安装EPEL yum存储库时出错

Question

在构建打包程序镜像时，在使用ansible安装epel期间：

- name: install EPEL yum repository
  yum:
    name: https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
    state: present

我得到了这个错误：

fatal: [default]: FAILED! => {"changed": false, "msg": "warning: /home/centos/~user/.ansible/tmp/ansible-tmp-1602677619.35-135127023136118/epel-release-latest-7.noarch4i6J_H.rpm: Header V3 RSA/SHA256 Signature, key ID 352c64e5: NOKEY\n\n\nPublic key for epel-release-latest-7.noarch4i6J_H.rpm is not installed\n", "rc": 1, "results": ["Loaded plugins: fastestmirror\nExamining /home/centos/~user/.ansible/tmp/ansible-tmp-1602677619.35-135127023136118/epel-release-latest-7.noarch4i6J_H.rpm: epel-release-7-12.noarch\nMarking /home/centos/~user/.ansible/tmp/ansible-tmp-1602677619.35-135127023136118/epel-release-latest-7.noarch4i6J_H.rpm to be installed\nResolving Dependencies\n--> Running transaction check\n---> Package epel-release.noarch 0:7-12 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package         Arch      Version Repository                              Size\n================================================================================\nInstalling:\n epel-release    noarch    7-12    /epel-release-latest-7.noarch4i6J_H     24 k\n\nTransaction Summary\n================================================================================\nInstall  1 Package\n\nTotal size: 24 k\nInstalled size: 24 k\nDownloading packages:\n"]}
         to retry, use: --limit @/home/ansible/install.retry

 PLAY RECAP *********************************************************************
 default                    : ok=3    changed=2    unreachable=0    failed=1

有谁遇到过类似的问题吗？

Answer 1

您的系统上缺少epel GPG密钥，您应该添加

disable_gpg_check: yes到您的任务，以完全跳过gpg检查(不安全，不好的做法)，或添加实际的gpg密钥与rpm_key模块，即在运行任务之前

- name: Import a key from a url
  rpm_key:
    state: present
    key: https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-7

您可以在epel根目录中找到合适的密钥。

但是，如果您有centos 7系统，添加epel最简单的方法是安装epel-release包，而不实际从fedora项目中提取rpm。

- name: install EPEL yum repository
  yum:
    name: epel-release
    state: present