deploy fails GPG error

[Denis Klepikov]

[root@fuel ~]# cat /etc/fuel/version.yaml
VERSION:
  feature_groups:
    - mirantis
  production: "docker"
  release: "7.0"
  openstack_version: "2015.1.0-7.0"
  api: "1.0"
  build_number: "301"
  build_id: "301"
  nailgun_sha: "4162b0c15adb425b37608c787944d1983f543aa8"
  python-fuelclient_sha: "486bde57cda1badb68f915f66c61b544108606f3"
  fuel-agent_sha: "50e90af6e3d560e9085ff71d2950cfbcca91af67"
  fuel-nailgun-agent_sha: "d7027952870a35db8dc52f185bb1158cdd3d1ebd"
  astute_sha: "6c5b73f93e24cc781c809db9159927655ced5012"
  fuel-library_sha: "5d50055aeca1dd0dc53b43825dc4c8f7780be9dd"
  fuel-ostf_sha: "2cd967dccd66cfc3a0abd6af9f31e5b4d150a11c"
  fuelmain_sha: "a65d453215edb0284a2e4761be7a156bb5627677"

5 nodes,

3 controller+mongo
2 compute+ceph

sahara, mongo, murano
openstack debug, nova quotas
neurton DVR
Assign public network to all nodes
cinder and glance into ceph
HTTPS for Horizon
TLS for OpenStack public endpoints

Deploy fails

---
priority: 2500
type: shell
uids:
- '1'
- '3'
- '2'
- '5'
- '4'
parameters:
  retries: 3
  cmd: apt-get update
  cwd: "/"
  timeout: 1800
  interval: 1
.
Inspect Astute logs for the details

whne I try to manually run

[root@fuel ~]# ssh node-1

root@node-1:~# apt-get update
...
Fetched 2,457 B in 7s (342 B/s)
Reading package lists... Done
W: GPG error: http://mirror.fuel-infra.org mos7.0-holdback Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CA2B20483E301371
W: GPG error: http://mirror.fuel-infra.org mos7.0-security Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CA2B20483E301371
W: GPG error: http://mirror.fuel-infra.org mos7.0-updates Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CA2B20483E301371

root@node-1:~# ping ya.ru
PING ya.ru (213.180.193.3) 56(84) bytes of data.
64 bytes from www.yandex.ru (213.180.193.3): icmp_seq=1 ttl=61 time=30.0 ms

[Dmitry Burmistrov (dburmistrov)]

The GPG key should be imported from http://mirror.fuel-infra.org/mos-repos/ubuntu/7.0/archive-mos7.0.key before enabling signature verification.

[Nastya Urlapova (aurlapova)]

Denis, please attach diagnostic snapshot.

[Denis Klepikov (dklepikov)]

diagnostic snapshot can be found here:
https://drive.google.com/a/mirantis.com/file/d/0B9BrZVVbs7L0Q0NNZmpySXhyQ28/view?usp=sharing

I do not enable signature verification. I just deploy 7.0 iso 301 using vbox scripts and try to deploy a simple cluster.
All settings were done via Fuel Web UI

[Dennis Dmitriev (ddmitriev)]

I confirm that these warnings are appeared after 'apt-get update' : http://paste.openstack.org/show/474678/
, and they are resolved by importing the proper key: http://paste.openstack.org/show/474679/

But these warnings could not affect the deploy, packages are installed fine from the repositories.

I will take a look at diagnostic snapshot.

[Dennis Dmitriev (ddmitriev)]

There is the reason of the issue (from the diagnostic snapshot):

node-3 2015-09-28T20:08:04.383966 notice: (Scope(Class[main])) MODULAR: connectivity_tests.pp
node-3 2015-09-28T20:08:25.774718 err: ERROR: Unable to fetch url 'http://archive.ubuntu.com/ubuntu/', error 'Network is unreachable - connect(2)'. Please verify node connectivity to this URL, or remove it from the settings page if it is invalid. on node node-3.domain.tld

connectivity_tests.pp passed on node-1 and node-2, but failed on node-3.

Please verify network connectivity from node-3.

[Denis Klepikov (dklepikov)]

node-3

# ifdown br-ex
# ifup br-ex

br-ex was hanged during deployment

you can mark this bug as invalid

[Dmitry Klenov (dklenov)]

Moving to invalid as per Denis Klepikov's comment.