Ansible request for CentOS6 to be able to run playbooks under Vagrant

[sxa]

Please put the name of the software product (and affected platforms if relevant) in the title of this issue

• Missing install
• Bug in ansible playbook
• Request for new playbook addition

Details: The fix to the OpenSSL issues on our CentOS6 images works ok, but the runs in VagrantPlaybookCheck do not. This may be due to the presence of OpenSSL 32-bit (i686) packages in the vagrant boxes causing some problems. This needs to be replicated to see if we can understand the failure with the new playbook role (as added in #2344) and see if we can work around it (either by removing any problematic packages, or also creating a 32-bit version of the updated packages from CentOS7)

@Haroon-Khel Can you take a look at this please?

[Haroon-Khel]

Had a look inside the vagrant machine (before the playbook was run on it). It comes out of the box with curl version 7.19, but strangely it has no problem querying adoptium api, ref adoptium/temurin-build#2751, which is a problem on other machines with that version of curl
For example,

[root@adoptopenjdkC6 ~]# curl -q https://api.adoptium.net/v3/info/available_releases

{
    "available_lts_releases": [
        8,
        11,
        17
    ],
    "available_releases": [
        8,
        11,
        16,
        17
    ],

(this would usually hit a certification error on machines whose curl version is less than 7.58 I believe)

[Haroon-Khel]

After finally getting the playbook to run, I encountered this error

TASK [CentOS6-Cent7SSL : Install new OpenSSL 1.0.2k libs and development package ...] ***************************************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Error: Package: 2:postfix-2.6.6-8.el6.x86_64 (@anaconda-CentOS-201806291108.x86_64/6.10)\n
           Requires: openssl\n
           Removing: openssl-1.0.1e-58.el6_10.x86_64 (@updates)\n
               openssl = 1.0.1e-58.el6_10\n
           Obsoleted By: 1:openssl-libs-1.0.2k-21.el6.x86_64 (/openssl-libs-1.0.2k-21.el6.x86_64)\n
               Not found\n
           Available: openssl-1.0.1e-57.el6.i686 (base)\n
               openssl = 1.0.1e-57.el6\n", "rc": 1, "results": ["Loaded plugins: fastestmirror\n
Setting up Install Process\n
Examining /root/rpmbuild/RPMS/x86_64/openssl-libs-1.0.2k-21.el6.x86_64.rpm: 1:openssl-libs-1.0.2k-21.el6.x86_64\n
Marking /root/rpmbuild/RPMS/x86_64/openssl-libs-1.0.2k-21.el6.x86_64.rpm to be installed\n
Loading mirror speeds from cached hostfile\n
 epel: d2lzkl7pfhq30w.cloudfront.net\n
 Examining /root/rpmbuild/RPMS/x86_64/openssl-devel-1.0.2k-21.el6.x86_64.rpm: 1:openssl-devel-1.0.2k-21.el6.x86_64\n
 Marking /root/rpmbuild/RPMS/x86_64/openssl-devel-1.0.2k-21.el6.x86_64.rpm to be installed\nResolving Dependencies\n
 --> Running transaction check\n
---> Package openssl.x86_64 0:1.0.1e-58.el6_10 will be obsoleted\n
--> Processing Dependency: openssl for package: 2:postfix-2.6.6-8.el6.x86_64\n
---> Package openssl-devel.x86_64 1:1.0.2k-21.el6 will be installed\n
---> Package openssl-libs.x86_64 1:1.0.2k-21.el6 will be obsoleting\n
--> Running transaction check\n
---> Package openssl.i686 0:1.0.1e-58.el6_10 will be installed\n
--> Processing Dependency: libz.so.1 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libresolv.so.2 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libkrb5.so.3(krb5_3_MIT) for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libkrb5.so.3 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libk5crypto.so.3(k5crypto_3_MIT) for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libk5crypto.so.3 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libgssapi_krb5.so.2 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libdl.so.2(GLIBC_2.1) for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libdl.so.2(GLIBC_2.0) for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libdl.so.2 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libcom_err.so.2 for package: openssl-1.0.1e-58.el6_10.i686\n
--> Processing Dependency: libc.so.6(GLIBC_2.7) for package: openssl-1.0.1e-58.el6_10.i686\n
--> Running transaction check\n
---> Package glibc.i686 0:2.12-1.212.el6_10.3 will be installed\n
--> Processing Dependency: libfreebl3.so(NSSRAWHASH_3.12.3) for package: glibc-2.12-1.212.el6_10.3.i686\n
--> Processing Dependency: libfreebl3.so for package: glibc-2.12-1.212.el6_10.3.i686\n
---> Package krb5-libs.i686 0:1.10.3-65.el6 will be installed\n
--> Processing Dependency: libselinux.so.1 for package: krb5-libs-1.10.3-65.el6.i686\n
--> Processing Dependency: libkeyutils.so.1(KEYUTILS_0.3) for package: krb5-libs-1.10.3-65.el6.i686\n
--> Processing Dependency: libkeyutils.so.1 for package: krb5-libs-1.10.3-65.el6.i686\n
---> Package libcom_err.i686 0:1.41.12-24.el6 will be installed\n
---> Package zlib.i686 0:1.2.3-29.el6 will be installed\n
--> Running transaction check\n
---> Package keyutils-libs.i686 0:1.4-5.el6 will be installed\n
---> Package libselinux.i686 0:2.0.94-7.el6 will be installed\n
---> Package nss-softokn-freebl.i686 0:3.44.0-6.el6_10 will be installed\n
--> Restarting Dependency Resolution with new changes.\n
--> Running transaction check\n
---> Package openssl.i686 0:1.0.1e-58.el6_10 will be installed\n
--> Processing Dependency: openssl for package: 2:postfix-2.6.6-8.el6.x86_64\n
--> Running transaction check\n
---> Package openssl.i686 0:1.0.1e-57.el6 will be installed\n
--> Restarting Dependency Resolution with new changes.\n
--> Running transaction check\n
---> Package openssl.i686 0:1.0.1e-57.el6 will be installed\n
--> Processing Dependency: openssl for package: 2:postfix-2.6.6-8.el6.x86_64\n
--> Finished Dependency Resolution\n
 You could try using --skip-broken to work around the problem\n
 You could try running: rpm -Va --nofiles --nodigest\n"]}
	to retry, use: --limit @/root/infrastructure-master/ansible/playbooks/AdoptOpenJDK_Unix_Playbook/main.retry

PLAY RECAP ******************************************************************************************************************************************************************************
localhost                  : ok=14   changed=9    unreachable=0    failed=1  

[Willsparker]

I believe this is fixed by #2372

[Willsparker]

Considering I've had 3 VPC runs where this has worked perfectly fine, I'm closing this issue