Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cleaning NGINX Management Suite repository after installation prevents nms-nap-compiler manual install #59

Open
fabriziofiorucci opened this issue Aug 30, 2023 · 1 comment

Comments

@fabriziofiorucci
Copy link

Describe the bug

After installing NGINX Management Suite on Debian/Ubuntu the file /etc/apt/sources.list.d/nms.list is removed through tasks/nms/remove-certs.yaml together with the NGINX license certificate and key. This makes it impossible to find & install nms-nap-compiler-*.

To reproduce

Steps to reproduce the behavior:

  1. Deploy the Ansible NGINX Management Suite role using playbook.yml
  2. Run apt-cache search nms-nap-compiler
  3. No packages are found

Expected behavior

After installing NGINX Management Suite using this role it should be possible to apt-get install the nms-nap-compiler module without having to recreate /etc/apt/sources.list.d/nms.list

Your environment

  • Ansible NGINX Management Suite role 0.3.0
  • Version of Ansible: ansible [core 2.12.10]
  • Target deployment platform: Ubuntu 20.04

Additional context

One potential improvement might be having the ability to specifiy one or more nms-nap-compiler versions to be installed, directly in the playbook.

@jswongF5
Copy link
Collaborator

You are right that I delete the NGINX Certs but I don't think I delete the license though.. I remove the certs by default mimicking the ansible-role-nginx role. I didn't make much of an issue out of this behavior because it made sense to be on the safer side so the certs can't be stolen if a host were somehow compromised.

You can bypass this behavior though.. When you run your role, you can make sure to set the following variable nms_remove_certs to false

- name: Install NMS Playbook
  tasks:
    - name: Install NMS
      ansible.builtin.include_role:
        name: nginxinc.nginx_management_suite
      vars:
        nms_remove_certs: false

You are correct that including the ability to install nms-nap-compiler is an improvement. At the moment, this role does not do this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants