ansible-playbook [core 2.12.6] config file = /etc/ansible/ansible.cfg configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible ansible collection location = /tmp/tmp0aoro6e0 executable location = /usr/bin/ansible-playbook python version = 3.9.13 (main, May 18 2022, 00:00:00) [GCC 11.3.1 20220421 (Red Hat 11.3.1-2)] jinja version = 2.11.3 libyaml = True Using /etc/ansible/ansible.cfg as config file Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: centos-8_setup.yml *************************************************** 1 plays in /cache/centos-8_setup.yml PLAY [Enable HA repos] ********************************************************* META: ran handlers TASK [Enable HA repos] ********************************************************* task path: /cache/centos-8_setup.yml:5 Wednesday 03 August 2022 07:48:17 +0000 (0:00:00.018) 0:00:00.018 ****** changed: [/cache/centos-8.qcow2] => { "ansible_facts": { "discovered_interpreter_python": "/usr/libexec/platform-python" }, "changed": true, "cmd": [ "dnf", "config-manager", "--set-enabled", "ha" ], "delta": "0:00:00.201126", "end": "2022-08-03 07:48:17.521185", "rc": 0, "start": "2022-08-03 07:48:17.320059" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/centos-8.qcow2 : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 Wednesday 03 August 2022 07:48:18 +0000 (0:00:00.780) 0:00:00.799 ****** =============================================================================== Enable HA repos --------------------------------------------------------- 0.78s /cache/centos-8_setup.yml:5 --------------------------------------------------- PLAYBOOK: tests_certificate_runafter.yml *************************************** 1 plays in /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml PLAY [test certificate issuance with run_after shell script] ******************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:5 Wednesday 03 August 2022 07:48:18 +0000 (0:00:00.016) 0:00:00.815 ****** ok: [/cache/centos-8.qcow2] META: ran handlers TASK [Download current linux-system-roles.certificate] ************************* task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:8 Wednesday 03 August 2022 07:48:19 +0000 (0:00:01.040) 0:00:01.855 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Install cockpit] ********************************************************* task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:21 Wednesday 03 August 2022 07:48:19 +0000 (0:00:00.038) 0:00:01.893 ****** TASK [linux-system-roles.cockpit : Ensure ansible_facts and variables used by role] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:1 Wednesday 03 August 2022 07:48:19 +0000 (0:00:00.045) 0:00:01.938 ****** included: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/set_vars.yml for /cache/centos-8.qcow2 TASK [linux-system-roles.cockpit : Ensure ansible_facts used by role] ********** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/set_vars.yml:2 Wednesday 03 August 2022 07:48:19 +0000 (0:00:00.025) 0:00:01.964 ****** ok: [/cache/centos-8.qcow2] TASK [linux-system-roles.cockpit : Set version specific variables] ************* task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/set_vars.yml:8 Wednesday 03 August 2022 07:48:20 +0000 (0:00:00.506) 0:00:02.470 ****** ok: [/cache/centos-8.qcow2] => (item=/tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/vars/CentOS-8.yml) => { "ansible_facts": { "__cockpit_packages": { "default": "{{ __cockpit_packages_minimal + __cockpit_packages_default }}", "full": "{{ __cockpit_packages_minimal + __cockpit_packages_default + __cockpit_packages_full }}", "minimal": "{{ __cockpit_packages_minimal }}" }, "__cockpit_packages_default": [ "cockpit", "cockpit-networkmanager", "cockpit-packagekit", "cockpit-selinux", "cockpit-storaged" ], "__cockpit_packages_exclude": [ "cockpit-docker", "cockpit-ostree", "cockpit-tests" ], "__cockpit_packages_full": [ "cockpit-*" ], "__cockpit_packages_minimal": [ "cockpit-system", "cockpit-ws" ] }, "ansible_included_var_files": [ "/tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/vars/CentOS-8.yml" ], "ansible_loop_var": "item", "changed": false, "item": "/tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/vars/CentOS-8.yml" } TASK [linux-system-roles.cockpit : List active RHEL repositories] ************** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:9 Wednesday 03 August 2022 07:48:20 +0000 (0:00:00.038) 0:00:02.509 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Enable RHEL repositories] ******************* task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:17 Wednesday 03 August 2022 07:48:20 +0000 (0:00:00.020) 0:00:02.529 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Manage cockpit packages using platform specific package manager if applicable] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:21 Wednesday 03 August 2022 07:48:20 +0000 (0:00:00.019) 0:00:02.548 ****** included: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/setup-dnf.yml for /cache/centos-8.qcow2 => (item=/tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/setup-dnf.yml) TASK [linux-system-roles.cockpit : If choosing custom package set, ensure minimal cockpit is included] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/setup-dnf.yml:1 Wednesday 03 August 2022 07:48:20 +0000 (0:00:00.032) 0:00:02.581 ****** ok: [/cache/centos-8.qcow2] => { "ansible_facts": { "cockpit_packages": "minimal" }, "changed": false } TASK [linux-system-roles.cockpit : Ensure Cockpit Web Console packages are installed.] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/setup-dnf.yml:8 Wednesday 03 August 2022 07:48:20 +0000 (0:00:00.040) 0:00:02.621 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "rc": 0, "results": [ "Installed: cockpit-system-273-2.el8.noarch", "Installed: cockpit-bridge-273-2.el8.x86_64", "Installed: cockpit-ws-273-2.el8.x86_64" ] } TASK [linux-system-roles.cockpit : Create custom port configuration file directory] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:27 Wednesday 03 August 2022 07:48:39 +0000 (0:00:19.330) 0:00:21.952 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Create custom port configuration file] ****** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:35 Wednesday 03 August 2022 07:48:39 +0000 (0:00:00.028) 0:00:21.981 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Check if SELinux is enabled] **************** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:51 Wednesday 03 August 2022 07:48:39 +0000 (0:00:00.022) 0:00:22.003 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Allow cockpit to own custom port in SELinux policy] ********************** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:58 Wednesday 03 August 2022 07:48:39 +0000 (0:00:00.022) 0:00:22.025 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Clean up port configuration file for undefined custom port] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:66 Wednesday 03 August 2022 07:48:39 +0000 (0:00:00.022) 0:00:22.048 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "path": "/etc/systemd/system/cockpit.socket.d/listen.conf", "state": "absent" } TASK [linux-system-roles.cockpit : Ensure Cockpit Web Console is started/stopped and enabled/disabled] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:75 Wednesday 03 August 2022 07:48:40 +0000 (0:00:00.510) 0:00:22.559 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "enabled": true, "name": "cockpit.socket", "state": "started", "status": { "Accept": "no", "ActiveEnterTimestampMonotonic": "0", "ActiveExitTimestampMonotonic": "0", "ActiveState": "inactive", "After": "system.slice sysinit.target systemd-journald.socket", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "no", "AssertTimestampMonotonic": "0", "Backlog": "128", "Before": "cockpit.service shutdown.target sockets.target cockpit-motd.service", "BindIPv6Only": "default", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "Broadcast": "no", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "no", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "no", "ConditionTimestampMonotonic": "0", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DeferAcceptUSec": "0", "Delegate": "no", "Description": "Cockpit Web Service Socket", "DevicePolicy": "auto", "DirectoryMode": "0755", "Documentation": "man:cockpit-ws(8)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "ExecStartPost": "{ path=/bin/ln ; argv[]=/bin/ln -snf active.motd /run/cockpit/motd ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStopPost": "{ path=/bin/ln ; argv[]=/bin/ln -snf inactive.motd /run/cockpit/motd ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorName": "cockpit.socket", "FlushPending": "no", "FragmentPath": "/usr/lib/systemd/system/cockpit.socket", "FreeBind": "no", "FreezerState": "running", "GID": "[not set]", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "IPTOS": "-1", "IPTTL": "-1", "Id": "cockpit.socket", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestampMonotonic": "0", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeepAlive": "no", "KeepAliveIntervalUSec": "0", "KeepAliveProbes": "0", "KeepAliveTimeUSec": "0", "KeyringMode": "shared", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "6968", "LimitNPROCSoft": "6968", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "6968", "LimitSIGPENDINGSoft": "6968", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "Listen": "[::]:9090 (Stream)", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "Mark": "-1", "MaxConnections": "64", "MaxConnectionsPerSource": "0", "MemoryAccounting": "yes", "MemoryCurrent": "[not set]", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MessageQueueMaxMessages": "0", "MessageQueueMessageSize": "0", "MountAPIVFS": "no", "MountFlags": "", "NAccepted": "0", "NConnections": "0", "NRefused": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "cockpit.socket", "NeedDaemonReload": "no", "Nice": "0", "NoDelay": "no", "NoNewPrivileges": "no", "NonBlocking": "no", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PassCredentials": "no", "PassPacketInfo": "no", "PassSecurity": "no", "Perpetual": "no", "PipeSize": "0", "Priority": "-1", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "ReceiveBuffer": "0", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemoveIPC": "no", "RemoveOnStop": "no", "RequiredBy": "cockpit.service", "Requires": "sysinit.target system.slice", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "ReusePort": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "SameProcessGroup": "no", "SecureBits": "0", "SendBuffer": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "SocketMode": "0666", "SocketProtocol": "0", "StandardError": "inherit", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestampMonotonic": "0", "StateDirectoryMode": "0755", "StopWhenUnneeded": "no", "SubState": "dead", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "[not set]", "TasksMax": "11149", "TimeoutUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Transparent": "no", "TriggerLimitBurst": "20", "TriggerLimitIntervalUSec": "2s", "Triggers": "cockpit.service", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "disabled", "UtmpMode": "init", "Wants": "cockpit-motd.service", "Writable": "no" } } TASK [linux-system-roles.cockpit : Create cockpit.conf configuration file] ***** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:81 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.925) 0:00:23.484 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Link to configured existing certificate] **** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:92 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.023) 0:00:23.508 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [linux-system-roles.cockpit : Link to configured existing certificate key] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:102 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.022) 0:00:23.530 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } META: role_complete for /cache/centos-8.qcow2 TASK [Allow certmonger to write into Cockpit's certificate directory] ********** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:31 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.029) 0:00:23.559 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/etc/cockpit/ws-certs.d/", "secontext": "system_u:object_r:cert_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [Generate certificate with linux-system-roles.certificate] **************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:38 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.376) 0:00:23.935 ****** TASK [linux-system-roles.certificate : Set version specific variables] ********* task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:2 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.043) 0:00:23.979 ****** included: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for /cache/centos-8.qcow2 TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ****** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2 Wednesday 03 August 2022 07:48:41 +0000 (0:00:00.028) 0:00:24.007 ****** ok: [/cache/centos-8.qcow2] TASK [linux-system-roles.certificate : Set platform/version specific variables] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:8 Wednesday 03 August 2022 07:48:42 +0000 (0:00:00.517) 0:00:24.524 ****** skipping: [/cache/centos-8.qcow2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/centos-8.qcow2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/centos-8.qcow2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/centos-8.qcow2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:5 Wednesday 03 August 2022 07:48:42 +0000 (0:00:00.040) 0:00:24.565 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.certificate : Ensure provider packages are installed] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:22 Wednesday 03 August 2022 07:48:44 +0000 (0:00:01.791) 0:00:26.356 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:33 Wednesday 03 August 2022 07:48:46 +0000 (0:00:01.829) 0:00:28.186 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:59 Wednesday 03 August 2022 07:48:46 +0000 (0:00:00.432) 0:00:28.619 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.certificate : Ensure provider service is running] ***** task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:88 Wednesday 03 August 2022 07:48:47 +0000 (0:00:00.453) 0:00:29.073 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Wed 2022-08-03 07:46:29 UTC", "ActiveEnterTimestampMonotonic": "72884830", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket dbus.service dbus.socket syslog.target network.target sysinit.target basic.target system.slice", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Wed 2022-08-03 07:46:29 UTC", "AssertTimestampMonotonic": "72873440", "Before": "multi-user.target shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2022-08-03 07:46:29 UTC", "ConditionTimestampMonotonic": "72873440", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "10662", "ExecMainStartTimestamp": "Wed 2022-08-03 07:46:29 UTC", "ExecMainStartTimestampMonotonic": "72874279", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2022-08-03 07:46:29 UTC", "InactiveExitTimestampMonotonic": "72874312", "InvocationID": "bcb7bb141c7547a2bd67be1ab9591dc8", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "6968", "LimitNPROCSoft": "6968", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "6968", "LimitSIGPENDINGSoft": "6968", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "10662", "MemoryAccounting": "yes", "MemoryCurrent": "3018752", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PIDFile": "/run/certmonger.pid", "PartOf": "dbus.service", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target system.slice dbus.socket", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Wed 2022-08-03 07:46:29 UTC", "StateChangeTimestampMonotonic": "72884830", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "1", "TasksMax": "11149", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogTimestamp": "Wed 2022-08-03 07:46:29 UTC", "WatchdogTimestampMonotonic": "72884829", "WatchdogUSec": "0" } } TASK [linux-system-roles.certificate : Ensure certificate requests] ************ task path: /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:100 Wednesday 03 August 2022 07:48:47 +0000 (0:00:00.537) 0:00:29.610 ****** changed: [/cache/centos-8.qcow2] => (item={'name': 'monger-cockpit', 'dns': ['localhost', 'www.example.com'], 'ca': 'local', 'group': 'cockpit-ws', 'run_after': 'DEST=/etc/cockpit/ws-certs.d/monger-cockpit.cert\ncat /etc/pki/tls/certs/monger-cockpit.crt \\\n/etc/pki/tls/private/monger-cockpit.key > $DEST\nchmod 640 $DEST\nchown root:cockpit-ws $DEST\n'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "local", "dns": [ "localhost", "www.example.com" ], "group": "cockpit-ws", "name": "monger-cockpit", "run_after": "DEST=/etc/cockpit/ws-certs.d/monger-cockpit.cert\ncat /etc/pki/tls/certs/monger-cockpit.crt \\\n/etc/pki/tls/private/monger-cockpit.key > $DEST\nchmod 640 $DEST\nchown root:cockpit-ws $DEST\n" } } MSG: Certificate requested (new). Pre/Post run hooks updated. File attributes updated. META: role_complete for /cache/centos-8.qcow2 TASK [Get PEM of certmonger's local CA] **************************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:62 Wednesday 03 August 2022 07:48:48 +0000 (0:00:00.922) 0:00:30.533 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "cmd": [ "openssl", "pkcs12", "-in", "/var/lib/certmonger/local/creds", "-out", "/var/lib/certmonger/local/ca.pem", "-nokeys", "-nodes", "-passin", "pass:" ], "delta": "0:00:00.007191", "end": "2022-08-03 07:48:47.645364", "rc": 0, "start": "2022-08-03 07:48:47.638173" } TASK [test - cockpit works with TLS and expected certificate] ****************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:69 Wednesday 03 August 2022 07:48:48 +0000 (0:00:00.386) 0:00:30.919 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "cmd": [ "curl", "--cacert", "/var/lib/certmonger/local/ca.pem", "https://localhost:9090" ], "delta": "0:00:00.196772", "end": "2022-08-03 07:48:48.220994", "rc": 0, "start": "2022-08-03 07:48:48.024222" } STDOUT: <!DOCTYPE html> <html> <head> <title>Loading...