Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hardcoded key fingerprints break automatic key-rollout on debian/ubuntu #59

Open
nafetsreuab opened this issue Jul 13, 2020 · 0 comments

Comments

@nafetsreuab
Copy link

Hi,

https://github.com/voxpupuli/puppet-bareos/blob/master/manifests/repository.pp#L28

hardcodes pubkeys for bareos-repositories. This leads to:

Error: Could not set 'present' on ensure: The id in your manifest A0CFE15F71F798574AB363DD118283D9A7862CEE and the fingerprint from content/source don't match. Check for an error in the id and content/source is legitimate. (file: /etc/puppetlabs/code/environments/bareos/modules/apt/manifests/key.pp, line: 55)

Notice: /Stage[main]/Bareos::Repository/Apt::Source[bareos]/Apt::Key[Add key: A0CFE15F71F798574AB363DD118283D9A7862CEE from Apt::Source bareos]/Anchor[apt_key A0CFE15F71F798574AB363DD118283D9A7862CEE present]: Dependency Apt_key[Add key: A0CFE15F71F798574AB363DD118283D9A7862CEE from Apt::Source bareos] has failures: true
Warning: /Stage[main]/Bareos::Repository/Apt::Source[bareos]/Apt::Key[Add key: A0CFE15F71F798574AB363DD118283D9A7862CEE from Apt::Source bareos]/Anchor[apt_key A0CFE15F71F798574AB363DD118283D9A7862CEE present]: Skipping because of failed dependencies
Warning: /Stage[main]/Bareos::Repository/Apt::Source[bareos]/Apt::Setting[list-bareos]/File[/etc/apt/sources.list.d/bareos.list]: Skipping because of failed dependencies

That is because bareos signs each repo with it's own individual keys.

this is from ubuntu 18 with bareos latest (default).

pub rsa4096 2019-12-11 [SC]
641A 1497 F1B1 1BEA 945F 840F E5D8 82B2 8657 AE28
uid [ unbekannt] Bareos 19.2 Signing Key signing@bareos.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant