ivanvanderbyl/babushka-deps — Issue #1: chef user freezes
Author: ivanoats
Created: 2011-10-17 20:35:08+00:00
State: open

babuska is freezing for me on the public key sep inside passwordless key logins in the chef user dep. I'm not sure why, any tips?

```
root@chefserver:~# babushka ivanvanderbyl:'chef user'
Updating git://github.com/ivanvanderbyl/babushka-deps.git... Already up-to-date at 0fe1c45, done.
ivanvanderbyl:chef user {
ivanvanderbyl:system {
ivanvanderbyl:hostname {
hostname [c4chefserver.dyndns.org]?
} ✓ ivanvanderbyl:hostname
ivanvanderbyl:tmp cleaning grace period {
} ✓ ivanvanderbyl:tmp cleaning grace period
ivanvanderbyl:core software {
ivanvanderbyl:vim.managed {
apt {
main.apt_source {
} ✓ main.apt_source
universe.apt_source {
} ✓ universe.apt_source
'apt-get' runs from /usr/bin.
} ✓ apt
✓ system has vim deb
'vim' runs from /usr/bin.
} ✓ ivanvanderbyl:vim.managed
ivanvanderbyl:curl.managed {
✓ apt (cached)
✓ system has curl deb
'curl' runs from /usr/bin.
} ✓ ivanvanderbyl:curl.managed
ivanvanderbyl:htop.managed {
✓ apt (cached)
✓ system has htop deb
'htop' runs from /usr/bin.
} ✓ ivanvanderbyl:htop.managed
ivanvanderbyl:jnettop.managed {
✓ apt (cached)
✓ system has jnettop deb
'jnettop' runs from /usr/sbin.
} ✓ ivanvanderbyl:jnettop.managed
ivanvanderbyl:screen.managed {
✓ apt (cached)
✓ system has screen deb
'screen' runs from /usr/bin.
} ✓ ivanvanderbyl:screen.managed
ivanvanderbyl:nmap.managed {
✓ apt (cached)
✓ system has nmap deb
'nmap' runs from /usr/bin.
} ✓ ivanvanderbyl:nmap.managed
ivanvanderbyl:tree.managed {
✓ apt (cached)
✓ system has tree deb
'tree' runs from /usr/bin.
} ✓ ivanvanderbyl:tree.managed
} ✓ ivanvanderbyl:core software
} ✓ ivanvanderbyl:system
admins can sudo {
admin group {
} ✓ admin group
sudo {
sudo.managed {
✓ apt (cached)
✓ system has sudo deb
'sudo' runs from /usr/bin.
} ✓ sudo.managed
} ✓ sudo
} ✓ admins can sudo
ivanvanderbyl:user exists with password {
ivanvanderbyl:user exists {
username [deploy]?
} ✓ ivanvanderbyl:user exists
} ✓ ivanvanderbyl:user exists with password
ivanvanderbyl:can sudo without password {
✓ sudo (cached)
} ✓ ivanvanderbyl:can sudo without password
ivanvanderbyl:passwordless ssh logins {
ivanvanderbyl:public key {
meet {
```

log:

```

[0;90;29mivanvanderbyl:chef user {
[0m (defining chef user against Babushka::Dep::BaseTemplate)
[0;90;29m$ uname -s[0m
Linux
[0;90;29m$ lsb_release -a[0m
Distributor ID:	Ubuntu
Description:	Ubuntu 11.10
Release:	11.10
Codename:	oneiric
[0;29;1mNo LSB modules are available.[0m
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:system {
[0m (defining system against Babushka::Dep::BaseTemplate)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:hostname {
[0m (defining hostname against Babushka::Dep::BaseTemplate)
setup not defined.
[0;90;29m$ hostname -f[0m
c4chefserver.dyndns.org
hostname [c4chefserver.dyndns.org] [0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:hostname[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:tmp cleaning grace period {
[0m (defining tmp cleaning grace period against Babushka::Dep::BaseTemplate)
setup not defined.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:tmp cleaning grace period[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:core software {
[0m (defining core software against Babushka::Dep::BaseTemplate)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:vim.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
Defining core:apt_source template
Defining core:fhs template
Defining core:babushka template
Defining core:homebrew template
Defining core:tmbundle template
Defining core:installer template
Defining core:managed template
Defining core:gem template
Defining core:pip template
Defining core:npm template
Defining core:src template
Defining core:app template
Defining core:external template
Defining core:ppa template
Loaded 43 deps from /usr/local/babushka/deps.
(defining vim.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mapt {
[0m (defining apt against external)
setup not defined.
[0;90;29mmain.apt_source {
[0m (defining main.apt_source against apt_source)
setup not defined.
[0;90;29m}[0m [0;32;29m✓ main.apt_source[0m
[0;90;29muniverse.apt_source {
[0m (defining universe.apt_source against apt_source)
setup not defined.
[0;90;29m}[0m [0;32;29m✓ universe.apt_source[0m
'apt-get' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ apt[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s vim[0m
Package: vim
Status: install ok installed
Priority: optional
Section: editors
Installed-Size: 2012
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 2:7.3.154+hg~74503f6ee649-2ubuntu3
Provides: editor
Depends: vim-common (= 2:7.3.154+hg~74503f6ee649-2ubuntu3), vim-runtime (= 2:7.3.154+hg~74503f6ee649-2ubuntu3), libacl1 (>= 2.2.51-3), libc6 (>= 2.11), libgpm2 (>= 1.20.4), libpython2.7 (>= 2.7), libselinux1 (>= 1.32), libtinfo5 (>= 5.6+20070908)
Suggests: ctags, vim-doc, vim-scripts
Description: Vi IMproved - enhanced vi editor
Vim is an almost compatible version of the UNIX editor Vi.
.
Many new features have been added: multi level undo, syntax
highlighting, command line history, on-line help, filename
completion, block operations, folding, Unicode support, etc.
.
This package contains a version of vim compiled with a rather
standard set of features. This package does not provide a GUI
version of Vim. See the other vim-* packages if you need more
(or less).
Homepage: http://www.vim.org/
Original-Maintainer: Debian Vim Maintainers
[0;90;29m✓[0m system has vim deb
'vim' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:vim.managed[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:curl.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
(defining curl.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s curl[0m
Package: curl
Status: install ok installed
Priority: optional
Section: web
Installed-Size: 384
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 7.21.6-3ubuntu3
Replaces: curl-ssl
Provides: curl-ssl
Depends: libc6 (>= 2.7), libcurl3 (>= 7.16.2-1), zlib1g (>= 1:1.1.4)
Description: Get a file from an HTTP, HTTPS or FTP server
curl is a client to get files from servers using any of the supported
protocols. The command is designed to work without user interaction
or any kind of interactivity.
.
curl offers a busload of useful tricks like proxy support, user
authentication, ftp upload, HTTP post, file transfer resume and more.
Homepage: http://curl.haxx.se
Original-Maintainer: Ramakrishnan Muthukrishnan
[0;90;29m✓[0m system has curl deb
'curl' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:curl.managed[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:htop.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
(defining htop.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s htop[0m
Package: htop
Status: install ok installed
Priority: optional
Section: utils
Installed-Size: 216
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 0.9-4
Depends: libc6 (>= 2.7), libncurses5 (>= 5.5-5~), libtinfo5 (>= 5.6+20070908)
Suggests: strace, ltrace
Description: interactive processes viewer
Htop is an ncursed-based process viewer similar to top, but it
allows one to scroll the list vertically and horizontally to see
all processes and their full command lines.
.
Tasks related to processes (killing, renicing) can be done without
entering their PIDs.
Original-Maintainer: Eugene V. Lyubimkin
Homepage: http://htop.sourceforge.net
[0;90;29m✓[0m system has htop deb
'htop' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:htop.managed[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:jnettop.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
(defining jnettop.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s jnettop[0m
Package: jnettop
Status: install ok installed
Priority: extra
Section: net
Installed-Size: 168
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 0.13.0-1ubuntu1
Depends: libc6 (>= 2.4), libglib2.0-0 (>= 2.24.0), libncurses5 (>= 5.5-5~), libpcap0.8 (>= 0.9.8), libtinfo5 (>= 5.6+20070908)
Description: View hosts/ports taking up the most network traffic
jNettop captures traffic coming across the host it is running on and displays
streams sorted by bandwidth they use. Result is a nice listing of
communication on network by host and port, how many bytes went
through this transport and the bandwidth it is consuming.
Original-Maintainer: Ari Pollak
[0;90;29m✓[0m system has jnettop deb
'jnettop' runs from /usr/sbin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:jnettop.managed[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:screen.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
(defining screen.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s screen[0m
Package: screen
Status: install ok installed
Priority: optional
Section: misc
Installed-Size: 1052
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 4.0.3-14ubuntu8
Depends: libc6 (>= 2.4), libncursesw5 (>= 5.6+20070908), libpam0g (>= 0.99.7.1), dpkg (>= 1.15.4) | install-info, upstart-job
Suggests: byobu
Conffiles:
/etc/screenrc 12c245238eb8b653625bba27dc81df6a
/etc/init/screen-cleanup.conf 441f4a1c5b41d7f23427be5aa6ccbbcc
Description: terminal multiplexor with VT100/ANSI terminal emulation
screen is a terminal multiplexor that runs several separate "screens" on a
single physical character-based terminal. Each virtual terminal emulates a
DEC VT100 plus several ANSI X3.64 and ISO 2022 functions. Screen sessions
can be detached and resumed later on a different terminal.
.
Screen also supports a whole slew of other features. Some of these are:
configurable input and output translation, serial port support, configurable
logging, multi-user support, and utf8 charset support.
Homepage: http://savannah.gnu.org/projects/screen
Original-Maintainer: Jan Christoph Nordholz
[0;90;29m✓[0m system has screen deb
'screen' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:screen.managed[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:nmap.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
(defining nmap.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s nmap[0m
Package: nmap
Status: install ok installed
Priority: extra
Section: net
Installed-Size: 7100
Maintainer: LaMont Jones
Architecture: amd64
Version: 5.21-1.1
Replaces: ndiff
Provides: ndiff
Depends: libc6 (>= 2.7), libgcc1 (>= 1:4.1.1), liblua5.1-0, libpcap0.8 (>= 0.9.8), libpcre3 (>= 8.10), libssl1.0.0 (>= 1.0.0), libstdc++6 (>= 4.6)
Conflicts: ndiff
Description: The Network Mapper
Nmap is a utility for network exploration or security auditing. It
supports ping scanning (determine which hosts are up), many port
scanning techniques, version detection (determine service protocols
and application versions listening behind ports), and TCP/IP
fingerprinting (remote host OS or device identification). Nmap also
offers flexible target and port specification, decoy/stealth scanning,
sunRPC scanning, and more. Most Unix and Windows platforms are
supported in both GUI and commandline modes. Several popular handheld
devices are also supported, including the Sharp Zaurus and the iPAQ.
Python-Version: all
[0;90;29m✓[0m system has nmap deb
'nmap' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:nmap.managed[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:tree.managed {
[0m Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
(defining tree.managed against managed)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s tree[0m
Package: tree
Status: install ok installed
Priority: optional
Section: utils
Installed-Size: 100
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 1.5.3-2
Depends: libc6 (>= 2.4)
Description: displays directory tree, in color
Displays an indented directory tree, using the same color assignments as
ls, via the LS_COLORS environment variable.
Original-Maintainer: Florian Ernst
Homepage: http://mama.indstate.edu/users/ice/tree/
[0;90;29m✓[0m system has tree deb
'tree' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:tree.managed[0m
met? not defined.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:core software[0m
met? not defined.
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:system[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29madmins can sudo {
[0m (defining admins can sudo against Babushka::Dep::BaseTemplate)
setup not defined.
[0;90;29madmin group {
[0m (defining admin group against Babushka::Dep::BaseTemplate)
setup not defined.
[0;90;29m}[0m [0;32;29m✓ admin group[0m
[0;90;29msudo {
[0m (defining sudo against Babushka::Dep::BaseTemplate)
setup not defined.
[0;90;29msudo.managed {
[0m (defining sudo.managed against managed)
setup not defined.
[0;32;29m✓ apt (cached)[0m
[0;90;29m$ fuser -v /var/lib/dpkg/lock[0m
[0;90;29m$ dpkg -s sudo[0m
Package: sudo
Status: install ok installed
Priority: optional
Section: admin
Installed-Size: 804
Maintainer: Ubuntu Developers
Architecture: amd64
Version: 1.7.4p6-1ubuntu2
Replaces: sudo-ldap
Depends: libc6 (>= 2.11), libpam0g (>= 0.99.7.1), libpam-modules
Conflicts: sudo-ldap
Conffiles:
/etc/pam.d/sudo 402488da83015090763d681fffae6340
/etc/sudoers.d/README 0b76d590c3d5d1966bdfa7ee808893c4
/etc/sudoers bb3dd9531a53d7dc6fe26d2e019d7456
/etc/init.d/sudo 8dd3c1c4fb7582466676fd00d31cdc9b
Description: Provide limited super user privileges to specific users
Sudo is a program designed to allow a sysadmin to give limited root
privileges to users and log root activity. The basic philosophy is to give
as few privileges as possible but still allow people to get their work done.
.
This version is built with minimal shared library dependencies, use the
sudo-ldap package instead if you need LDAP support for sudoers.
Original-Maintainer: Bdale Garbee
[0;90;29m✓[0m system has sudo deb
'sudo' runs from /usr/bin.
[0;90;29m}[0m [0;32;29m✓ sudo.managed[0m
met? not defined.
[0;90;29m}[0m [0;32;29m✓ sudo[0m
[0;90;29m$ cat /etc/sudoers[0m
#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults	env_reset

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root	ALL=(ALL:ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

# Allow members of group sudo to execute any command
%sudo	ALL=(ALL:ALL) ALL

#includedir /etc/sudoers.d

# This line added by babushka-0.10.5 at Fri Oct 14 21:35:33 -0700 2011
deploy ALL=(ALL) NOPASSWD:ALL
[0;90;29m}[0m [0;32;29m✓ admins can sudo[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:user exists with password {
[0m (defining user exists with password against Babushka::Dep::BaseTemplate)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:user exists {
[0m (defining user exists against Babushka::Dep::BaseTemplate)
username [deploy] [0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:user exists[0m
[0;90;29m$ sudo cat /etc/shadow[0m
root:$6$TFWjW9oi$NNAH5SL3srYO2LuN/fbEQgyvKG1jp9P5vdteDAccxHfIlLbWGmYq8EzRaevP0OdQVLF303gItS/2niSc1dhJC0:15262:0:99999:7:::
daemon:*:15262:0:99999:7:::
bin:*:15262:0:99999:7:::
sys:*:15262:0:99999:7:::
sync:*:15262:0:99999:7:::
games:*:15262:0:99999:7:::
man:*:15262:0:99999:7:::
lp:*:15262:0:99999:7:::
mail:*:15262:0:99999:7:::
news:*:15262:0:99999:7:::
uucp:*:15262:0:99999:7:::
proxy:*:15262:0:99999:7:::
www-data:*:15262:0:99999:7:::
backup:*:15262:0:99999:7:::
list:*:15262:0:99999:7:::
irc:*:15262:0:99999:7:::
gnats:*:15262:0:99999:7:::
nobody:*:15262:0:99999:7:::
libuuid:!:15262:0:99999:7:::
syslog:*:15262:0:99999:7:::
messagebus:*:15262:0:99999:7:::
ivan:$1$VLSe0kix$telIN.bdv6T3of/lJhaFn.:15262:0:99999:7:::
sshd:*:15262:0:99999:7:::
deploy:$6$oSe2n/DC$AXLbeUFsmcia.seGLSpBl6WTOATU8vY6uU4Bhjmpd0jgfNxjRZkzwsP.3NMuS9COmqdvfGlDyJhXu/y.gzVmY1:15262:0:99999:7:::
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:user exists with password[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:can sudo without password {
[0m (defining can sudo without password against Babushka::Dep::BaseTemplate)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;32;29m✓ sudo (cached)[0m
[0;90;29m$ cat /etc/sudoers[0m
#
# This file MUST be edited with the 'visudo' command as root.
#
# Please consider adding local content in /etc/sudoers.d/ instead of
# directly modifying this file.
#
# See the man page for details on how to write a sudoers file.
#
Defaults	env_reset

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root	ALL=(ALL:ALL) ALL

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL

# Allow members of group sudo to execute any command
%sudo	ALL=(ALL:ALL) ALL

#includedir /etc/sudoers.d

# This line added by babushka-0.10.5 at Fri Oct 14 21:35:33 -0700 2011
deploy ALL=(ALL) NOPASSWD:ALL
[0;90;29m}[0m [0;32;29m✓ ivanvanderbyl:can sudo without password[0m
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:passwordless ssh logins {
[0m (defining passwordless ssh logins against Babushka::Dep::BaseTemplate)
setup not defined.
Already pulled ivanvanderbyl (git://github.com/ivanvanderbyl/babushka-deps.git) this session.
[0;90;29mivanvanderbyl:public key {
[0m (defining public key against Babushka::Dep::BaseTemplate)
setup not defined.
prepare not defined.
[0;90;29mmeet {
[0m before not defined.
[0;90;29m$ sudo -u deploy ssh-keygen -t rsa -f /home/deploy/.ssh/id_rsa -N ''[0m
Generating public/private rsa key pair.
/home/deploy/.ssh/id_rsa already exists.