Re: Trouble with ansible and apt. Is this a known problem?

[Darac Marjal]

On 21/11/2022 08:59, Nathanael Schweers wrote:

Hello people,





fatal: [schweers-pc]: FAILED! => changed=false
 module_stderr: |-
   Shared connection to schweers-pc closed.
 module_stdout: |2-

   Traceback (most recent call last):

       _ansiballz_main()

       invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)

     File "/usr/lib/python3.9/runpy.py", line 210, in run_module

     File "/usr/lib/python3.9/runpy.py", line 97, in _run_module_code
       _run_code(code, mod_globals, init_globals,
     File "/usr/lib/python3.9/runpy.py", line 87, in _run_code
       exec(code, run_globals)

     File "<frozen importlib._bootstrap>", line 664, in _load_unlocked

     File "<frozen zipimport>", line 259, in load_module

       import OpenSSL.SSL

       from OpenSSL import crypto, SSL

       class X509StoreFlags(object):

       CB_ISSUER_CHECK = _lib.X509_V_FLAG_CB_ISSUER_CHECK

 msg: |-
   MODULE FAILURE
   See stdout/stderr for the exact error
 rc: 1






Is this a known problem?

I recently installed Debian Bullseye on my desktop machine, having previously used Debian sid. So far it all went well.  Yet two days ago, ansible suddenly reported the following message when attempting to use either the `apt` or `package` builtin.      File "/home/schweers/.ansible/tmp/ansible-tmp-1669020286.4378655-35342-213285731346074/AnsiballZ_apt.py",      line 102, in <module>      File "/home/schweers/.ansible/tmp/ansible-tmp-1669020286.4378655-35342-213285731346074/AnsiballZ_apt.py",      line 94, in _ansiballz_main      File "/home/schweers/.ansible/tmp/ansible-tmp-1669020286.4378655-35342-213285731346074/AnsiballZ_apt.py",      line 40, in invoke_module        runpy.run_module(mod_name='ansible.modules.apt', init_globals=None, run_name='__main__', alter_sys=True)        return _run_module_code(code, init_globals, run_name,        mod_spec)      File "/tmp/ansible_ansible.legacy.apt_payload_og4qifjt/ansible_ansible.legacy.apt_payload.zip/ansible/modules/apt.py",      line 302, in <module>      File "<frozen importlib._bootstrap>", line 1007, in      _find_and_load      File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked      File "<frozen importlib._bootstrap>", line 627, in _load_backward_compatible      File "/tmp/ansible_ansible.legacy.apt_payload_og4qifjt/ansible_ansible.legacy.apt_payload.zip/ansible/module_utils/urls.py",      line 115, in <module>      File "/usr/lib/python3/dist-packages/urllib3/contrib/pyopenssl.py",      line 50, in <module>      File "/usr/lib/python3/dist-packages/OpenSSL/__init__.py",      line 8, in <module>      File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 1556, in <module>      File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 1577, in X509StoreFlags    AttributeError: module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK' Note that it does not matter that the package in question is already installed. I have tried to reinstall `python3-urllibs`, `python3-apt` and `python3-openssl` yet to no avail.

It doesn't look like this exact problem is known at https://github.com/search?q=org%3Aansible+X509_V_FLAG_CB_ISSUER_CHECK+is%3Aissue&type=issues, but there are a few suggestions among the matching bugs.

One suggestion appears to be that your python module "cryptography" is too new for Ansible. You don't state how you installed Ansible, but you might find installing it into a virtualenv is more reliable.

Kind regards,
Nathanael

OpenPGP_signature
Description: OpenPGP digital signature