galera_client fails without apt-transport-https

[Dolph Mathews]

Running the keystone_all role by itself on a minimal Ubuntu 14.04 image resulted in the galera_client role failing on the "Install galera packages" step with:

---

TASK: [galera_client | Install galera packages] *******************************
failed: [localhost] => (item=libaio1,libc6,libdbd-mysql-perl,libgcc1,libgcrypt11,libmariadbclient-dev,libssl-dev,libstdc++6,mariadb-client) => {"attempts": 5, "failed": true, "item": "libaio1,libc6,libdbd-mysql-perl,libgcc1,libgcrypt11,libmariadbclient-dev,libssl-dev,libstdc++6,mariadb-client"}
stderr: E: There are problems and -y was used without --force-yes

stdout: Reading package lists...
Building dependency tree...
Reading state information...
The following extra packages will be installed:
  libdbi-perl libmariadbclient18 libmysqlclient18 libreadline5 libssl-doc
  libterm-readkey-perl mariadb-client-5.5 mariadb-client-core-5.5
  mariadb-common mysql-common zlib1g-dev
Suggested packages:
  libclone-perl libmldbm-perl libnet-daemon-perl libplrpc-perl
  libsql-statement-perl
The following NEW packages will be installed:
  libaio1 libdbd-mysql-perl libdbi-perl libmariadbclient-dev
  libmariadbclient18 libmysqlclient18 libreadline5 libssl-dev libssl-doc
  libterm-readkey-perl mariadb-client mariadb-client-5.5
  mariadb-client-core-5.5 mariadb-common mysql-common zlib1g-dev
0 upgraded, 16 newly installed, 0 to remove and 0 not upgraded.
Need to get 7426 kB of archives.
After this operation, 51.4 MB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  mysql-common mariadb-common libmariadbclient18 libmysqlclient18
  libmariadbclient-dev libssl-dev libssl-doc mariadb-client-core-5.5
  mariadb-client-5.5 mariadb-client

msg: Task failed as maximum retries was encountered

FATAL: all hosts have already failed -- aborting

---

Full build log: http://cdn.pasteraw.com/8jvif46zmgb9uhkfeoipa3pfyjuy9yb

apt-get installing apt-transport-https before running the role resolved the issue.

[Bjoern (bjoern-t)]

apt-transport-https is part of the lxc cached container image that's why we don't explicitly install it.
Did you install on manually created containers ?

[Jesse Pretorius (jesse-pretorius)]

We should either default to not using https - or we should ensure that the apt transport package for https required it present.

[Jesse Pretorius (jesse-pretorius)]

a solution here could be: if the mariadb repo uses the https transport, then install the package before adding the repo

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/291377

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/291398

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/291377
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-galera_client/commit/?id=b5b767a5aa876869422e4c698c70451932dac1a4
Submitter: Jenkins
Branch: master

commit b5b767a5aa876869422e4c698c70451932dac1a4
Author: Travis Truman <email address hidden>
Date: Thu Mar 10 14:27:50 2016 -0500

    Ensure apt-transport-https is present before installing from secure repos

    Most hosts will have apt-transport-https installed already, however
    this should ensure that those that do not will successfully install
    the MariaDB packages hosted on an HTTPS repository

    Change-Id: I8e2dc51a74c9ea3baf3f095f4243d598b6298f05
    Closes-Bug: #1547541

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/291398
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible-galera_server/commit/?id=d79235a49a8a617bba8b335bdefa00e76245944a
Submitter: Jenkins
Branch: master

commit d79235a49a8a617bba8b335bdefa00e76245944a
Author: Travis Truman <email address hidden>
Date: Thu Mar 10 15:04:31 2016 -0500

    Ensure apt-transport-https is present before installing from secure repos

    Most hosts will have apt-transport-https installed already, however
    this should ensure that those that do not will successfully install
    the MariaDB packages hosted on an HTTPS repository

    Change-Id: I43c1c99ea85ea6f1ec1041cb03071d2c1557d4f4
    Related-Bug: #1547541