</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noindex"> <meta insert_dynamic_content_here><base href="/"> <script> var environment = {"is_cockpit_client":false,"page":{"connect":true,"require_host":false},"hostname":"ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com","os-release":{"NAME":"CentOS Stream","ID":"centos","PRETTY_NAME":"CentOS Stream 8","CPE_NAME":"cpe:/o:centos:centos:8","ID_LIKE":"rhel fedora"}}; </script> <script type="text/javascript"> /* Patch IE to support forEach on NodeLists, used in show/hide */ if (window.NodeList && !NodeList.prototype.forEach) NodeList.prototype.forEach = Array.prototype.forEach; </script> <script type="text/javascript">/*insert_translations_here*/</script> <script type="text/javascript" src="cockpit/static/login.js"></script> <link href="cockpit/static/login.css" type="text/css" rel="stylesheet"> <link href="cockpit/static/branding.css" type="text/css" rel="stylesheet"> </head> <body class="login-pf"> <div id="banner" class="pf-c-alert pf-m-info pf-m-inline dialog-error" aria-label="inline danger alert" hidden> <svg fill="currentColor" viewBox="0 0 448 512" aria-hidden="true"> <path d="M224 512c35.32 0 63.97-28.65 63.97-64H160.03c0 35.35 28.65 64 63.97 64zm215.39-149.71c-19.32-20.76-55.47-51.99-55.47-154.29 0-77.7-54.48-139.9-127.94-155.16V32c0-17.67-14.32-32-31.98-32s-31.98 14.33-31.98 32v20.84C118.56 68.1 64.08 130.3 64.08 208c0 102.3-36.15 133.53-55.47 154.29-6 6.45-8.66 14.16-8.61 21.71.11 16.4 12.98 32 32.1 32h383.8c19.12 0 32-15.6 32.1-32 .05-7.55-2.61-15.27-8.61-21.71z" /> </svg> <span id="banner-message" class="pf-c-alert__title"></span> </div> <span id="badge"></span> <div class="container" id="main"> <h1 id="brand" class="hide-before"></h1> <div id="error-group" class="pf-c-alert pf-m-danger pf-m-inline dialog-error noscript" aria-label="inline danger alert"> <svg fill="currentColor" viewBox="0 0 512 512" aria-hidden="true"> <path d="M504 256c0 136.997-111.043 248-248 248S8 392.997 8 256C8 119.083 119.043 8 256 8s248 111.083 248 248zm-248 50c-25.405 0-46 20.595-46 46s20.595 46 46 46 46-20.595 46-46-20.595-46-46-46zm-43.673-165.346l7.418 136c.347 6.364 5.609 11.346 11.982 11.346h28.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z" /> </svg> <h2 id="login-error-message" class="pf-c-alert__title"> <span class="noscript" translate>Please enable JavaScript to use the Web Console.</span> </h2> </div> <div id="info-group" class="pf-c-alert pf-m-info pf-m-inline dialog-error" aria-label="inline danger alert" hidden> <svg fill="currentColor" viewBox="0 0 512 512" aria-hidden="true"> <path d="M256 8C119.043 8 8 119.083 8 256c0 136.997 111.043 248 248 248s248-111.003 248-248C504 119.083 392.957 8 256 8zm0 110c23.196 0 42 18.804 42 42s-18.804 42-42 42-42-18.804-42-42 18.804-42 42-42zm56 254c0 6.627-5.373 12-12 12h-88c-6.627 0-12-5.373-12-12v-24c0-6.627 5.373-12 12-12h12v-64h-12c-6.627 0-12-5.373-12-12v-24c0-6.627 5.373-12 12-12h64c6.627 0 12 5.373 12 12v100h12c6.627 0 12 5.373 12 12v24z" /> </svg> <h2 id="login-info-message" class="pf-c-alert__title"></h2> </div> <div id="login" class="login-area" hidden> <form onsubmit="return false"> <div id="conversation-group" class="form-group" hidden> <div id="conversation-message"></div> <label id="conversation-prompt" for="conversation-input"></label> <input type="password" class="form-control" id="conversation-input"> </div> <div id="hostkey-group" class="form-group" hidden> <h1 id="hostkey-title"></h1> <div id="hostkey-warning-group" class="pf-c-alert pf-m-warning pf-m-inline dialog-error" aria-label="inline warning alert" hidden> <svg fill="currentColor" viewBox="0 0 576 512" aria-hidden="true"><path d="M569.52 440.01c18.46 32-4.71 71.99-41.58 71.99H48.05c-36.93 0-60-40.05-41.57-71.99L246.42 24c18.47-32.01 64.72-31.96 83.16 0L569.52 440zM288 354a46 46 0 100 92 46 46 0 000-92zm-43.67-165.35l7.41 136A12 12 0 00263.74 336h48.54a12 12 0 0011.98-11.35l7.42-136A12 12 0 00319.7 176h-63.38a12 12 0 00-11.98 12.65z"/></svg> <h2 translate class="pf-c-alert__title">Changed keys are often the result of an operating system reinstallation. However, an unexpected change may indicate a third-party attempt to intercept your connection.</h2> </div> <p id="hostkey-message-1"></p> <p translate>To ensure that your connection is not intercepted by a malicious third-party, please verify the host key fingerprint:</p> <pre id="hostkey-fingerprint"></pre> <p id="hostkey-type"></p> <p id="hostkey-verify-help-1"></p> <pre id="hostkey-verify-help-cmds"></pre> <p translate>The resulting fingerprint is fine to share via public methods, including email.</p> <p translate>If the fingerprint matches, click "Accept key and log in". Otherwise, do not log in and contact your administrator.</p> </div> <div id="user-group" class="form-group"> <label for="login-user-input" class="control-label" translate>User name</label> <input type="text" class="form-control" id="login-user-input" autocorrect="off" autocapitalize="none" autofocus> </div> <div id="password-group" class="form-group"> <label for="login-password-input" class="control-label" translate>Password</label> <div class="password-with-toggle"> <input type="password" class="form-control" id="login-password-input"> <button type="button" id="login-password-toggle" class="pf-c-button pf-m-control login-password-toggle" aria-label="Show password"> <svg fill="currentColor" aria-hidden="true" viewBox="0 0 640 512"> <path class="password-show" d="M572.52 241.4C518.29 135.59 410.93 64 288 64S57.68 135.64 3.48 241.41a32.35 32.35 0 0 0 0 29.19C57.71 376.41 165.07 448 288 448s230.32-71.64 284.52-177.41a32.35 32.35 0 0 0 0-29.19zM288 400a144 144 0 1 1 144-144 143.93 143.93 0 0 1-144 144zm0-240a95.31 95.31 0 0 0-25.31 3.79 47.85 47.85 0 0 1-66.9 66.9A95.78 95.78 0 1 0 288 160z"/> <path class="password-hide" d="M320 400c-75.85 0-137.25-58.71-142.9-133.11L72.2 185.82c-13.79 17.3-26.48 35.59-36.72 55.59a32.35 32.35 0 0 0 0 29.19C89.71 376.41 197.07 448 320 448c26.91 0 52.87-4 77.89-10.46L346 397.39a144.13 144.13 0 0 1-26 2.61zm313.82 58.1-110.55-85.44a331.25 331.25 0 0 0 81.25-102.07 32.35 32.35 0 0 0 0-29.19C550.29 135.59 442.93 64 320 64a308.15 308.15 0 0 0-147.32 37.7L45.46 3.37A16 16 0 0 0 23 6.18L3.37 31.45A16 16 0 0 0 6.18 53.9l588.36 454.73a16 16 0 0 0 22.46-2.81l19.64-25.27a16 16 0 0 0-2.82-22.45zm-183.72-142-39.3-30.38A94.75 94.75 0 0 0 416 256a94.76 94.76 0 0 0-121.31-92.21A47.65 47.65 0 0 1 304 192a46.64 46.64 0 0 1-1.54 10l-73.61-56.89A142.31 142.31 0 0 1 320 112a143.92 143.92 0 0 1 144 144c0 21.63-5.29 41.79-13.9 60.11z"/> </svg> </button> </div> </div> <div id="option-group"> <a href="#" id="show-other-login-options"> <svg height="16" width="16" viewBox="0 0 16 16" id="option-caret" class="caret caret-right" aria-hidden="true"> <polygon fill="#ffffff" points="4,0 4,14 12,7"></polygon> </svg><span id="show-other-login-options-text" translate>Other options</span> <!-- Above: Span needs to be immediately next to SVG to prevent whitespace in the link --> </a> </div> <div id="server-group" class="form-group" hidden> <label title="Log in to another system. Leave blank to log in to the local system." for="server-field" id="server-field-label" class="control-label" translate>Connect to</label> <div class="server-box"> <input type="text" class="form-control" id="server-field" placeholder=" "> <span class="input-clear" id="server-clear" aria-hidden="true"> <svg fill="currentColor" viewBox="0 0 352 512"><path d="m242.72 256 100.07-100.07c12.28-12.28 12.28-32.19 0-44.48l-22.24-22.24c-12.28-12.28-32.19-12.28-44.48 0L176 189.28 75.93 89.21c-12.28-12.28-32.19-12.28-44.48 0L9.21 111.45c-12.28 12.28-12.28 32.19 0 44.48L109.28 256 9.21 356.07c-12.28 12.28-12.28 32.19 0 44.48l22.24 22.24c12.28 12.28 32.2 12.28 44.48 0L176 322.72l100.07 100.07c12.28 12.28 32.2 12.28 44.48 0l22.24-22.24c12.28-12.29 12.28-32.19 0-44.48z"/></svg> </span> </div> </div> <div class="form-group login-actions"> <button class="pf-c-button pf-m-primary login-button" id="login-button" type="submit"> <span class="spinner"></span> <span id="login-button-text" class="button-text" translate>Log in</span> </button> <a id="get-out-link" href="/" translate>Cancel</a> </div> </form> </div> <div id="login-wait-validating" hidden> <span class="help-block" translate>Validating authentication token</span> <span class="spinner col-xs-15"></span> </div> <div id="login-fatal" hidden> <div id="login-fatal-message"></div> <a id="login-again" class="pf-c-button pf-m-primary" href="#" translate hidden>Try again</a> </div> <div class="unsupported-browser" id="unsupported-browser" hidden> <h2 class="unsupported-browser-heading" translate>A modern browser is required for security, reliability, and performance.</h2> <div class="browser-recommendations"> <div class="browser-download"> <h3 translate>Download a new browser for free</h3> <ul> <li><a href="https://firefox.com/">Mozilla Firefox</a> / Linux, Windows, macOS</li> <li><a href="https://www.google.com/chrome/">Google Chrome</a> / Linux, Windows, macOS</li> </ul> </div> <div class="browser-bundled"> <h3 translate>Or use a bundled browser</h3> <ul> <li><a href="https://www.microsoft.com/">Microsoft Edge</a> / Windows</li> <li><a href="https://www.apple.com/safari/">Apple Safari</a> / macOS</li> </ul> </div> </div> </div> </div> <div class="details" id="login-details" hidden> <p> <label class="control-label"><span translate>Server</span>: <b id="server-name"></b></label> </p> <p id="login-note" class="login-note"></p> </div> <div class="container" id="recent-hosts" hidden> <h1 translate>Recent hosts</h1> <div class="server-box" id="recent-hosts-list"> <!