Operating System: 3.10.0-1160.88.1.el7.centos.plus.x86_64
Install Command
Removed Key, CloudflareAPI and domain from command string.
curl https://raw.githubusercontent.com/apisnetworks/apiscp-bootstrapper/master/bootstrap.sh | bash -s - -s use_robust_dns='true' -s always_permit_panel_login='true' -s php_install_ioncube='true' -s dns_default_provider='cloudflare' -s whitelist_ip='xxx.xxx.xx.xxx' -s apnscp_admin_email='admin@DOMAIN.COM' -s system_hostname='server1.DOMAIN.COM' -s apnscp_update_policy='edge' -s passenger_enabled='false' -s dns_default_provider_key='#####' '######'
continue install command
cd /usr/local/apnscp/resources/playbooks && env ANSIBLE_LOG_PATH=/root/apnscp-bootstrapper.log BOOTSTRAP_SH=/root/resume_apnscp_setup.sh SSL_CERT_DIR=/etc/ssl/certs ansible-playbook -l localhost -c local bootstrap.yml -vvv
Error Log
[root@server1 playbooks]# grep -m1 failed=1 -B20 /root/apnscp-bootstrapper.log
2024-06-29 06:57:22,971 p=1400 u=root n=ansible | TASK [common/fail-and-save : copy] *********************************************
2024-06-29 06:57:23,150 p=1400 u=root n=ansible | fatal: [localhost]: FAILED! => changed=false
checksum: 25f2190969bdf85e90bfdc2f5631f07d110cbb86
cur_context:
- unlabeled
gid: 0
group: root
input_was:
- kernel
mode: '0644'
msg: 'invalid selinux context: [Errno 95] Operation not supported'
new_context:
- kernel
owner: root
path: /root/resume_apnscp_setup.sh
secontext: unlabeled
size: 529
state: file
uid: 0
2024-06-29 06:57:23,152 p=1400 u=root n=ansible | PLAY RECAP *********************************************************************
2024-06-29 06:57:23,152 p=1400 u=root n=ansible | localhost : ok=75 changed=31 unreachable=0 failed=1 skipped=39 rescued=1 ignored=0
LOG
TASK [common : Generate SSL certificate] **********************************************************************************************************************************
task path: /usr/local/apnscp/resources/playbooks/roles/common/tasks/create-self-signed-certificate.yml:44
Using module file /usr/lib/python2.7/site-packages/ansible/modules/crypto/openssl_certificate.py
Pipelining is enabled.
<127.0.0.1> ESTABLISH LOCAL CONNECTION FOR USER: root
<127.0.0.1> EXEC /bin/sh -c '/usr/bin/python2 && sleep 0'
The full traceback is:
WARNING: The below traceback may *not* be related to the actual failure.
File "/tmp/ansible_openssl_certificate_payload_qUiY6a/ansible_openssl_certificate_payload.zip/ansible/module_utils/basic.py", line 1063, in set_context_if_different
rc = selinux.lsetfilecon(to_native(path), ':'.join(new_context))
fatal: [localhost]: FAILED! => changed=false
cur_context:
- unlabeled
gid: 0
group: root
input_was:
- kernel
invocation:
module_args:
acme_accountkey_path: null
acme_chain: false
acme_challenge_path: null
attributes: null
backup: false
content: null
csr_path: /tmp/ansible.xNVGzV
delimiter: null
directory_mode: null
entrust_api_client_cert_key_path: null
entrust_api_client_cert_path: null
entrust_api_key: null
entrust_api_specification_path: https://cloud.entrust.net/EntrustCloud/documentation/cms-api-2.1.0.yaml
entrust_api_user: null
entrust_cert_type: STANDARD_SSL
entrust_not_after: +365d
entrust_requester_email: null
entrust_requester_name: null
entrust_requester_phone: null
extended_key_usage: null
extended_key_usage_strict: false
follow: false
force: false
group: root
has_expired: false
invalid_at: null
issuer: null
issuer_strict: false
key_usage: null
key_usage_strict: false
mode: '0600'
not_after: null
not_before: null
ownca_create_authority_key_identifier: true
ownca_create_subject_key_identifier: create_if_not_provided
ownca_digest: sha256
ownca_not_after: +3650d
ownca_not_before: +0s
ownca_path: null
ownca_privatekey_passphrase: null
ownca_privatekey_path: null
ownca_version: 3
owner: postgres
path: /etc/ssl/certs/pgsql-server.pem
privatekey_passphrase: null
privatekey_path: /tmp/ansible.rftogD
provider: selfsigned
regexp: null
remote_src: null
select_crypto_backend: auto
selevel: null
selfsigned_create_subject_key_identifier: create_if_not_provided
selfsigned_digest: sha256
selfsigned_not_after: +3650d
selfsigned_not_before: +0s
selfsigned_version: 3
serole: null
setype: null
seuser: null
signature_algorithms: null
src: null
state: present
subject: null
subject_alt_name: null
subject_alt_name_strict: false
subject_strict: false
unsafe_writes: false
valid_at: null
valid_in: null
version: null
mode: '0600'
msg: 'invalid selinux context: [Errno 95] Operation not supported'
new_context:
- kernel
owner: root
path: /etc/ssl/certs/.ansible_tmpVU7ygppgsql-server.pem
secontext: unlabeled
size: 1883
state: file
uid: 0
PLAY RECAP ****************************************************************************************************************************************************************
localhost : ok=153 changed=4 unreachable=0 failed=1 skipped=92 rescued=1 ignored=0