las-it-organisation issueshttps://git.scc.kit.edu/groups/las-it-organisation/-/issues2021-09-03T15:51:45+02:00https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/30Opera HTML Manual is not readable2021-09-03T15:51:45+02:00ll5790Opera HTML Manual is not readableCalling host: las118.las.kit.edu (Fedora 28)
Failing nodes: las118
Summary
-------
Oper Manual owned by root: Opera can not open the file.
Steps to reproduce
------------------
Opera -> Help Manual (HTML)
What is the current bug ...Calling host: las118.las.kit.edu (Fedora 28)
Failing nodes: las118
Summary
-------
Oper Manual owned by root: Opera can not open the file.
Steps to reproduce
------------------
Opera -> Help Manual (HTML)
What is the current bug behavior?
---------------------------------
see above.
What is the expected correct behaviour?
---------------------------------------
Open Manual in Browser.
Possible fixes
--------------
Change reading rights: Grant access.
/cc @gethmannhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/29opera_manager fails starting2018-06-07T15:38:00+02:00sg7149opera_manager fails startingFailing nodes: las113 (Fedora 27)
Summary
-------
`opera_manager` did not start.
Steps to reproduce
------------------
run `opera_manager` in the terminal
What is the current bug behavior?
---------------------------------
Fails ...Failing nodes: las113 (Fedora 27)
Summary
-------
`opera_manager` did not start.
Steps to reproduce
------------------
run `opera_manager` in the terminal
What is the current bug behavior?
---------------------------------
Fails with error message
What is the expected correct behaviour?
---------------------------------------
Opera starts
Relevant logs and/or screenshots
--------------------------------
```
~ opera_manager
/usr/local/share/Opera_18R2/code/bin/opera_manager: error while loading shared libraries: libpcre16.so.0: cannot open shared object file: No such file or directory
```
Possible fixes
--------------
Install `pcre-utf16`
/cc @gethmannsg7149sg7149https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/28firewalld not working on Fedora 282020-02-24T17:37:09+01:00sg7149firewalld not working on Fedora 28Calling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las118
Summary
-------
All rules that work with the `firewalld` module do not work with Fedora 28, because the firewalld module depends on `python-firewalld` and does not wor...Calling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las118
Summary
-------
All rules that work with the `firewalld` module do not work with Fedora 28, because the firewalld module depends on `python-firewalld` and does not work with `python3-firewalld` as partly documented in the [documentation](https://docs.ansible.com/ansible/latest/modules/firewalld_module.html)
Steps to reproduce
------------------
Try to run the sshd task of the common role
What is the current bug behavior?
---------------------------------
The role stops at task `common : Open port 22 on Fedora/CentOS`
What is the expected correct behaviour?
---------------------------------------
The role common runs and the firewall opens port 22 for ssh.
