Comments (10)
#11 is marked as wontfix because updating Augeas (or even simply backporting the lens) fixes the issue, so I wouldn't want to maintain a duplicated lens in this project.
There are updated Augeas RPMs available, and you can also ship the updated lens in your own profile module if that's easier for you.
from puppet-augeasproviders_ssh.
There should be an update to Augeas 1.4.0 in EL7.2 (preview), however it'll need a change to the lens name in the provider to work. We could do this by calling parsed_as?
and checking if the Sshd_140.lns
lens exists? (If you're happy for keeping this in the module for EL7.)
from puppet-augeasproviders_ssh.
I have the same issue but an update of augeas-libs to 1.4.0 didn't fix it
cat /etc/centos-release
CentOS Linux release 7.1.1503 (Core)
rpm -qa | grep -i augeas
ruby-augeas-0.5.0-1.el7.x86_64
augeas-libs-1.4.0-0.1.preview.el7.centos.x86_64
from puppet-augeasproviders_ssh.
Can you post the debug logs?
from puppet-augeasproviders_ssh.
Debug: Finishing transaction 30307000 Debug: Loaded state in 0.00 seconds Debug: Loaded state in 0.00 seconds Info: Applying configuration version '1444551318' Notice: /Stage[main]/Main/Sshd_config[Ciphers]/ensure: created Debug: Puppet::Type::Sshd_config::ProviderAugeas: Save failure details: /augeas/files/root/sshd_config_test/error/path = /files/root/sshd_config_test /augeas/files/root/sshd_config_test/error/lens = /usr/share/augeas/lenses/dist/sshd.aug:123.12-125.36: /augeas/files/root/sshd_config_test/error/message = Failed to match ( { /#comment/ = /[^\001-\004\t\n\r ][^\001-\004\n]*[^\001-\004\t\n\r ]|[^\001-\004\t\n\r ]/ } | { } | { /AcceptEnv/ } | { /AllowGroups/ } | { /AllowUsers/ } | { /DenyGroups/ } | { /Subsystem/ } | { /DenyUsers/ } | { /MACs/ } | { /AcceptEn((v[0-9A-Za-z]|[0-9A-Za-uw-z])[0-9A-Za-z]*|)|AcceptE([0-9A-Za-mo-z][0-9A-Za-z]*|)|Accept([0-9A-DF-Za-z][0-9A-Za-z]*|)|Accep([0-9A-Za-su-z][0-9A-Za-z]*|)|Acce([0-9A-Za-oq-z][0-9A-Za-z]*|)|Acc([0-9A-Za-df-z][0-9A-Za-z]*|)|Allow(Group((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|Grou([0-9A-Za-oq-z][0-9A-Za-z]*|)|Gro([0-9A-Za-tv-z][0-9A-Za-z]*|)|Gr([0-9A-Za-np-z][0-9A-Za-z]*|)|User((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|Use([0-9A-Za-qs-z][0-9A-Za-z]*|)|Us([0-9A-Za-df-z][0-9A-Za-z]*|)|U([0-9A-Za-rt-z][0-9A-Za-z]*|)|G([0-9A-Za-qs-z][0-9A-Za-z]*|)|[0-9A-FH-TV-Za-z][0-9A-Za-z]*|)|Allo([0-9A-Za-vx-z][0-9A-Za-z]*|)|All([0-9A-Za-np-z][0-9A-Za-z]*|)|Al([0-9A-Za-km-z][0-9A-Za-z]*|)|Ac([0-9A-Zabd-z][0-9A-Za-z]*|)|DenyGroup((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|DenyGrou([0-9A-Za-oq-z][0-9A-Za-z]*|)|DenyGro([0-9A-Za-tv-z][0-9A-Za-z]*|)|DenyGr([0-9A-Za-np-z][0-9A-Za-z]*|)|DenyUser((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|DenyUse([0-9A-Za-qs-z][0-9A-Za-z]*|)|DenyUs([0-9A-Za-df-z][0-9A-Za-z]*|)|DenyU([0-9A-Za-rt-z][0-9A-Za-z]*|)|DenyG([0-9A-Za-qs-z][0-9A-Za-z]*|)|Deny([0-9A-FH-TV-Za-z][0-9A-Za-z]*|)|Den([0-9A-Za-xz][0-9A-Za-z]*|)|De([0-9A-Za-mo-z][0-9A-Za-z]*|)|MAC((s[0-9A-Za-z]|[0-9A-Za-rt-z])[0-9A-Za-z]*|)|Matc((h[0-9A-Za-z]|[0-9A-Za-gi-z])[0-9A-Za-z]*|)|Mat([0-9A-Zabd-z][0-9A-Za-z]*|)|Ma([0-9A-Za-su-z][0-9A-Za-z]*|)|MA([0-9ABD-Za-z][0-9A-Za-z]*|)|Subsyste((m[0-9A-Za-z]|[0-9A-Za-ln-z])[0-9A-Za-z]*|)|Subsyst([0-9A-Za-df-z][0-9A-Za-z]*|)|Subsys([0-9A-Za-su-z][0-9A-Za-z]*|)|Subsy([0-9A-Za-rt-z][0-9A-Za-z]*|)|Subs([0-9A-Za-xz][0-9A-Za-z]*|)|Sub([0-9A-Za-rt-z][0-9A-Za-z]*|)|Su([0-9A-Zac-z][0-9A-Za-z]*|)|(S[0-9A-Za-tv-z]|M[0-9B-Zb-z]|D[0-9A-Za-df-z]|A[0-9A-Zabd-km-z]|[0-9BCE-LN-RT-Za-z][0-9A-Za-z])[0-9A-Za-z]*|S|M|D|A|[0-9BCE-LN-RT-Za-z]/ = /[^\001-\004\t\n ]+([\t ]+[^\001-\004\t\n ]+)*/ })* { /Match/ }* with tree { "#comment" = "this is a test" } { "Protocol" = "2" } { "Ciphers" } Error: /Stage[main]/Main/Sshd_config[Ciphers]: Could not evaluate: Failed to save Augeas tree to file. See debug logs for details. Debug: Finishing transaction 22053940 Debug: Storing state Debug: Stored state in 0.02 seconds Notice: Finished catalog run in 0.11 seconds Debug: Using settings: adding file resource 'rrddir': 'File[/var/lib/puppet/rrd]{:path=>"/var/lib/puppet/rrd", :mode=>"750", :owner=>"puppet", :group=>"puppet", :ensure=>:directory, :loglevel=>:debug, :links=>:follow, :backup=>false}' Debug: /File[/var/lib/puppet/rrd]/seluser: Found seluser default 'system_u' for /var/lib/puppet/rrd Debug: /File[/var/lib/puppet/rrd]/selrole: Found selrole default 'object_r' for /var/lib/puppet/rrd Debug: /File[/var/lib/puppet/rrd]/seltype: Found seltype default 'puppet_var_lib_t' for /var/lib/puppet/rrd Debug: /File[/var/lib/puppet/rrd]/selrange: Found selrange default 's0' for /var/lib/puppet/rrd Debug: Finishing transaction 23001580
from puppet-augeasproviders_ssh.
And what's your sshd_config
file like and your Puppet code?
from puppet-augeasproviders_ssh.
I copied the files from above to have the same example
from puppet-augeasproviders_ssh.
I have the same issue but an update of augeas-libs to 1.4.0 didn't fix it
augeas-libs-1.4.0-0.1.preview.el7.centos.x86_64
These preview RPMs (which are now released in 7.2) are not intended to change the Sshd module for compatibility with earlier EL7 versions. They instead supply a Sshd_140 lens which this module would need to load instead of Sshd.
from puppet-augeasproviders_ssh.
I don't understand what needs to be done. Update augeas-libs to 1.4.x?
from puppet-augeasproviders_ssh.
Related: #11
I also posted a work-around on the link above.
from puppet-augeasproviders_ssh.
Related Issues (20)
- Release new version to fix compatability with puppet 7.28+ and 8.3+
- `augeas` should not be the default provider for `sshkey` HOT 6
- cannot pull via the Forge HOT 2
- Change to sshd_config not restarting daemon HOT 2
- Error when generating types for environment isolation
- Release 3.0.0 missing from forge HOT 2
- When will be supported on Puppet 2019.x HOT 2
- Multiple Port entries should be supported HOT 3
- Bug in handling ports in sshd_config when reducing the number of ports that are active HOT 2
- sshd_config_subsystem does not allow for manging the same subsystem name in multiple targets HOT 2
- error when attempting to manage GSSAPIKexAlgorithms HOT 3
- sshkey provider broken with Puppet 6 HOT 6
- Sshd.lns fails to parse Match block HOT 3
- Validation issues when trying to limit root access to IP address HOT 2
- Cannot create new HostKeyAlgorithms entry with augeas > 1.9.0 HOT 10
- The ssh_config lens does not appear to account for an Include line outside of Hosts entries in ssh_config HOT 1
- Ok to upgrade augeasproviders_core? HOT 5
- Cannot use group with spaces in Match statement HOT 8
- An acceptance test needs to be added that exercises the overrides in `lib/puppet/provider/sshkey/augeas.rb`
- Sshd_config[PubkeyAcceptedKeyTypes]: Could not evaluate: Failed to save Augeas tree to file. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from puppet-augeasproviders_ssh.