Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docker_platform: Privilege escalation fails on ubuntu-24.04 runners #14

Open
syndr opened this issue Dec 20, 2024 · 0 comments
Open

docker_platform: Privilege escalation fails on ubuntu-24.04 runners #14

syndr opened this issue Dec 20, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@syndr
Copy link
Collaborator

syndr commented Dec 20, 2024

Tasks utilizing become for privilege escalation fail for certain RHEL-based distributions, when run on a Ubuntu 24.04 based runner (tested with Github Actions).

For example:

    - name: Create ansible service account
      vars:
        molecule_user: molecule_runner
      become: true
      block:
        - name: Create ansible group
          ansible.builtin.group:
            name: "{{ molecule_user }}"
  TASK [Create ansible group] ****************************************************
  fatal: [role-system-rocky9]: FAILED! => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python3.9"}, "changed": false, "module_stderr": "sudo: PAM account management error: Authentication service cannot retrieve authentication info\nsudo: a password is required\n", "module_stdout": "", "msg": "MODULE FAILURE: No start of json char found\nSee stdout/stderr for the exact error", "rc": 1}
  fatal: [role-system-fedora41]: FAILED! => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python3.13"}, "changed": false, "module_stderr": "sudo: PAM account management error: Authentication service cannot retrieve authentication info\nsudo: a password is required\n", "module_stdout": "", "msg": "MODULE FAILURE: No start of json char found\nSee stdout/stderr for the exact error", "rc": 1}
  fatal: [role-system-fedora40]: FAILED! => {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python3.12"}, "changed": false, "module_stderr": "sudo: PAM account management error: Authentication service cannot retrieve authentication info\nsudo: a password is required\n", "module_stdout": "", "msg": "MODULE FAILURE: No start of json char found\nSee stdout/stderr for the exact error", "rc": 1}
  changed: [role-system-ubuntu2204]
  changed: [role-system-amazon2023]

Notably affected distributions at present are:

  • Rocky 9
  • Fedora 40
  • Fedora 41
@syndr syndr added the bug Something isn't working label Dec 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant