maas proxy prevent nodes access cloud archive
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
squid-deb-proxy |
Fix Released
|
Undecided
|
Unassigned | ||
squid-deb-proxy (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Precise |
Fix Released
|
Undecided
|
Andres Rodriguez | ||
Quantal |
Fix Released
|
Undecided
|
Andres Rodriguez |
Bug Description
[Impact]
Users cannot enable the Ubuntu Cloud Archive using squid-deb-proxy without changing its configuration by hand.
[Test Case]
$ export http_proxy=http://
$ wget -O/dev/null http://
This command should succeed, but if the problem is present then it fails with 403 Forbidden.
[Development Fix]
Fixed in upstream trunk and in Raring 0.6.7.
[Stable Fix]
Merge proposal attached. This just tweaks mirror-
[Regression Potential]
Only access to archives in archive.
[Original Description]
To setup OpenStack Folsom on Ubuntu 12.04 LTS by MAAS+JuJu, it needs access ubuntu cloud archive:
deb http://
But by default, it's not ok. Error logs from juju shows apt-get update failed by 403 forbidden.
=======
2012-12-05 14:34:28,960 unit:keystone/1: hook.executor DEBUG: started
2012-12-05 14:34:29,003 unit:keystone/1: statemachine DEBUG: unitworkflowstate: transition install (None -> installed) {}
2012-12-05 14:34:29,003 unit:keystone/1: statemachine DEBUG: unitworkflowstate: execute action do_install
2012-12-05 14:34:29,050 unit:keystone/1: hook.output DEBUG: Cached relation hook contexts: []
2012-12-05 14:34:29,051 unit:keystone/1: hook.executor DEBUG: Running hook: /var/lib/
2012-12-05 14:34:29,972 unit:keystone/1: unit.hook.api DEBUG: Get unit setting: 'private-address'
2012-12-05 14:34:30,443 unit:keystone/1: unit.hook.api DEBUG: Get unit setting: 'private-address'
2012-12-05 14:34:30,523 unit:keystone/1: hook.output INFO: Executing: gpg --ignore-
2012-12-05 14:34:30,527 unit:keystone/1: hook.output ERROR: gpg:
2012-12-05 14:34:30,528 unit:keystone/1: hook.output ERROR: requesting key EC4926EA from hkp server keyserver.
2012-12-05 14:34:34,702 unit:keystone/1: hook.output ERROR: gpg:
2012-12-05 14:34:34,703 unit:keystone/1: hook.output ERROR: key EC4926EA: "Canonical Cloud Archive Signing Key <email address hidden>" not changed
2012-12-05 14:34:34,704 unit:keystone/1: hook.output ERROR: gpg:
2012-12-05 14:34:34,704 unit:keystone/1: hook.output ERROR: Total number processed: 1
2012-12-05 14:34:34,705 unit:keystone/1: hook.output ERROR: gpg:
2012-12-05 14:34:34,705 unit:keystone/1: hook.output ERROR: unchanged: 1
2012-12-05 14:34:51,882 unit:keystone/1: unit.hook.api INFO: FATAL ERROR: ERROR: command apt-get update return non-zero.
2012-12-05 14:34:51,920 unit:keystone/1: hook.output DEBUG: hook install exited, exit code Traceback (most recent call last):
Failure: juju.errors.
.
2012-12-05 14:34:51,921 unit:keystone/1: hook.executor DEBUG: Hook error: /var/lib/
2012-12-05 14:34:51,922 unit:keystone/1: statemachine DEBUG: unitworkflowstate: executing error transition error_install, Error processing '/var/lib/
2012-12-05 14:34:51,954 unit:keystone/1: statemachine DEBUG: unitworkflowstate: transition error_install (None -> install_error) {}
2012-12-05 14:34:52,001 unit:keystone/1: statemachine DEBUG: unitworkflowstate: transition complete error_install (state install_error) {}
2012-12-05 14:34:52,015 unit:keystone/1: juju.agents.unit DEBUG: Configuration Changed
2012-12-05 14:34:52,015 unit:keystone/1: juju.agents.unit DEBUG: Configuration updated on service in a non-started state
2012-12-05 14:34:52,032 unit:keystone/1: juju.agents.unit INFO: No upgrade flag set.
W: Failed to fetch http://
W: Failed to fetch http://
E: Some index files failed to download. They have been ignored, or old ones used instead.
=======
The solution is:
Change /etc/squid-
line 14:
--archive.
++.archive.
Restart squid-deb-proxy service.
Related branches
- James Page: Approve
-
Diff: 26 lines (+7/-1)2 files modifieddebian/changelog (+6/-0)
mirror-dstdomain.acl (+1/-1)
- Michael Vogt: Approve
-
Diff: 12 lines (+1/-1)1 file modifiedmirror-dstdomain.acl (+1/-1)
affects: | maas → squid-deb-proxy |
description: | updated |
Changed in squid-deb-proxy (Ubuntu Precise): | |
assignee: | nobody → Andres Rodriguez (andreserl) |
Changed in squid-deb-proxy (Ubuntu Quantal): | |
assignee: | nobody → Andres Rodriguez (andreserl) |
Changed in squid-deb-proxy (Ubuntu Quantal): | |
status: | Confirmed → Fix Released |
Fix attached