Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Side-effects on tools that use gpg. #21

Closed
glennpratt opened this issue Feb 6, 2013 · 2 comments · Fixed by #22
Closed

Side-effects on tools that use gpg. #21

glennpratt opened this issue Feb 6, 2013 · 2 comments · Fixed by #22

Comments

@glennpratt
Copy link
Contributor

I have very little knowledge of gpg, so sorry if I'm confused. When running with hiera-gpg enabled, I can't install keys for different apt sources, it seems to have effected the environments gpg settings. I tried changing the permissions on /etc/puppet/gpg, but do to the way it's mounted, it's not owned by root.

debug: Exec[/usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30](provider=posix): Executing check '/usr/bin/apt-key list | /bin/grep 4BD6EC30'
debug: Executing '/usr/bin/apt-key list | /bin/grep 4BD6EC30'
debug: /Stage[main]/Puppet/Apt::Source[puppetlabs]/Exec[/usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30]/unless: gpg: WARNING: unsafe ownership on homedir `/etc/puppet/gpg'
debug: Exec[/usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30](provider=posix): Executing '/usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30'
debug: Executing '/usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30'
err: /Stage[main]/Puppet/Apt::Source[puppetlabs]/Exec[/usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30]/returns: change from notrun to 0 failed: /usr/bin/apt-key adv --keyserver pgp.mit.edu --recv-keys 4BD6EC30 returned 2 instead of one of [0] at /etc/puppet/modules/apt/manifests/source.pp:56
@glennpratt
Copy link
Contributor Author

BTW, hiera-gpg itself is working fine.

@glennpratt
Copy link
Contributor Author

I think I found the culprit:

https://github.com/crayfishx/hiera-gpg/blob/master/lib/hiera/backend/gpg_backend.rb#L78

Believe we can just backup and restore the ENV and all will be well. Testing that theory now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant