search
Ctrlk

Host Unable to Converge Due to Untrusted Package Error

hashtag
Problem

  1. The host fails to converge due to an "UntrustedExecption: Untrusted packages" error seen in hostagent logs .

pf9_app.py INFO - Installing pf9-neutron-ovs-agent.3.7.0-1242pf9_app_db.py ERROR - Install command failed: sudo /opt/pf9/hostagent/bin/pf9-apt install /var/cache/pf9apps/pf9-neutron-ovs-agent/3.7.0-1242/pf9-neutron-ovs-agent-3.7.0-1242.x86_64.deb. Return code: 1, stdout: , stderr: Failed to install package: /var/cache/pf9apps/pf9-neutron-ovs-agent/3.7.0-1242/pf9-neutron-ovs-agent-3.7.0-1242.x86_64.debTraceback (most recent call last):File "/opt/pf9/hostagent/bin/pf9-apt", line 90, in [module]_install_package(package, cache)File "/opt/pf9/hostagent/bin/pf9-apt", line 68, in _install_packagecache.commit()File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 605, in commitallow_unauthenticated)File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 413, in _fetch_archivesreturn self._run_fetcher(fetcher, allow_unauthenticated)File "/usr/lib/python2.7/dist-packages/apt/cache.py", line 378, in _run_fetcher"<br>".join(i.desc_uri for i in untrusted))UntrustedException: Untrusted packages:http://platform9-neutron.s3-website-us-west-1.amazonaws.com/ubuntu/openvswitch-common_2.5.8-1_amd64.debhttp://platform9-neutron.s3-website-us-west-1.amazonaws.com/ubuntu/openvswitch-switch_2.5.8-1_amd64.deb

hashtag
Environment

  • Platform9 Managed OpenStack - v3.6.0 and Higher

  • Ubuntu

hashtag
Cause

Third-party packages are leveraged while installing pf9 roles, and thus need to be explicitly mentioned as trusted for the roles to be installed successfully.

hashtag
Resolution

  1. Locate the file path.

/etc/apt/sources.list.d/platform9_neutron_s3_website_us_west_1_amazonaws_com.list

  1. Append [trusted=yes] to the line representing the ubuntu repository. For example:

deb [trusted=yes] http://platform9-neutron.s3-website-us-west-1.amazonaws.com ubuntu/

  1. Update the package lists.

  1. Restart pf9-hostagent service.

PreviousOpenStack CLI Not Working With Okta MFANextVolume Shows Attached After Detach Operation Fails With Error " Unable to detach from guest transient domain

Last updated