Relevant logs and/or screenshots
--------------------------------
```
fatal: [las118.las.kit.edu]: FAILED! => {
"changed": false,
"module_stderr": "OpenSSH_7.6p1, OpenSSL 1.1.0h-fips 27 Mar 2018\r\ndebug1: Reading configuration data /home/gethmann/.ssh/config\r\ndebug1: /home/gethmann/.ssh/config line 124: Applying options for *\r\ndebug1: /home/gethmann/.ssh/config line 128: Deprecated option \"useroaming\"\r\ndebug1: Reading configuration data /etc/ssh/ssh_config\r\ndebug3: /etc/ssh/ssh_config line 52: Including file /etc/ssh/ssh_config.d/05-redhat.conf depth 0\r\ndebug1: Reading configuration data /etc/ssh/ssh_config.d/05-redhat.conf\r\ndebug3: /etc/ssh/ssh_config.d/05-redhat.conf line 2: Including file /etc/crypto-policies/back-ends/openssh.config depth 1\r\ndebug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config\r\ndebug3: gss kex names ok: [gss-gex-sha1-,gss-group14-sha1-]\r\ndebug3: kex names ok: [curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1]\r\ndebug1: /etc/ssh/ssh_config.d/05-redhat.conf line 8: Applying options for *\r\ndebug1: auto-mux: Trying existing master\r\ndebug2: fd 4 setting O_NONBLOCK\r\ndebug2: mux_client_hello_exchange: master version 4\r\ndebug3: mux_client_forwards: request forwardings: 0 local, 0 remote\r\ndebug3: mux_client_request_session: entering\r\ndebug3: mux_client_request_alive: entering\r\ndebug3: mux_client_request_alive: done pid = 25187\r\ndebug3: mux_client_request_session: session request sent\r\ndebug1: mux_client_request_session: master session id: 2\r\ndebug3: mux_client_read_packet: read header failed: Broken pipe\r\ndebug2: Received exit status from master 1\r\nShared connection to las118.las.kit.edu closed.\r\n",
"module_stdout": "\r\nTraceback (most recent call last):\r\n File \"/tmp/ansible_VyTTtl/ansible_module_firewalld.py\", line 1017, in <module>\r\n main()\r\n File \"/tmp/ansible_VyTTtl/ansible_module_firewalld.py\", line 811, in main\r\n if fw_offline:\r\nNameError: global name 'fw_offline' is not defined\r\n",
"msg": "MODULE FAILURE",
"rc": 1
}
```
Possible fixes
--------------
Search for other ways (iptables) to open the port. Just as a work-around till Python 3 is supported.
/cc @gethmannhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/27PyCharm comunity2021-09-03T15:52:43+02:00sg7149PyCharm comunityLet the user choose between the community edition or the commercial/educational one.
For the community edition there exists a copr repo
http://copr.fedorainfracloud.org/coprs/phracek/PyCharm/Let the user choose between the community edition or the commercial/educational one.
For the community edition there exists a copr repo
http://copr.fedorainfracloud.org/coprs/phracek/PyCharm/https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/26EPICS_CA_ADDR_LIST hard is coded2020-02-24T17:39:28+01:00sg7149EPICS_CA_ADDR_LIST hard is codedCalling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las115
Summary
-------
Because the EPICS_CA_ADDR_LIST is hard coded for KARA in the `profile.d` file it is not practical for the Jena/TGU setup.
What is the current bug beh...Calling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las115
Summary
-------
Because the EPICS_CA_ADDR_LIST is hard coded for KARA in the `profile.d` file it is not practical for the Jena/TGU setup.
What is the current bug behavior?
---------------------------------
The environment variable `EPICS_CA_ADDR_LIST` is set to a server that is responsible for the KARA PVs, but not depending on the use-case for KARA, FLUTE or JENA/TGU.
What is the expected correct behaviour?
---------------------------------------
The variable should be like it is for a KARA role, and different or not set for a JENA/TGU role.
Iff it is not set, it should be noted in the docu and as a `msg`.
Possible fixes
--------------
Create a role for KARA/CSS and a role for Jena/TGU control system and one without it being set.
/cc @project-managerhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/25texlive package names might change in future Fedora releases2021-09-03T14:43:48+02:00sg7149texlive package names might change in future Fedora releasesFedora 27 does not use the current stable TexLive version 2017.
For the next Fedora release the names of the texlive packages might change, because there is an [issue about renaming](https://bugzilla.redhat.com/show_bug.cgi?id=1505342) f...Fedora 27 does not use the current stable TexLive version 2017.
For the next Fedora release the names of the texlive packages might change, because there is an [issue about renaming](https://bugzilla.redhat.com/show_bug.cgi?id=1505342) from `texlive` into `texlive-base` and `texlive`.
Test via copr:
```
dnf copr enable spot/texlive
```https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/24Labview2021-09-03T15:53:21+02:00sg7149LabviewHost: las117.las.kit.edu
OS: Fedora 27
Software name:
--------------
Labview
Software installation instruction if not in repos:
--------------------------------------------------
k.A.
Possibly also interesting for:
-----------------...Host: las117.las.kit.edu
OS: Fedora 27
Software name:
--------------
Labview
Software installation instruction if not in repos:
--------------------------------------------------
k.A.
Possibly also interesting for:
-------------------------------
M. Fischer
/cc @project-managerhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/23EPICS installation fails due to (invalid) certificates2021-09-03T15:53:58+02:00sg7149EPICS installation fails due to (invalid) certificatesCalling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las117
Summary
--------
epics role fails at installation/downloading of the files
Steps to reproduce
-------------------
run the `epics` role, e.g. by ``site.yml``
What is...Calling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las117
Summary
--------
epics role fails at installation/downloading of the files
Steps to reproduce
-------------------
run the `epics` role, e.g. by ``site.yml``
What is the current bug behaviour?
----------------------------------
Role fails and EPICS will not install
What is the expected correct behavior?
---------------------------------------
Installation of epics
Relevant logs and/or screenshots
---------------------------------
```
TASK [epics : unarchived] ********************************************************************************************************************************************************
fatal: [las117.las.kit.edu]: FAILED! => {"changed": false, "msg": "Failed to validate the SSL certificate for www.aps.anl.gov:443. Make sure your managed systems have a valid CA certificate installed. You can use validate_certs=False if you do not need to confirm the servers identity but this is unsafe and not recommended. Paths checked for this platform: /etc/ssl/certs, /etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs, /usr/share/ca-certificates/cacert.org, /etc/ansible. The exception msg was: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)."}
```
Possible fixes
(If you can, link to the line of code that might be responsible for the problem)
/cc @project-managerhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/22Run ansible as root with certificats2020-05-04T12:32:11+02:00sg7149Run ansible as root with certificatsRun ansible as root to avoid sudo-timeouts on slow hard disks.
* [x] certificate for root on one host
* [x] root login via ssh
* [ ] edit tasks not to use become any longer?Run ansible as root to avoid sudo-timeouts on slow hard disks.
* [x] certificate for root on one host
* [x] root login via ssh
* [ ] edit tasks not to use become any longer?https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/21(KIT)Latex installation fails because of failing copy2020-08-24T17:49:50+02:00sg7149(KIT)Latex installation fails because of failing copyCalling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las117 (Fedora 27)
Summary
``with_glob`` fails when used with ``copy`` and ``tempdir``
Steps to reproduce
Run the KITLaTeX tasks.
What is the current bug behavior?
Task...Calling host: las113.las.kit.edu (Fedora 27)
Failing nodes: las117 (Fedora 27)
Summary
``with_glob`` fails when used with ``copy`` and ``tempdir``
Steps to reproduce
Run the KITLaTeX tasks.
What is the current bug behavior?
Task `hack Helvetica into KIT styles due to broken font installation` fails because `copy tex files` does not work.
What is the expected correct behavior?
Files are copied and the task can run.
Relevant logs and/or screenshots
```
TASK [latex : copy pdf files] *********************************************************************************************************
task path: /home/gethmann/ansible/ansible/roles/latex/tasks/KITLaTeX.yml:68
[WARNING]: Unable to find '/tmp/ansiEtob1c/doc/latex/KIT' in expected paths.
```
/cc @gethmannhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/20ipynb fails2020-08-24T17:48:49+02:00sg7149ipynb fails```
RUNNING HANDLER [ipynb : activate ipywidgets] *****************************************************************************************
fatal: [las117.las.kit.edu]: FAILED! => {"changed": false, "cmd": "jupyter-nbextension enable --p...```
RUNNING HANDLER [ipynb : activate ipywidgets] *****************************************************************************************
fatal: [las117.las.kit.edu]: FAILED! => {"changed": false, "cmd": "jupyter-nbextension enable --py --sys-prefix widgetsnbextension", "failed": true, "msg": "[Errno 2] No such file or directory", "rc": 2}
```https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/19Opera depends on a user with access rights to las-archiv2021-09-03T15:55:28+02:00sg7149Opera depends on a user with access rights to las-archivAdd IPA client as a dependency in the meta. See #13 and #5
So atm it is only possible to install Opera on an already running system.Add IPA client as a dependency in the meta. See #13 and #5
So atm it is only possible to install Opera on an already running system.https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/18elegant for Fedora 272017-11-22T09:24:15+01:00sg7149elegant for Fedora 27No RPMs available yetNo RPMs available yethttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/17Installation of neo2 support fail2017-11-21T18:24:54+01:00sg7149Installation of neo2 support fail```
TASK [latex : compile package docu] ********************************************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["pdflatex", "-interaction=nonstopmode", "uniinput.dtx"], "d...```
TASK [latex : compile package docu] ********************************************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["pdflatex", "-interaction=nonstopmode", "uniinput.dtx"], "delta": "0:00:00.044006", "end": "2017-11-07 17:44:07.041620", "failed": true, "msg": "non-zero return code", "rc": 1, "start": "2017-11-07 17:44:06.997614", "stderr": "", "stderr_lines": [], "stdout": "This is pdfTeX, Version 3.14159265-2.6-1.40.17 (TeX Live 2016) (preloaded format=pdflatex)\n restricted \\write18 enabled.\nentering extended mode\n! I can't find file `uniinput.dtx'.\n<*> uniinput.dtx\n \n(Press Enter to retry, or Control-D to exit)\nPlease type another input file name\n! Emergency stop.\n<*> uniinput.dtx\n \n! ==> Fatal error occurred, no output PDF file produced!\nTranscript written on texput.log.", "stdout_lines": ["This is pdfTeX, Version 3.14159265-2.6-1.40.17 (TeX Live 2016) (preloaded format=pdflatex)", " restricted \\write18 enabled.", "entering extended mode", "! I can't find file `uniinput.dtx'.", "<*> uniinput.dtx", " ", "(Press Enter to retry, or Control-D to exit)", "Please type another input file name", "! Emergency stop.", "<*> uniinput.dtx", " ", "! ==> Fatal error occurred, no output PDF file produced!", "Transcript written on texput.log."]}
```
and
```
TASK [latex : compile package] *************************************************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["latex", "uniinput.ins"], "delta": "0:00:00.047986", "end": "2017-11-07 17:44:07.256987", "failed": true, "msg": "non-zero return code", "rc": 1, "start": "2017-11-07 17:44:07.209001", "stderr": "", "stderr_lines": [], "stdout": "This is pdfTeX, Version 3.14159265-2.6-1.40.17 (TeX Live 2016) (preloaded format=latex)\n restricted \\write18 enabled.\nentering extended mode\n! I can't find file `uniinput.ins'.\n<*> uniinput.ins\n \n(Press Enter to retry, or Control-D to exit)\nPlease type another input file name: \n! Emergency stop.\n<*> uniinput.ins\n \nNo pages of output.\nTranscript written on texput.log.", "stdout_lines": ["This is pdfTeX, Version 3.14159265-2.6-1.40.17 (TeX Live 2016) (preloaded format=latex)", " restricted \\write18 enabled.", "entering extended mode", "! I can't find file `uniinput.ins'.", "<*> uniinput.ins", " ", "(Press Enter to retry, or Control-D to exit)", "Please type another input file name: ", "! Emergency stop.", "<*> uniinput.ins", " ", "No pages of output.", "Transcript written on texput.log."]}
```https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/16Fix latex role: handler mktexlsr2017-11-21T18:24:54+01:00sg7149Fix latex role: handler mktexlsr`mktexlsr` is not run correctly with the handler.