-- Here show up recent hosts --> </div> </div> <script type="text/javascript"> /* Hide everything classed as "noscript" */ document.querySelectorAll('.noscript').forEach(function(element){ element.hidden = true; }); </script> </body> </html> STDERR: % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 279 0 279 0 0 1897 0 --:--:-- --:--:-- --:--:-- 1885 100 11225 0 11225 0 0 59707 0 --:--:-- --:--:-- --:--:-- 59391 TASK [test - get certmonger tracking status] *********************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:76 Wednesday 03 August 2022 07:48:49 +0000 (0:00:00.578) 0:00:31.498 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "cmd": [ "getcert", "list", "--tracking-only", "-f", "/etc/pki/tls/certs/monger-cockpit.crt" ], "delta": "0:00:00.042880", "end": "2022-08-03 07:48:48.639255", "rc": 0, "start": "2022-08-03 07:48:48.596375" } STDOUT: Number of certificates and requests being tracked: 1. Request ID '20220803074846': status: MONITORING stuck: no key pair storage: type=FILE,location='/etc/pki/tls/private/monger-cockpit.key' certificate: type=FILE,location='/etc/pki/tls/certs/monger-cockpit.crt' CA: local issuer: CN=d2aa6d47-1553437b-b826be98-7fe7fc1f,CN=Local Signing Authority subject: CN=localhost issued: 2022-08-03 07:48:47 UTC expires: 2023-08-03 07:46:29 UTC dns: localhost,www.example.com key usage: digitalSignature,keyEncipherment eku: id-kp-serverAuth,id-kp-clientAuth pre-save command: post-save command: /etc/certmonger/post-scripts/monger-cockpit-59d1099.sh track: yes auto-renew: yes TASK [test - ensure certificate generation succeeded] ************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:83 Wednesday 03 August 2022 07:48:49 +0000 (0:00:00.411) 0:00:31.909 ****** ok: [/cache/centos-8.qcow2] => { "changed": false } MSG: All assertions passed TASK [test - clean up tracked certificate] ************************************* task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:87 Wednesday 03 August 2022 07:48:49 +0000 (0:00:00.030) 0:00:31.939 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "cmd": [ "getcert", "stop-tracking", "-f", "/etc/pki/tls/certs/monger-cockpit.crt" ], "delta": "0:00:00.034636", "end": "2022-08-03 07:48:49.053951", "rc": 0, "start": "2022-08-03 07:48:49.019315" } STDOUT: Request "20220803074846" removed. TASK [test - clean up generated certificate] *********************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:94 Wednesday 03 August 2022 07:48:50 +0000 (0:00:00.380) 0:00:32.320 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "path": "/etc/pki/tls/certs/monger-cockpit.crt", "state": "absent" } TASK [test - clean up generated private key] *********************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:99 Wednesday 03 August 2022 07:48:50 +0000 (0:00:00.357) 0:00:32.677 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "path": "/etc/pki/tls/private/monger-cockpit.key", "state": "absent" } TASK [test - clean up copied certificate] ************************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:104 Wednesday 03 August 2022 07:48:50 +0000 (0:00:00.360) 0:00:33.037 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "path": "/etc/cockpit/ws-certs.d/monger-cockpit.cert", "state": "absent" } TASK [test - generic cleanup] ************************************************** task path: /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:109 Wednesday 03 August 2022 07:48:51 +0000 (0:00:00.363) 0:00:33.400 ****** included: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml for /cache/centos-8.qcow2 TASK [cleanup - packages] ****************************************************** task path: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:1 Wednesday 03 August 2022 07:48:51 +0000 (0:00:00.028) 0:00:33.429 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "rc": 0, "results": [ "Removed: cockpit-bridge-273-2.el8.x86_64", "Removed: cockpit-system-273-2.el8.noarch", "Removed: cockpit-ws-273-2.el8.x86_64" ] } TASK [cleanup - find certificates] ********************************************* task path: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:13 Wednesday 03 August 2022 07:49:08 +0000 (0:00:16.758) 0:00:50.187 ****** [WARNING]: Skipped '/etc/cockpit/ws-certs.d/' path due to this access issue: '/etc/cockpit/ws-certs.d/' is not a directory ok: [/cache/centos-8.qcow2] => { "changed": false, "examined": 0, "files": [], "matched": 0, "skipped_paths": { "/etc/cockpit/ws-certs.d/": "'/etc/cockpit/ws-certs.d/' is not a directory" } } MSG: Not all paths examined, check warnings for details TASK [cleanup - certificates] ************************************************** task path: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:23 Wednesday 03 August 2022 07:49:08 +0000 (0:00:00.496) 0:00:50.684 ****** TASK [cleanup - config file] *************************************************** task path: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:32 Wednesday 03 August 2022 07:49:08 +0000 (0:00:00.022) 0:00:50.706 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "path": "/etc/cockpit/cockpit.conf", "state": "absent" } TASK [cleanup - port customization] ******************************************** task path: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:40 Wednesday 03 August 2022 07:49:09 +0000 (0:00:00.367) 0:00:51.074 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "path": "/etc/systemd/system/cockpit.socket.d/", "state": "absent" } TASK [cleanup - reload systemd] ************************************************ task path: /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:48 Wednesday 03 August 2022 07:49:09 +0000 (0:00:00.364) 0:00:51.439 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "name": null, "status": {} } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/centos-8.qcow2 : ok=33 changed=9 unreachable=0 failed=0 skipped=12 rescued=0 ignored=0 Wednesday 03 August 2022 07:49:09 +0000 (0:00:00.590) 0:00:52.029 ****** =============================================================================== linux-system-roles.cockpit : Ensure Cockpit Web Console packages are installed. -- 19.33s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/setup-dnf.yml:8 - cleanup - packages ----------------------------------------------------- 16.76s /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:1 ------------------------------------ linux-system-roles.certificate : Ensure provider packages are installed --- 1.83s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:22 - linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 1.79s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:5 -- Gathering Facts --------------------------------------------------------- 1.04s /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:5 ----------------------- linux-system-roles.cockpit : Ensure Cockpit Web Console is started/stopped and enabled/disabled --- 0.93s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:75 ----- linux-system-roles.certificate : Ensure certificate requests ------------ 0.92s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:100 Enable HA repos --------------------------------------------------------- 0.78s /cache/centos-8_setup.yml:5 --------------------------------------------------- cleanup - reload systemd ------------------------------------------------ 0.59s /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:48 ----------------------------------- test - cockpit works with TLS and expected certificate ------------------ 0.58s /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:69 ---------------------- linux-system-roles.certificate : Ensure provider service is running ----- 0.54s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:88 - linux-system-roles.certificate : Ensure ansible_facts used by role ------ 0.52s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2 linux-system-roles.cockpit : Clean up port configuration file for undefined custom port --- 0.51s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/main.yml:66 ----- linux-system-roles.cockpit : Ensure ansible_facts used by role ---------- 0.51s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.cockpit/tasks/set_vars.yml:2 -- cleanup - find certificates --------------------------------------------- 0.50s /tmp/tmpi0jzgqc6/tests/tasks/cleanup.yml:13 ----------------------------------- linux-system-roles.certificate : Ensure post-scripts hooks directory exists --- 0.45s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:59 - linux-system-roles.certificate : Ensure pre-scripts hooks directory exists --- 0.43s /tmp/tmpi0jzgqc6/tests/roles/linux-system-roles.certificate/tasks/main.yml:33 - test - get certmonger tracking status ----------------------------------- 0.41s /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:76 ---------------------- Get PEM of certmonger's local CA ---------------------------------------- 0.39s /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:62 ---------------------- test - clean up tracked certificate ------------------------------------- 0.38s /tmp/tmpi0jzgqc6/tests/tests_certificate_runafter.yml:87 ---------------------- ansible-playbook [core 2.12.6] config file = /etc/ansible/ansible.cfg configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible ansible collection location = /tmp/tmp0aoro6e0 executable location = /usr/bin/ansible-playbook python version = 3.9.13 (main, May 18 2022, 00:00:00) [GCC 11.3.1 20220421 (Red Hat 11.3.1-2)] jinja version = 2.11.3 libyaml = True Using /etc/ansible/ansible.cfg as config file Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: centos-8_setup.yml *************************************************** 1 plays in /cache/centos-8_setup.yml PLAY [Enable HA repos] ********************************************************* META: