New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The apt_key module did not properly handle GnuPG errors for certain actions #74478
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ansibot
added
affects_2.12
module
This issue/PR relates to a module.
needs_ci
This PR requires CI testing to be performed. Please close and re-open this PR to trigger CI.
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
needs_triage
Needs a first human triage before being processed.
new_contributor
This PR is the first contribution by a new community member.
support:core
This issue/PR relates to code supported by the Ansible Engineering Team.
labels
Apr 28, 2021
maximmasiutin
force-pushed
the
gpg-error-check
branch
from
April 28, 2021 08:50
281539e
to
a08c70d
Compare
1 task
ready_for_review |
ansibot
added
has_issue
core_review
In order to be merged, this PR must follow the core review workflow.
and removed
needs_ci
This PR requires CI testing to be performed. Please close and re-open this PR to trigger CI.
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
labels
Apr 28, 2021
samdoran
removed
the
needs_triage
Needs a first human triage before being processed.
label
Apr 29, 2021
ansibot
removed
the
new_contributor
This PR is the first contribution by a new community member.
label
Apr 29, 2021
samdoran
suggested changes
Apr 29, 2021
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please add integration tests for this change.
ansibot
added
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
and removed
core_review
In order to be merged, this PR must follow the core review workflow.
labels
Apr 29, 2021
maximmasiutin
force-pushed
the
gpg-error-check
branch
from
April 30, 2021 08:29
0d03072
to
b6dca88
Compare
ansibot
added
core_review
In order to be merged, this PR must follow the core review workflow.
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
bug
This issue/PR relates to a bug.
and removed
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
core_review
In order to be merged, this PR must follow the core review workflow.
labels
Apr 30, 2021
…nt GnuPG error information was returned by the 'ansible.builtin.apt_key' module (ansible#74477)
maximmasiutin
force-pushed
the
gpg-error-check
branch
from
April 30, 2021 16:17
e980d97
to
695cab6
Compare
ansibot
removed
the
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
label
Apr 30, 2021
ansibot
added
core_review
In order to be merged, this PR must follow the core review workflow.
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
and removed
core_review
In order to be merged, this PR must follow the core review workflow.
labels
Apr 30, 2021
samdoran
reviewed
Apr 30, 2021
Co-authored-by: Sam Doran <sdoran@redhat.com>
ansibot
added
the
needs_ci
This PR requires CI testing to be performed. Please close and re-open this PR to trigger CI.
label
Apr 30, 2021
samdoran
approved these changes
Apr 30, 2021
samdoran
changed the title
The 'ansible.builtin.apt_key' module did not properly handle GnuPG errors for certain actions
The apt_key module did not properly handle GnuPG errors for certain actions
Apr 30, 2021
ansibot
added
core_review
In order to be merged, this PR must follow the core review workflow.
and removed
needs_ci
This PR requires CI testing to be performed. Please close and re-open this PR to trigger CI.
needs_revision
This PR fails CI tests or a maintainer has requested a review/revision of the PR.
labels
Apr 30, 2021
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Labels
affects_2.12
bug
This issue/PR relates to a bug.
core_review
In order to be merged, this PR must follow the core review workflow.
has_issue
module
This issue/PR relates to a module.
support:core
This issue/PR relates to code supported by the Ansible Engineering Team.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
SUMMARY
Not all GnuPG return codes are analyzed (rc != 0) by the 'ansible.builtin.apt_key' module.
ISSUE TYPE
COMPONENT NAME
ansible.builtin.apt_key
ADDITIONAL INFORMATION
Fixes: #74477
@Akasurde - please review
I expected all calls of the 'gpg' binary have accompanying checks of the rc code. And if (rc != 0), then all relevant results are returned, including stdout and stderr, and also the command line with which the 'gpg' was called.
The command line with which 'gpg' was called is not always returned as information, and the return code of 'gpg' is not always checked, and the stdout/stderr is not always returned as information.