Package is not available immediately after installation, but after running `mktexlsr` as root (`$ sudo su ; # mktexlsr`)`mktexlsr` is not run correctly with the handler.
Package is not available immediately after installation, but after running `mktexlsr` as root (`$ sudo su ; # mktexlsr`)https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/15Provision new user rule2021-09-03T15:58:06+02:00sg7149Provision new user ruleRolle zum Anlegen und Entfernen von neuen Nutzern.
* [ ] JIRA-Ticket für Confluence-User https://docs.ansible.com/ansible/latest/jira_module.html (u-Kürzel)
* [ ] FreeIPA-Account (Nachname)
Leider noch nicht automatisierbar sind Sympa ...Rolle zum Anlegen und Entfernen von neuen Nutzern.
* [ ] JIRA-Ticket für Confluence-User https://docs.ansible.com/ansible/latest/jira_module.html (u-Kürzel)
* [ ] FreeIPA-Account (Nachname)
Leider noch nicht automatisierbar sind Sympa und GitLab-Gruppen-Angehörigkeit
Bitte auch mit issue #13 abstimmenhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/14skipping of elegant SDDSToolKit fails on F WS 252017-10-09T13:05:30+02:00sg7149skipping of elegant SDDSToolKit fails on F WS 25Though this should be skipped (like it does, when using the debug module), it does not and therefore fails.
role: elegant/tasks/elegant.yml lines 44 onwards
computer: las-gethmann.las.kit.edu
```
TASK [elegant : install SDDSToolKit] ...Though this should be skipped (like it does, when using the debug module), it does not and therefore fails.
role: elegant/tasks/elegant.yml lines 44 onwards
computer: las-gethmann.las.kit.edu
```
TASK [elegant : install SDDSToolKit] ********************************************************************************************************************************************************************************************************
fatal: [127.0.0.1]: FAILED! => {"changed": false, "failed": true, "module_stderr": "No handlers could be found for logger \"dnf\"\nTraceback (most recent call last):\n File \"/tmp/ansible__ZtL8C/ansible_module_dnf.py\", line 534, in <module>\n main()\n File \"/tmp/ansible__ZtL8C/ansible_module_dnf.py\", line 530, in main\n ensure(module, base, params['state'], params['name'], params['autoremove'])\n File \"/tmp/ansible__ZtL8C/ansible_module_dnf.py\", line 364, in ensure\n _install_remote_rpms(base, filenames)\n File \"/tmp/ansible__ZtL8C/ansible_module_dnf.py\", line 322, in _install_remote_rpms\n pkgs.append(base.add_remote_rpm(filename))\n File \"/usr/lib/python2.7/site-packages/dnf/base.py\", line 925, in add_remote_rpm\n return self.sack.add_cmdline_package(path)\nIOError: Can not load RPM file: 26: u'3.5.1-1'}.fedora.25.x86_64.rpm.\n", "module_stdout": "", "msg": "MODULE FAILURE", "rc": 0}
```https://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/13Bootstrap wrapper script2021-09-03T15:58:06+02:00sg7149Bootstrap wrapper scriptA script that bootstraps the ansible installation of a host.
* Create the files in `host_vars` and edit `hosts`
Might interfere with issues #10 and #4 and with the `add_host.sh` script of the documentation repositoryA script that bootstraps the ansible installation of a host.
* Create the files in `host_vars` and edit `hosts`
Might interfere with issues #10 and #4 and with the `add_host.sh` script of the documentation repositoryhttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/12ripgrep for other OSes2020-08-24T17:47:12+02:00sg7149ripgrep for other OSes* ripgrep role for CentOS und Ubuntu
* make copr installation idempotent* ripgrep role for CentOS und Ubuntu
* make copr installation idempotenthttps://git.scc.kit.edu/las-it-organisation/32-0-IT-InstructionsAndRules/ansible/-/issues/11Python role(s)2021-09-03T15:59:34+02:00sg7149Python role(s)Python stackPython stack