ran handlers TASK [Enable HA repos] ********************************************************* task path: /cache/centos-8_setup.yml:5 Wednesday 03 August 2022 08:00:51 +0000 (0:00:00.019) 0:00:00.019 ****** changed: [/cache/centos-8.qcow2] => { "ansible_facts": { "discovered_interpreter_python": "/usr/libexec/platform-python" }, "changed": true, "cmd": [ "dnf", "config-manager", "--set-enabled", "ha" ], "delta": "0:00:00.211836", "end": "2022-08-03 08:00:50.677473", "rc": 0, "start": "2022-08-03 08:00:50.465637" } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/centos-8.qcow2 : ok=1 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 Wednesday 03 August 2022 08:00:51 +0000 (0:00:00.795) 0:00:00.814 ****** =============================================================================== Enable HA repos --------------------------------------------------------- 0.80s /cache/centos-8_setup.yml:5 --------------------------------------------------- PLAYBOOK: tests_certificate_runafter.yml *************************************** 1 plays in /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml PLAY [test certificate issuance with run_after shell script] ******************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:5 Wednesday 03 August 2022 08:00:51 +0000 (0:00:00.016) 0:00:00.831 ****** ok: [/cache/centos-8.qcow2] META: ran handlers TASK [Download current linux-system-roles.certificate] ************************* task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:8 Wednesday 03 August 2022 08:00:52 +0000 (0:00:01.043) 0:00:01.875 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Install cockpit] ********************************************************* task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:21 Wednesday 03 August 2022 08:00:52 +0000 (0:00:00.036) 0:00:01.911 ****** TASK [fedora.linux_system_roles.cockpit : Ensure ansible_facts and variables used by role] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:1 Wednesday 03 August 2022 08:00:52 +0000 (0:00:00.044) 0:00:01.956 ****** included: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/set_vars.yml for /cache/centos-8.qcow2 TASK [fedora.linux_system_roles.cockpit : Ensure ansible_facts used by role] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/set_vars.yml:2 Wednesday 03 August 2022 08:00:52 +0000 (0:00:00.028) 0:00:01.984 ****** ok: [/cache/centos-8.qcow2] TASK [fedora.linux_system_roles.cockpit : Set version specific variables] ****** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/set_vars.yml:7 Wednesday 03 August 2022 08:00:53 +0000 (0:00:00.492) 0:00:02.477 ****** ok: [/cache/centos-8.qcow2] => (item=/tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/vars/CentOS-8.yml) => { "ansible_facts": { "__cockpit_packages": { "default": "{{ __cockpit_packages_minimal + __cockpit_packages_default }}", "full": "{{ __cockpit_packages_minimal + __cockpit_packages_default + __cockpit_packages_full }}", "minimal": "{{ __cockpit_packages_minimal }}" }, "__cockpit_packages_default": [ "cockpit", "cockpit-networkmanager", "cockpit-packagekit", "cockpit-selinux", "cockpit-storaged" ], "__cockpit_packages_exclude": [ "cockpit-docker", "cockpit-ostree", "cockpit-tests" ], "__cockpit_packages_full": [ "cockpit-*" ], "__cockpit_packages_minimal": [ "cockpit-system", "cockpit-ws" ] }, "ansible_included_var_files": [ "/tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/vars/CentOS-8.yml" ], "ansible_loop_var": "item", "changed": false, "item": "/tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/vars/CentOS-8.yml" } TASK [fedora.linux_system_roles.cockpit : List active RHEL repositories] ******* task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:9 Wednesday 03 August 2022 08:00:53 +0000 (0:00:00.039) 0:00:02.516 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Enable RHEL repositories] ************ task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:17 Wednesday 03 August 2022 08:00:53 +0000 (0:00:00.018) 0:00:02.535 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Manage cockpit packages using platform specific package manager if applicable] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:21 Wednesday 03 August 2022 08:00:53 +0000 (0:00:00.019) 0:00:02.555 ****** included: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/setup-dnf.yml for /cache/centos-8.qcow2 => (item=/tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/setup-dnf.yml) TASK [fedora.linux_system_roles.cockpit : If choosing custom package set, ensure minimal cockpit is included] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/setup-dnf.yml:1 Wednesday 03 August 2022 08:00:53 +0000 (0:00:00.036) 0:00:02.591 ****** ok: [/cache/centos-8.qcow2] => { "ansible_facts": { "cockpit_packages": "minimal" }, "changed": false } TASK [fedora.linux_system_roles.cockpit : Ensure Cockpit Web Console packages are installed.] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/setup-dnf.yml:6 Wednesday 03 August 2022 08:00:53 +0000 (0:00:00.035) 0:00:02.627 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "rc": 0, "results": [ "Installed: cockpit-system-273-2.el8.noarch", "Installed: cockpit-bridge-273-2.el8.x86_64", "Installed: cockpit-ws-273-2.el8.x86_64" ] } TASK [fedora.linux_system_roles.cockpit : Create custom port configuration file directory] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:27 Wednesday 03 August 2022 08:01:12 +0000 (0:00:19.094) 0:00:21.722 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Create custom port configuration file] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:35 Wednesday 03 August 2022 08:01:12 +0000 (0:00:00.026) 0:00:21.748 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Check if SELinux is enabled] ********* task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:51 Wednesday 03 August 2022 08:01:12 +0000 (0:00:00.021) 0:00:21.770 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [Allow cockpit to own custom port in SELinux policy] ********************** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:58 Wednesday 03 August 2022 08:01:12 +0000 (0:00:00.021) 0:00:21.792 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Clean up port configuration file for undefined custom port] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:66 Wednesday 03 August 2022 08:01:12 +0000 (0:00:00.021) 0:00:21.814 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "path": "/etc/systemd/system/cockpit.socket.d/listen.conf", "state": "absent" } TASK [fedora.linux_system_roles.cockpit : Ensure Cockpit Web Console is started/stopped and enabled/disabled] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:75 Wednesday 03 August 2022 08:01:13 +0000 (0:00:00.511) 0:00:22.325 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "enabled": true, "name": "cockpit.socket", "state": "started", "status": { "Accept": "no", "ActiveEnterTimestampMonotonic": "0", "ActiveExitTimestampMonotonic": "0", "ActiveState": "inactive", "After": "systemd-journald.socket sysinit.target system.slice", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "no", "AssertTimestampMonotonic": "0", "Backlog": "128", "Before": "shutdown.target sockets.target cockpit-motd.service cockpit.service", "BindIPv6Only": "default", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "Broadcast": "no", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "no", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "no", "ConditionTimestampMonotonic": "0", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DeferAcceptUSec": "0", "Delegate": "no", "Description": "Cockpit Web Service Socket", "DevicePolicy": "auto", "DirectoryMode": "0755", "Documentation": "man:cockpit-ws(8)", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "ExecStartPost": "{ path=/bin/ln ; argv[]=/bin/ln -snf active.motd /run/cockpit/motd ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStopPost": "{ path=/bin/ln ; argv[]=/bin/ln -snf inactive.motd /run/cockpit/motd ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorName": "cockpit.socket", "FlushPending": "no", "FragmentPath": "/usr/lib/systemd/system/cockpit.socket", "FreeBind": "no", "FreezerState": "running", "GID": "[not set]", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "IPTOS": "-1", "IPTTL": "-1", "Id": "cockpit.socket", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestampMonotonic": "0", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeepAlive": "no", "KeepAliveIntervalUSec": "0", "KeepAliveProbes": "0", "KeepAliveTimeUSec": "0", "KeyringMode": "shared", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "6968", "LimitNPROCSoft": "6968", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "6968", "LimitSIGPENDINGSoft": "6968", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "Listen": "[::]:9090 (Stream)", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "Mark": "-1", "MaxConnections": "64", "MaxConnectionsPerSource": "0", "MemoryAccounting": "yes", "MemoryCurrent": "[not set]", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MessageQueueMaxMessages": "0", "MessageQueueMessageSize": "0", "MountAPIVFS": "no", "MountFlags": "", "NAccepted": "0", "NConnections": "0", "NRefused": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "cockpit.socket", "NeedDaemonReload": "no", "Nice": "0", "NoDelay": "no", "NoNewPrivileges": "no", "NonBlocking": "no", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PassCredentials": "no", "PassPacketInfo": "no", "PassSecurity": "no", "Perpetual": "no", "PipeSize": "0", "Priority": "-1", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "ReceiveBuffer": "0", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemoveIPC": "no", "RemoveOnStop": "no", "RequiredBy": "cockpit.service", "Requires": "system.slice