Q: How to install choria over proxy?

[nesterwsx]

I'm trying to install choria on host, but:

puppet agent -td

...

Debug: Creating new connection for https://choria.io:443
Debug: Starting connection for https://choria.io:443
Error: /Stage[main]/Choria::Repo/Apt::Source[choria-release]/Apt::Keyring[choria.asc]/File[/etc/apt/keyrings/choria.asc]: Could not evaluate: Could not retrieve file metadata for https://choria.io/RELEASE-GPG-KEY: Request to https://choria.io/RELEASE-GPG-KEY timed out connect operation after 120.114 seconds
Debug: Apt::Keyring[choria.asc]: Resource is being skipped, unscheduling all events

How can I install choria over proxy? Looks like there is no proxy param in manifest:

choria/manifests/repo.pp:
...
    apt::source{"choria-release":
      ensure        => $ensure,
      notify_update => true,
      comment       => "Choria Orchestrator Releases",
      location      => $_location,
      release       => $repo_os_name,
      repos         => $release,
      key           => {
        name   => "choria.asc",
        source => "https://choria.io/RELEASE-GPG-KEY"
      },
      architecture  => $facts["os"]["architecture"],
      before        => Package[$choria::package_name],
    }

Is there a way to specify a proxy for apt::source?

[ripienaar]

I assume that would be a setting you have to set with the apt module? I dont know really, maybe @bastelfreak might know?

[nesterwsx]

Looks like in apt we can add additional options only to apt::key, but not for apt::source :(

apt/manifests/key.pp:

#   apt::key { 'puppetlabs':
#     id      => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
#     server  => 'keyserver.ubuntu.com',
#     options => 'http-proxy="http://proxyuser:[email protected]:3128"',
#   }

[nesterwsx]

It's a strange beheavour of apt module. It doesn't expect any proxy settings in apt::keyring, and tried to download file directly.

Tmp fix:

--- environments/production/modules/apt/manifests/keyring.pp    2024-11-25 15:31:10.519436163 +0000
+++ environments/production/modules/apt/manifests/keyringext.pp 2024-12-13 09:25:00.245881878 +0000
@@ -32,7 +32,7 @@
 # @param ensure
 #   Ensure presence or absence of the resource.
 #
-define apt::keyring (
+define apt::keyringext (
   Stdlib::Absolutepath $dir = '/etc/apt/keyrings',
   String[1] $filename = $name,
   Stdlib::Filemode $mode = '0644',
@@ -51,13 +51,16 @@

   case $ensure {
     'present': {
+      exec { $file:
+        command => "wget -O ${file} ${source}",
+        path    => ['/usr/bin', '/usr/sbin'],
+        creates => "${file}",
+      }
       file { $file:
         ensure  => 'file',
         mode    => $mode,
         owner   => 'root',
         group   => 'root',
-        source  => $source,
-        content => $content,
       }
     }

In /etc/wgetrc we have our proxy settings.