For the complete documentation index, see llms.txt. This page is also available as Markdown.

Host Unable to Converge Due to Untrusted Package Error

Problem

  1. The host fails to converge due to an "UntrustedExecption: Untrusted packages" error seen in hostagent logs .

pf9_app.py INFO - Installing pf9-neutron-ovs-agent.3.7.0-1242pf9_app_db.py ERROR - Install command failed: sudo /opt/pf9/hostagent/bin/pf9-apt install /var/cache/pf9apps/pf9-neutron-ovs-agent/3.7.0-1242/pf9-neutron-ovs-agent-3.7.0-1242.x86_64.deb. Return code: 1, stdout: , stderr: Failed to install package: /var/cache/pf9apps/pf9-neutron-ovs-agent/3.7.0-1242/pf9-neutron-ovs-agent-3.7.0-1242.x86_64.debTraceback (most recent call last):File "/opt/pf9/hostagent/bin/pf9-apt", line 90, in [module]_install_package(package, cache)File "/opt/pf9/hostagent/bin/pf9-apt", line 68, in _install_packagecache.commit()File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 605, in commitallow_unauthenticated)File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 413, in _fetch_archivesreturn self._run_fetcher(fetcher, allow_unauthenticated)File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 378, in _run_fetcher"<br>".join(i.desc_uri for i in untrusted))UntrustedException: Untrusted packages:http://platform9-neutron.s3-website-us-west-1.amazonaws.com/ubuntu/openvswitch-common_2.5.8-1_amd64.debhttp://platform9-neutron.s3-website-us-west-1.amazonaws.com/ubuntu/openvswitch-switch_2.5.8-1_amd64.deb

Environment

  • Platform9 Managed OpenStack - v3.6.0 and Higher

  • Ubuntu

Cause

Third-party packages are leveraged while installing pf9 roles, and thus need to be explicitly mentioned as trusted for the roles to be installed successfully.

Resolution

  1. Locate the file path.

/etc/apt/sources.list.d/platform9_neutron_s3_website_us_west_1_amazonaws_com.list
  1. Append [trusted=yes] to the line representing the ubuntu repository. For example:

deb [trusted=yes] http://platform9-neutron.s3-website-us-west-1.amazonaws.com ubuntu/
  1. Update the package lists.

  1. Restart pf9-hostagent service.

Last updated