sysinit.target", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "ReusePort": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "SameProcessGroup": "no", "SecureBits": "0", "SendBuffer": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "SocketMode": "0666", "SocketProtocol": "0", "StandardError": "inherit", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestampMonotonic": "0", "StateDirectoryMode": "0755", "StopWhenUnneeded": "no", "SubState": "dead", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "[not set]", "TasksMax": "11149", "TimeoutUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Transparent": "no", "TriggerLimitBurst": "20", "TriggerLimitIntervalUSec": "2s", "Triggers": "cockpit.service", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "disabled", "UtmpMode": "init", "Wants": "cockpit-motd.service", "Writable": "no" } } TASK [fedora.linux_system_roles.cockpit : Create cockpit.conf configuration file] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:81 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.909) 0:00:23.235 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Link to configured existing certificate] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:92 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.025) 0:00:23.260 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.cockpit : Link to configured existing certificate key] *** task path: /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:102 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.025) 0:00:23.286 ****** skipping: [/cache/centos-8.qcow2] => { "changed": false, "skip_reason": "Conditional result was False" } META: role_complete for /cache/centos-8.qcow2 TASK [Allow certmonger to write into Cockpit's certificate directory] ********** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:31 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.033) 0:00:23.320 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "gid": 0, "group": "root", "mode": "0755", "owner": "root", "path": "/etc/cockpit/ws-certs.d/", "secontext": "system_u:object_r:cert_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [Generate certificate with linux-system-roles.certificate] **************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:38 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.373) 0:00:23.694 ****** TASK [linux-system-roles.certificate : Set version specific variables] ********* task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:2 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.044) 0:00:23.738 ****** included: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/set_vars.yml for /cache/centos-8.qcow2 TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ****** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/set_vars.yml:2 Wednesday 03 August 2022 08:01:14 +0000 (0:00:00.027) 0:00:23.765 ****** ok: [/cache/centos-8.qcow2] TASK [linux-system-roles.certificate : Set platform/version specific variables] *** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/set_vars.yml:8 Wednesday 03 August 2022 08:01:15 +0000 (0:00:00.539) 0:00:24.305 ****** skipping: [/cache/centos-8.qcow2] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/centos-8.qcow2] => (item=CentOS.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/centos-8.qcow2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/centos-8.qcow2] => (item=CentOS_8.yml) => { "ansible_loop_var": "item", "changed": false, "item": "CentOS_8.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:5 Wednesday 03 August 2022 08:01:15 +0000 (0:00:00.041) 0:00:24.347 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.certificate : Ensure provider packages are installed] *** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:22 Wednesday 03 August 2022 08:01:17 +0000 (0:00:01.847) 0:00:26.194 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:33 Wednesday 03 August 2022 08:01:18 +0000 (0:00:01.793) 0:00:27.988 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:59 Wednesday 03 August 2022 08:01:19 +0000 (0:00:00.398) 0:00:28.387 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.certificate : Ensure provider service is running] ***** task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:88 Wednesday 03 August 2022 08:01:19 +0000 (0:00:00.382) 0:00:28.769 ****** ok: [/cache/centos-8.qcow2] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Wed 2022-08-03 07:58:44 UTC", "ActiveEnterTimestampMonotonic": "76205549", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "network.target system.slice dbus.service syslog.target dbus.socket basic.target systemd-journald.socket sysinit.target", "AllowIsolate": "no", "AllowedCPUs": "", "AllowedMemoryNodes": "", "AmbientCapabilities": "", "AssertResult": "yes", "AssertTimestamp": "Wed 2022-08-03 07:58:44 UTC", "AssertTimestampMonotonic": "76193581", "Before": "shutdown.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "no", "CPUAffinity": "", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "[not set]", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2022-08-03 07:58:44 UTC", "ConditionTimestampMonotonic": "76193581", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "DynamicUser": "no", "EffectiveCPUs": "", "EffectiveMemoryNodes": "", "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "10827", "ExecMainStartTimestamp": "Wed 2022-08-03 07:58:44 UTC", "ExecMainStartTimestampMonotonic": "76194398", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOSchedulingClass": "0", "IOSchedulingPriority": "0", "IOWeight": "[not set]", "IPAccounting": "no", "IPEgressBytes": "18446744073709551615", "IPEgressPackets": "18446744073709551615", "IPIngressBytes": "18446744073709551615", "IPIngressPackets": "18446744073709551615", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2022-08-03 07:58:44 UTC", "InactiveExitTimestampMonotonic": "76194436", "InvocationID": "04d39bcd799f4deab40a384ac8eb6772", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "262144", "LimitNOFILESoft": "1024", "LimitNPROC": "6968", "LimitNPROCSoft": "6968", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "6968", "LimitSIGPENDINGSoft": "6968", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "10827", "MemoryAccounting": "yes", "MemoryCurrent": "3031040", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "MountFlags": "", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAMask": "", "NUMAPolicy": "n/a", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "PIDFile": "/run/certmonger.pid", "PartOf": "dbus.service", "PermissionsStartOnly": "no", "Perpetual": "no", "PrivateDevices": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "sysinit.target system.slice dbus.socket", "Restart": "no", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardInputData": "", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Wed 2022-08-03 07:58:44 UTC", "StateChangeTimestampMonotonic": "76205549", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "0", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "1", "TasksMax": "11149", "TimeoutStartUSec": "1min 30s", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogTimestamp": "Wed 2022-08-03 07:58:44 UTC", "WatchdogTimestampMonotonic": "76205548", "WatchdogUSec": "0" } } TASK [linux-system-roles.certificate : Ensure certificate requests] ************ task path: /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:100 Wednesday 03 August 2022 08:01:20 +0000 (0:00:00.509) 0:00:29.279 ****** changed: [/cache/centos-8.qcow2] => (item={'name': 'monger-cockpit', 'dns': ['localhost', 'www.example.com'], 'ca': 'local', 'group': 'cockpit-ws', 'run_after': 'DEST=/etc/cockpit/ws-certs.d/monger-cockpit.cert\ncat /etc/pki/tls/certs/monger-cockpit.crt \\\n/etc/pki/tls/private/monger-cockpit.key > $DEST\nchmod 640 $DEST\nchown root:cockpit-ws $DEST\n'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "local", "dns": [ "localhost", "www.example.com" ], "group": "cockpit-ws", "name": "monger-cockpit", "run_after": "DEST=/etc/cockpit/ws-certs.d/monger-cockpit.cert\ncat /etc/pki/tls/certs/monger-cockpit.crt \\\n/etc/pki/tls/private/monger-cockpit.key > $DEST\nchmod 640 $DEST\nchown root:cockpit-ws $DEST\n" } } MSG: Certificate requested (new). Pre/Post run hooks updated. File attributes updated. META: role_complete for /cache/centos-8.qcow2 TASK [Get PEM of certmonger's local CA] **************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:62 Wednesday 03 August 2022 08:01:21 +0000 (0:00:00.767) 0:00:30.046 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "cmd": [ "openssl", "pkcs12", "-in", "/var/lib/certmonger/local/creds", "-out", "/var/lib/certmonger/local/ca.pem", "-nokeys", "-nodes", "-passin", "pass:" ], "delta": "0:00:00.007377", "end": "2022-08-03 08:01:20.290040", "rc": 0, "start": "2022-08-03 08:01:20.282663" } TASK [test - cockpit works with TLS and expected certificate] ****************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:69 Wednesday 03 August 2022 08:01:21 +0000 (0:00:00.372) 0:00:30.419 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "cmd": [ "curl", "--cacert", "/var/lib/certmonger/local/ca.pem", "https://localhost:9090" ], "delta": "0:00:00.141587", "end": "2022-08-03 08:01:20.802749", "rc": 0, "start": "2022-08-03 08:01:20.661162" } STDOUT: <!DOCTYPE html> <html> <head> <title>Loading...