tatiana Tereshchenko <[email protected]>; pulp-list <[email protected]>
Subject: Re: [Pulp-list] pulp_rpm 3.7.0 is Generally Available

[EXTERNAL] This message originated outside of the organization. Use caution 
when opening files or following links in this email!
Hi Todd,

1. You appear to be running the latest master branch of pulp_installer. You 
should (but are not yet required to) follow our new process to install 
pulp_installer as an ansible galaxy collection. You would get the latest stable 
release 3.7.1, which does not contain that particular failing task.
https://pulp-installer.readthedocs.io/en/latest/quickstart/#installation

2. That particular task should not be failing.
To help us debug this issue on our master branch, can you show the output from 
several tasks?
The 1st task: "Install SELinux policy build dependencies"
The final task: "Install the SELinux policy packages on disk"
Also run these commands for our info:
$ getenforce
$ cat /etc/selinux/config
And what Linux distro & version of it are you running?
And are you running in any sort of container? If so, what is the host like?

Also, FYI: This issue is in pulp_installer itself, not pulp-rpm or its pulp-rpm 
specific codepaths.

-Mike

On Wed, Oct 7, 2020 at 12:59 PM Heide, Todd 
<[email protected]<mailto:[email protected]>> wrote:
OK, I must have done something wrong, not sure what.

RUNNING HANDLER [pulp_common : Load the SELinux policy packages] ***************
failed: [pulp3test] (item=pulpcore_port) => {"ansible_loop_var": "item", 
"changed": false, "cmd": "semodule -i 
usr/local/share/selinux/targeted/pulpcore_port.pp", "item": "pulpcore_port", 
"msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore) => {"ansible_loop_var": "item", "changed": 
false, "cmd": "semodule -i 
/usr/local/share/selinux/targeted/pulpcore.pp","item": "pulpcore", "msg": 
"[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore_rhsmcertd) => {"ansible_loop_var": "item", 
"changed": false, "cmd": "semodule -i 
/usr/local/share/selinux/targeted/pulpcore_rhsmcertd.pp", "item": 
"pulpcore_rhsmcertd", "msg": "[Errno 2] No such file or directory", "rc": 2}

pulp3test           : ok=67   changed=11   unreachable=0    failed=1    s 
kipped=42   rescued=0    ignored=0

-----Original Message-----
From: Mike DePaulo <[email protected]<mailto:[email protected]>>
Sent: Tuesday, October 6, 2020 2:23 PM
To: Heide, Todd <[email protected]<mailto:[email protected]>>
Cc: Tatiana Tereshchenko <[email protected]<mailto:[email protected]>>; 
pulp-list <[email protected]<mailto:[email protected]>>
Subject: Re: [Pulp-list] pulp_rpm 3.7.0 is Generally Available

[EXTERNAL] This message originated outside of the organization. Use caution 
when opening files or following links in this email!

Hi Heide,

The only special upgrade instructions since 3.0 are to not set this variable 
anymore:
pulp_use_system_wide_pkgs

Other than that, run the latest pulp_installer with the same set of variables 
as you originally ran it, but make the variable pulp_install_plugins set as 
follows. (Assuming pulp-rpm is the only plugin you have installed.):

pulp_install_plugins:
  pulp-rpm:
    version: "3.7.0"

-Mike


On Tue, Oct 6, 2020 at 12:25 PM Heide, Todd 
<[email protected]<mailto:[email protected]>> wrote:
>
> Hi all, is there a doc on upgrading a 3.0.2 version to this one with Ansible?
>
>
>
> From: [email protected]<mailto:[email protected]> 
> <[email protected]<mailto:[email protected]>> On
> Behalf Of Tatiana Tereshchenko
> Sent: Thursday, September 24, 2020 12:45 PM
> To: pulp-list <[email protected]<mailto:[email protected]>>
> Subject: [Pulp-list] pulp_rpm 3.7.0 is Generally Available
>
>
>
> [EXTERNAL] This message originated outside of the organization. Use caution 
> when opening files or following links in this email!
>
> pulp_rpm 3.7.0 has been released. It is compatible with pulpcore 3.7 and 
> future pulpcore 3.8.
>
> PyPI: https://pypi.org/project/pulp-rpm/3.7.0/
> Changelog: https://pulp-rpm.readthedocs.io/en/3.7/changes.html#id1
> Docs: https://pulp-rpm.readthedocs.io/ Python bindings:
> https://pypi.org/project/pulp-rpm-client/3.7.0/
> Ruby bindings:
> https://rubygems.org/gems/pulp_rpm_client/versions/3.7.0/
>
> _______________________________________________
> Pulp-list mailing list
> [email protected]<mailto:[email protected]>
> https://www.redhat.com/mailman/listinfo/pulp-list



--

Mike DePaulo

He / Him / His

Service Reliability Engineer, Pulp

Red Hat

IM: mikedep333

GPG: 51745404


--

Mike DePaulo

He / Him / His

Service Reliability Engineer, Pulp

Red Hat<https://www.redhat.com/>

IM: mikedep333

GPG: 51745404
[https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png]<https://www.redhat.com/>

_______________________________________________
Pulp-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pulp-list

Reply via email to