Re: Trouble with ansible and apt. Is this a known problem?

[Darac Marjal <mailinglist@darac.org.uk>]

On 21/11/2022 08:59, Nathanael Schweers wrote:
> Hello people,
>
> I recently installed Debian Bullseye on my desktop machine, having 
> previously used Debian sid.
>
> So far it all went well.  Yet two days ago, ansible suddenly reported 
> the following message when attempting to use either the `apt` or 
> `package` builtin.
>
> fatal: [schweers-pc]: FAILED! => changed=false
>  module_stderr: |-
>    Shared connection to schweers-pc closed.
>  module_stdout: |2-
>
>    Traceback (most recent call last):
>      File 
> "/home/schweers/.ansible/tmp/ansible-tmp-1669020286.4378655-35342-213285731346074/AnsiballZ_apt.py", 
>      line 102, in <module>
>        _ansiballz_main()
>      File 
> "/home/schweers/.ansible/tmp/ansible-tmp-1669020286.4378655-35342-213285731346074/AnsiballZ_apt.py", 
>      line 94, in _ansiballz_main
>        invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)
>      File 
> "/home/schweers/.ansible/tmp/ansible-tmp-1669020286.4378655-35342-213285731346074/AnsiballZ_apt.py", 
>      line 40, in invoke_module
>        runpy.run_module(mod_name='ansible.modules.apt', 
> init_globals=None, run_name='__main__', alter_sys=True)
>      File "/usr/lib/python3.9/runpy.py", line 210, in run_module
>        return _run_module_code(code, init_globals, run_name,        
> mod_spec)
>      File "/usr/lib/python3.9/runpy.py", line 97, in _run_module_code
>        _run_code(code, mod_globals, init_globals,
>      File "/usr/lib/python3.9/runpy.py", line 87, in _run_code
>        exec(code, run_globals)
>      File 
> "/tmp/ansible_ansible.legacy.apt_payload_og4qifjt/ansible_ansible.legacy.apt_payload.zip/ansible/modules/apt.py", 
>      line 302, in <module>
>      File "<frozen importlib._bootstrap>", line 1007, in      
> _find_and_load
>      File "<frozen importlib._bootstrap>", line 986, in 
> _find_and_load_unlocked
>      File "<frozen importlib._bootstrap>", line 664, in _load_unlocked
>      File "<frozen importlib._bootstrap>", line 627, in 
> _load_backward_compatible
>      File "<frozen zipimport>", line 259, in load_module
>      File 
> "/tmp/ansible_ansible.legacy.apt_payload_og4qifjt/ansible_ansible.legacy.apt_payload.zip/ansible/module_utils/urls.py", 
>      line 115, in <module>
>      File 
> "/usr/lib/python3/dist-packages/urllib3/contrib/pyopenssl.py",      
> line 50, in <module>
>        import OpenSSL.SSL
>      File "/usr/lib/python3/dist-packages/OpenSSL/__init__.py",      
> line 8, in <module>
>        from OpenSSL import crypto, SSL
>      File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 
> 1556, in <module>
>        class X509StoreFlags(object):
>      File "/usr/lib/python3/dist-packages/OpenSSL/crypto.py", line 
> 1577, in X509StoreFlags
>        CB_ISSUER_CHECK = _lib.X509_V_FLAG_CB_ISSUER_CHECK
>    AttributeError: module 'lib' has no attribute 
> 'X509_V_FLAG_CB_ISSUER_CHECK'
>  msg: |-
>    MODULE FAILURE
>    See stdout/stderr for the exact error
>  rc: 1
>
>
> Note that it does not matter that the package in question is already 
> installed.
>
> I have tried to reinstall `python3-urllibs`, `python3-apt` and 
> `python3-openssl` yet to no avail.
>
> Is this a known problem?

It doesn't look like this exact problem is known at 
https://github.com/search?q=org%3Aansible+X509_V_FLAG_CB_ISSUER_CHECK+is%3Aissue&type=issues, 
but there are a few suggestions among the matching bugs.

One suggestion appears to be that your python module "cryptography" is 
too new for Ansible. You don't state how you installed Ansible, but you 
might find installing it into a virtualenv is more reliable.


> Kind regards,
> Nathanael

Attachment: OpenPGP_signature
Description: OpenPGP digital signature