</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noindex"> <meta insert_dynamic_content_here><base href="/"> <script> var environment = {"is_cockpit_client":false,"page":{"connect":true,"require_host":false},"hostname":"ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com","os-release":{"NAME":"CentOS Stream","ID":"centos","PRETTY_NAME":"CentOS Stream 8","CPE_NAME":"cpe:/o:centos:centos:8","ID_LIKE":"rhel fedora"}}; </script> <script type="text/javascript"> /* Patch IE to support forEach on NodeLists, used in show/hide */ if (window.NodeList && !NodeList.prototype.forEach) NodeList.prototype.forEach = Array.prototype.forEach; </script> <script type="text/javascript">/*insert_translations_here*/</script> <script type="text/javascript" src="cockpit/static/login.js"></script> <link href="cockpit/static/login.css" type="text/css" rel="stylesheet"> <link href="cockpit/static/branding.css" type="text/css" rel="stylesheet"> </head> <body class="login-pf"> <div id="banner" class="pf-c-alert pf-m-info pf-m-inline dialog-error" aria-label="inline danger alert" hidden> <svg fill="currentColor" viewBox="0 0 448 512" aria-hidden="true"> <path d="M224 512c35.32 0 63.97-28.65 63.97-64H160.03c0 35.35 28.65 64 63.97 64zm215.39-149.71c-19.32-20.76-55.47-51.99-55.47-154.29 0-77.7-54.48-139.9-127.94-155.16V32c0-17.67-14.32-32-31.98-32s-31.98 14.33-31.98 32v20.84C118.56 68.1 64.08 130.3 64.08 208c0 102.3-36.15 133.53-55.47 154.29-6 6.45-8.66 14.16-8.61 21.71.11 16.4 12.98 32 32.1 32h383.8c19.12 0 32-15.6 32.1-32 .05-7.55-2.61-15.27-8.61-21.71z" /> </svg> <span id="banner-message" class="pf-c-alert__title"></span> </div> <span id="badge"></span> <div class="container" id="main"> <h1 id="brand" class="hide-before"></h1> <div id="error-group" class="pf-c-alert pf-m-danger pf-m-inline dialog-error noscript" aria-label="inline danger alert"> <svg fill="currentColor" viewBox="0 0 512 512" aria-hidden="true"> <path d="M504 256c0 136.997-111.043 248-248 248S8 392.997 8 256C8 119.083 119.043 8 256 8s248 111.083 248 248zm-248 50c-25.405 0-46 20.595-46 46s20.595 46 46 46 46-20.595 46-46-20.595-46-46-46zm-43.673-165.346l7.418 136c.347 6.364 5.609 11.346 11.982 11.346h28.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z" /> </svg> <h2 id="login-error-message" class="pf-c-alert__title"> <span class="noscript" translate>Please enable JavaScript to use the Web Console.</span> </h2> </div> <div id="info-group" class="pf-c-alert pf-m-info pf-m-inline dialog-error" aria-label="inline danger alert" hidden> <svg fill="currentColor" viewBox="0 0 512 512" aria-hidden="true"> <path d="M256 8C119.043 8 8 119.083 8 256c0 136.997 111.043 248 248 248s248-111.003 248-248C504 119.083 392.957 8 256 8zm0 110c23.196 0 42 18.804 42 42s-18.804 42-42 42-42-18.804-42-42 18.804-42 42-42zm56 254c0 6.627-5.373 12-12 12h-88c-6.627 0-12-5.373-12-12v-24c0-6.627 5.373-12 12-12h12v-64h-12c-6.627 0-12-5.373-12-12v-24c0-6.627 5.373-12 12-12h64c6.627 0 12 5.373 12 12v100h12c6.627 0 12 5.373 12 12v24z" /> </svg> <h2 id="login-info-message" class="pf-c-alert__title"></h2> </div> <div id="login" class="login-area" hidden> <form onsubmit="return false"> <div id="conversation-group" class="form-group" hidden> <div id="conversation-message"></div> <label id="conversation-prompt" for="conversation-input"></label> <input type="password" class="form-control" id="conversation-input"> </div> <div id="hostkey-group" class="form-group" hidden> <h1 id="hostkey-title"></h1> <div id="hostkey-warning-group" class="pf-c-alert pf-m-warning pf-m-inline dialog-error" aria-label="inline warning alert" hidden> <svg fill="currentColor" viewBox="0 0 576 512" aria-hidden="true"><path d="M569.52 440.01c18.46 32-4.71 71.99-41.58 71.99H48.05c-36.93 0-60-40.05-41.57-71.99L246.42 24c18.47-32.01 64.72-31.96 83.16 0L569.52 440zM288 354a46 46 0 100 92 46 46 0 000-92zm-43.67-165.35l7.41 136A12 12 0 00263.74 336h48.54a12 12 0 0011.98-11.35l7.42-136A12 12 0 00319.7 176h-63.38a12 12 0 00-11.98 12.65z"/></svg> <h2 translate class="pf-c-alert__title">Changed keys are often the result of an operating system reinstallation. However, an unexpected change may indicate a third-party attempt to intercept your connection.</h2> </div> <p id="hostkey-message-1"></p> <p translate>To ensure that your connection is not intercepted by a malicious third-party, please verify the host key fingerprint:</p> <pre id="hostkey-fingerprint"></pre> <p id="hostkey-type"></p> <p id="hostkey-verify-help-1"></p> <pre id="hostkey-verify-help-cmds"></pre> <p translate>The resulting fingerprint is fine to share via public methods, including email.</p> <p translate>If the fingerprint matches, click "Accept key and log in". Otherwise, do not log in and contact your administrator.</p> </div> <div id="user-group" class="form-group"> <label for="login-user-input" class="control-label" translate>User name</label> <input type="text" class="form-control" id="login-user-input" autocorrect="off" autocapitalize="none" autofocus> </div> <div id="password-group" class="form-group"> <label for="login-password-input" class="control-label" translate>Password</label> <div class="password-with-toggle"> <input type="password" class="form-control" id="login-password-input"> <button type="button" id="login-password-toggle" class="pf-c-button pf-m-control login-password-toggle" aria-label="Show password"> <svg fill="currentColor" aria-hidden="true" viewBox="0 0 640 512"> <path class="password-show" d="M572.52 241.4C518.29 135.59 410.93 64 288 64S57.68 135.64 3.48 241.41a32.35 32.35 0 0 0 0 29.19C57.71 376.41 165.07 448 288 448s230.32-71.64 284.52-177.41a32.35 32.35 0 0 0 0-29.19zM288 400a144 144 0 1 1 144-144 143.93 143.93 0 0 1-144 144zm0-240a95.31 95.31 0 0 0-25.31 3.79 47.85 47.85 0 0 1-66.9 66.9A95.78 95.78 0 1 0 288 160z"/> <path class="password-hide" d="M320 400c-75.85 0-137.25-58.71-142.9-133.11L72.2 185.82c-13.79 17.3-26.48 35.59-36.72 55.59a32.35 32.35 0 0 0 0 29.19C89.71 376.41 197.07 448 320 448c26.91 0 52.87-4 77.89-10.46L346 397.39a144.13 144.13 0 0 1-26 2.61zm313.82 58.1-110.55-85.44a331.25 331.25 0 0 0 81.25-102.07 32.35 32.35 0 0 0 0-29.19C550.29 135.59 442.93 64 320 64a308.15 308.15 0 0 0-147.32 37.7L45.46 3.37A16 16 0 0 0 23 6.18L3.37 31.45A16 16 0 0 0 6.18 53.9l588.36 454.73a16 16 0 0 0 22.46-2.81l19.64-25.27a16 16 0 0 0-2.82-22.45zm-183.72-142-39.3-30.38A94.75 94.75 0 0 0 416 256a94.76 94.76 0 0 0-121.31-92.21A47.65 47.65 0 0 1 304 192a46.64 46.64 0 0 1-1.54 10l-73.61-56.89A142.31 142.31 0 0 1 320 112a143.92 143.92 0 0 1 144 144c0 21.63-5.29 41.79-13.9 60.11z"/> </svg> </button> </div> </div> <div id="option-group"> <a href="#" id="show-other-login-options"> <svg height="16" width="16" viewBox="0 0 16 16" id="option-caret" class="caret caret-right" aria-hidden="true"> <polygon fill="#ffffff" points="4,0 4,14 12,7"></polygon> </svg><span id="show-other-login-options-text" translate>Other options</span> <!-- Above: Span needs to be immediately next to SVG to prevent whitespace in the link --> </a> </div> <div id="server-group" class="form-group" hidden> <label title="Log in to another system. Leave blank to log in to the local system." for="server-field" id="server-field-label" class="control-label" translate>Connect to</label> <div class="server-box"> <input type="text" class="form-control" id="server-field" placeholder=" "> <span class="input-clear" id="server-clear" aria-hidden="true"> <svg fill="currentColor" viewBox="0 0 352 512"><path d="m242.72 256 100.07-100.07c12.28-12.28 12.28-32.19 0-44.48l-22.24-22.24c-12.28-12.28-32.19-12.28-44.48 0L176 189.28 75.93 89.21c-12.28-12.28-32.19-12.28-44.48 0L9.21 111.45c-12.28 12.28-12.28 32.19 0 44.48L109.28 256 9.21 356.07c-12.28 12.28-12.28 32.19 0 44.48l22.24 22.24c12.28 12.28 32.2 12.28 44.48 0L176 322.72l100.07 100.07c12.28 12.28 32.2 12.28 44.48 0l22.24-22.24c12.28-12.29 12.28-32.19 0-44.48z"/></svg> </span> </div> </div> <div class="form-group login-actions"> <button class="pf-c-button pf-m-primary login-button" id="login-button" type="submit"> <span class="spinner"></span> <span id="login-button-text" class="button-text" translate>Log in</span> </button> <a id="get-out-link" href="/" translate>Cancel</a> </div> </form> </div> <div id="login-wait-validating" hidden> <span class="help-block" translate>Validating authentication token</span> <span class="spinner col-xs-15"></span> </div> <div id="login-fatal" hidden> <div id="login-fatal-message"></div> <a id="login-again" class="pf-c-button pf-m-primary" href="#" translate hidden>Try again</a> </div> <div class="unsupported-browser" id="unsupported-browser" hidden> <h2 class="unsupported-browser-heading" translate>A modern browser is required for security, reliability, and performance.</h2> <div class="browser-recommendations"> <div class="browser-download"> <h3 translate>Download a new browser for free</h3> <ul> <li><a href="https://firefox.com/">Mozilla Firefox</a> / Linux, Windows, macOS</li> <li><a href="https://www.google.com/chrome/">Google Chrome</a> / Linux, Windows, macOS</li> </ul> </div> <div class="browser-bundled"> <h3 translate>Or use a bundled browser</h3> <ul> <li><a href="https://www.microsoft.com/">Microsoft Edge</a> / Windows</li> <li><a href="https://www.apple.com/safari/">Apple Safari</a> / macOS</li> </ul> </div> </div> </div> </div> <div class="details" id="login-details" hidden> <p> <label class="control-label"><span translate>Server</span>: <b id="server-name"></b></label> </p> <p id="login-note" class="login-note"></p> </div> <div class="container" id="recent-hosts" hidden> <h1 translate>Recent hosts</h1> <div class="server-box" id="recent-hosts-list"> <!-- Here show up recent hosts --> </div> </div> <script type="text/javascript"> /* Hide everything classed as "noscript" */ document.querySelectorAll('.noscript').forEach(function(element){ element.hidden = true; }); </script> </body> </html> STDERR: % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 11225 0 11225 0 0 85037 0 --:--:-- --:--:-- --:--:-- 85037 TASK [test - get certmonger tracking status] *********************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:76 Wednesday 03 August 2022 08:01:21 +0000 (0:00:00.518) 0:00:30.938 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "cmd": [ "getcert", "list", "--tracking-only", "-f", "/etc/pki/tls/certs/monger-cockpit.crt" ], "delta": "0:00:00.040481", "end": "2022-08-03 08:01:21.225215", "rc": 0, "start": "2022-08-03 08:01:21.184734" } STDOUT: Number of certificates and requests being tracked: 1. Request ID '20220803080119': status: MONITORING stuck: no key pair storage: type=FILE,location='/etc/pki/tls/private/monger-cockpit.key' certificate: type=FILE,location='/etc/pki/tls/certs/monger-cockpit.crt' CA: local issuer: CN=c0175711-02044d2a-93426f4c-51079339,CN=Local Signing Authority subject: CN=localhost issued: 2022-08-03 08:01:19 UTC expires: 2023-08-03 07:58:44 UTC dns: localhost,www.example.com key usage: digitalSignature,keyEncipherment eku: id-kp-serverAuth,id-kp-clientAuth pre-save command: post-save command: /etc/certmonger/post-scripts/monger-cockpit-59d1099.sh track: yes auto-renew: yes TASK [test - ensure certificate generation succeeded] ************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:83 Wednesday 03 August 2022 08:01:22 +0000 (0:00:00.416) 0:00:31.355 ****** ok: [/cache/centos-8.qcow2] => { "changed": false } MSG: All assertions passed TASK [test - clean up tracked certificate] ************************************* task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:87 Wednesday 03 August 2022 08:01:22 +0000 (0:00:00.031) 0:00:31.386 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "cmd": [ "getcert", "stop-tracking", "-f", "/etc/pki/tls/certs/monger-cockpit.crt" ], "delta": "0:00:00.034043", "end": "2022-08-03 08:01:21.671365", "rc": 0, "start": "2022-08-03 08:01:21.637322" } STDOUT: Request "20220803080119" removed. TASK [test - clean up generated certificate] *********************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:94 Wednesday 03 August 2022 08:01:22 +0000 (0:00:00.416) 0:00:31.802 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "path": "/etc/pki/tls/certs/monger-cockpit.crt", "state": "absent" } TASK [test - clean up generated private key] *********************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:99 Wednesday 03 August 2022 08:01:23 +0000 (0:00:00.365) 0:00:32.168 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "path": "/etc/pki/tls/private/monger-cockpit.key", "state": "absent" } TASK [test - clean up copied certificate] ************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:104 Wednesday 03 August 2022 08:01:23 +0000 (0:00:00.352) 0:00:32.520 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "path": "/etc/cockpit/ws-certs.d/monger-cockpit.cert", "state": "absent" } TASK [test - generic cleanup] ************************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:109 Wednesday 03 August 2022 08:01:23 +0000 (0:00:00.365) 0:00:32.886 ****** included: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml for /cache/centos-8.qcow2 TASK [cleanup - packages] ****************************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:1 Wednesday 03 August 2022 08:01:23 +0000 (0:00:00.028) 0:00:32.914 ****** changed: [/cache/centos-8.qcow2] => { "changed": true, "rc": 0, "results": [ "Removed: cockpit-bridge-273-2.el8.x86_64", "Removed: cockpit-system-273-2.el8.noarch", "Removed: cockpit-ws-273-2.el8.x86_64" ] } TASK [cleanup - find certificates] ********************************************* task path: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:13 Wednesday 03 August 2022 08:01:40 +0000 (0:00:16.772) 0:00:49.687 ****** [WARNING]: Skipped '/etc/cockpit/ws-certs.d/' path due to this access issue: '/etc/cockpit/ws-certs.d/' is not a directory ok: [/cache/centos-8.qcow2] => { "changed": false, "examined": 0, "files": [], "matched": 0, "skipped_paths": { "/etc/cockpit/ws-certs.d/": "'/etc/cockpit/ws-certs.d/' is not a directory" } } MSG: Not all paths examined, check warnings for details TASK [cleanup - certificates] ************************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:23 Wednesday 03 August 2022 08:01:41 +0000 (0:00:00.488) 0:00:50.175 ****** TASK [cleanup - config file] *************************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:32 Wednesday 03 August 2022 08:01:41 +0000 (0:00:00.021) 0:00:50.197 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "path": "/etc/cockpit/cockpit.conf", "state": "absent" } TASK [cleanup - port customization] ******************************************** task path: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:40 Wednesday 03 August 2022 08:01:41 +0000 (0:00:00.357) 0:00:50.554 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "path": "/etc/systemd/system/cockpit.socket.d/", "state": "absent" } TASK [cleanup - reload systemd] ************************************************ task path: /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:48 Wednesday 03 August 2022 08:01:41 +0000 (0:00:00.422) 0:00:50.977 ****** ok: [/cache/centos-8.qcow2] => { "changed": false, "name": null, "status": {} } META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/centos-8.qcow2 : ok=33 changed=9 unreachable=0 failed=0 skipped=12 rescued=0 ignored=0 Wednesday 03 August 2022 08:01:42 +0000 (0:00:00.654) 0:00:51.631 ****** =============================================================================== fedora.linux_system_roles.cockpit : Ensure Cockpit Web Console packages are installed. -- 19.09s /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/setup-dnf.yml:6 cleanup - packages ----------------------------------------------------- 16.77s /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:1 ---------------------------- linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 1.85s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:5 linux-system-roles.certificate : Ensure provider packages are installed --- 1.79s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:22 Gathering Facts --------------------------------------------------------- 1.04s /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:5 --------------- fedora.linux_system_roles.cockpit : Ensure Cockpit Web Console is started/stopped and enabled/disabled --- 0.91s /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:75 Enable HA repos --------------------------------------------------------- 0.80s /cache/centos-8_setup.yml:5 --------------------------------------------------- linux-system-roles.certificate : Ensure certificate requests ------------ 0.77s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:100 cleanup - reload systemd ------------------------------------------------ 0.65s /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:48 --------------------------- linux-system-roles.certificate : Ensure ansible_facts used by role ------ 0.54s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/set_vars.yml:2 test - cockpit works with TLS and expected certificate ------------------ 0.52s /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:69 -------------- fedora.linux_system_roles.cockpit : Clean up port configuration file for undefined custom port --- 0.51s /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/main.yml:66 linux-system-roles.certificate : Ensure provider service is running ----- 0.51s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:88 fedora.linux_system_roles.cockpit : Ensure ansible_facts used by role --- 0.49s /tmp/tmp0aoro6e0/ansible_collections/fedora/linux_system_roles/roles/cockpit/tasks/set_vars.yml:2 cleanup - find certificates --------------------------------------------- 0.49s /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:13 --------------------------- cleanup - port customization -------------------------------------------- 0.42s /tmp/tmp7hpg_90z/tests/cockpit/tasks/cleanup.yml:40 --------------------------- test - get certmonger tracking status ----------------------------------- 0.42s /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:76 -------------- test - clean up tracked certificate ------------------------------------- 0.42s /tmp/tmp7hpg_90z/tests/cockpit/tests_certificate_runafter.yml:87 -------------- linux-system-roles.certificate : Ensure pre-scripts hooks directory exists --- 0.40s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:33 linux-system-roles.certificate : Ensure post-scripts hooks directory exists --- 0.38s /tmp/tmp7hpg_90z/tests/cockpit/roles/linux-system-roles.certificate/tasks/main.yml:59