brucellino / ansible-role-umd Goto Github PK

View Code? Open in Web Editor NEW

This project forked from egi-qc/ansible-umd

0.0 0.0 1.0 98 KB

Ansible role to deliver UMD configurations

Home Page: http://repository.egi.eu

License: Other

Python 100.00%

ansible ansible-role cloud-computing egi grid-computing middleware molecule testinfra

ansible-role-umd's Introduction

Bruce Becker, Ph.D.

Ten years of study into the nature of the universe, 10 years of public service in South Africa, from the South to the South, island-style. I've built some things, but like Swamp Castle a lot of them fell down.

I am:

👨‍🔬 ⚗ Scientist orcid.org/0000-0002-6607-7145
🏐 ⚛️ ex volleyball freak and physicist
🏗️ 🌉 infrastructure guy
🌋 🏝 islander
🇿🇦 🇮🇹 Southerner

My jam is 🤩: building platforms to deliver value from developers to users.

I care about 😍: Quality. Empathy at work. The big picture.

My toolkit 🧰:

Hashicorp (Terraform, Packer, Vault, Consul, Nomad), Rundeck
Jenkins, Gitlab, GitHub, Spinnaker
AWS, VMware
Python, Go, Ruby

ansible-role-umd's People

Contributors

Watchers

Forkers

egi-federation

ansible-role-umd's Issues

Ensure that repo info and signing keys are distributed securely

In the yum output (after installing the UMD-4 repo RPM) I see:

Retrieving key from http://repository.egi.eu/sw/production/cas/1/GPG-KEY-EUGridPMA-RPM-3
Importing GPG key 0x3CDBBC71:
 Userid     : "EUGridPMA Distribution Signing Key 3 <[email protected]>"
 Fingerprint: d12e 9228 22be 64d5 0146 188b c32d 99c8 3cdb bc71
 From       : http://repository.egi.eu/sw/production/cas/1/GPG-KEY-EUGridPMA-RPM-3

and

Retrieving key from http://repository.egi.eu/sw/production/umd/UMD-RPM-PGP-KEY
Importing GPG key 0x96B71B07:
 Userid     : "Kostas Koumantaros (UMD Release Manager) <[email protected]>"
 Fingerprint: 32ad 8d80 fa5a 89b5 3dc5 de93 6799 de16 96b7 1b07
 From       : http://repository.egi.eu/sw/production/umd/UMD-RPM-PGP-KEY

i.e. both of these are unencrypted channels which limits the ability of keys housed there to verify the integrity of packages signed by them.

Also, on both an Ubuntu 18.04 install with latest updates and a CentOS 7 install with latest updates, the key for repository.egi.eu appears untrusted by the default trust bundle (although it is trusted by my Chrome install on the Ubuntu 18 desktop I tested from).

--2018-06-25 11:23:04--  https://repository.egi.eu/sw/production/umd/4/centos7/x86_64/updates/umd-release-4.1.3-1.el7.centos.noarch.rpm
Resolving repository.egi.eu (repository.egi.eu)... 195.251.53.182, 2001:648:2030:6000::182:182
Connecting to repository.egi.eu (repository.egi.eu)|195.251.53.182|:443... connected.
ERROR: cannot verify repository.egi.eu's certificate, issued by 'CN=TERENA SSL CA 3,O=TERENA,L=Amsterdam,ST=Noord-Holland,C=NL':
  Unable to locally verify the issuer's authority.
To connect to repository.egi.eu insecurely, use `--no-check-certificate'.```

Missing dependencies for fts-rest-cli

When attempting to install the UMD-packaged version of fts-rest-cli into singularity container (found in this repo I hit upon some missing dependencies when attempting to run the client.

fts-rest-transfer-submit --help
Traceback (most recent call last):
  File "/bin/fts-rest-transfer-submit", line 2, in <module>
    from fts3.cli import JobSubmitter
  File "/usr/lib/python2.7/site-packages/fts3/__init__.py", line 1, in <module>
    import pkg_resources
ImportError: No module named pkg_resources

This first error was resolved by adding the python-setuptools package to the container build def.
Following that a second error was also encountered:

fts-rest-transfer-submit --help
Traceback (most recent call last):
  File "/bin/fts-rest-transfer-submit", line 2, in <module>
    from fts3.cli import JobSubmitter
  File "/usr/lib/python2.7/site-packages/fts3/cli/__init__.py", line
18, in <module>
    from banning import Banning
  File "/usr/lib/python2.7/site-packages/fts3/cli/banning.py", line
18, in <module>
    from base import Base
  File "/usr/lib/python2.7/site-packages/fts3/cli/base.py", line 25, in <module>
    from fts3.rest.client import Context
  File "/usr/lib/python2.7/site-packages/fts3/rest/client/__init__.py",
line 19, in <module>
    from context import Context
  File "/usr/lib/python2.7/site-packages/fts3/rest/client/context.py",
line 36, in <module>
    from request import Request
  File "/usr/lib/python2.7/site-packages/fts3/rest/client/request.py",
line 20, in <module>
    import requests
  File "/users/aikema/.local/lib/python2.7/site-packages/requests/__init__.py",
line 97, in <module>
    from . import utils
  File "/users/aikema/.local/lib/python2.7/site-packages/requests/utils.py",
line 24, in <module>
    from . import certs
  File "/users/aikema/.local/lib/python2.7/site-packages/requests/certs.py",
line 15, in <module>
    from certifi import where
ImportError: No module named certifi

I didn't notice any package available via yum which would resolve this missing dependency issue so for the moment I'm installing this via pip in the container def file.

brucellino / ansible-role-umd Goto Github PK

ansible-role-umd's Introduction

Bruce Becker, Ph.D.

ansible-role-umd's People

Contributors

Watchers

Forkers

ansible-role-umd's Issues

Ensure that repo info and signing keys are distributed securely

Missing dependencies for fts-rest-cli

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent