Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't auto-accept newly added repo's package signing key in SUSE. #42039

Closed
dumol opened this issue Jun 30, 2017 · 25 comments · Fixed by #62209
Closed

Can't auto-accept newly added repo's package signing key in SUSE. #42039

dumol opened this issue Jun 30, 2017 · 25 comments · Fixed by #62209
Labels
Bug broken, incorrect, or confusing behavior severity-medium 3rd level, incorrect or bad functionality, confusing and lacks a work around State-Module
Milestone

Comments

@dumol
Copy link
Contributor

dumol commented Jun 30, 2017

Description of Issue/Question

Adding a new GPG-signed repo in SUSE Linux Enterprise Server 11 SP3 fails because there's no option to auto-accept a new key.

Setup

repo-zabbix:
  pkgrepo.managed:
    - name: zabbix
    - humanname: zabbix
    - baseurl: https://download.opensuse.org/repositories/server:/monitoring/SLE_11_SP3/
    - gpgkey: https://download.opensuse.org/repositories/server:/monitoring/SLE_11_SP3/repodata/repomd.xml.key
    - enabled: 1
    - gpgcheck: 1

Steps to Reproduce Issue

Applied the above state to a SLES 11 SP3 minion and got:

2017-06-30 14:09:50,800 [salt.utils.lazy                                             ][DEBUG   ][31528] LazyLoaded pkg.mod_repo
2017-06-30 14:09:50,801 [salt.utils.lazy                                             ][DEBUG   ][31528] LazyLoaded pkgrepo.managed
2017-06-30 14:09:50,801 [salt.state                                                  ][INFO    ][31528] Running state [zabbix]at time 14:09:50.801262
2017-06-30 14:09:50,802 [salt.state                                                  ][INFO    ][31528] Executing state pkgrepo.managed for zabbix
2017-06-30 14:09:50,968 [salt.utils.lazy                                             ][DEBUG   ][31528] Could not LazyLoad pkg.expand_repo_def
2017-06-30 14:09:50,971 [salt.loaded.int.module.zypper                               ][DEBUG   ][31528] Calling Zypper: zypper--non-interactive --xmlout mr --gpgcheck zabbix
2017-06-30 14:09:50,971 [salt.loaded.int.module.cmdmod                               ][INFO    ][31528] Executing command ['zypper', '--non-interactive', '--xmlout', 'mr', '--gpgcheck', 'zabbix'] in directory '/root'
2017-06-30 14:09:51,022 [salt.state                                                  ][INFO    ][31528] Configured package repo 'zabbix'
2017-06-30 14:09:51,023 [salt.state                                                  ][INFO    ][31528] Completed state [zabbix] at time 14:09:51.022822 duration_in_ms=221.56
2017-06-30 14:09:51,025 [salt.utils.lazy                                             ][DEBUG   ][31528] LazyLoaded pkg.installed
2017-06-30 14:09:51,030 [salt.utils.lazy                                             ][DEBUG   ][31528] Could not LazyLoad pkg.ex_mod_init
2017-06-30 14:09:51,031 [salt.state                                                  ][INFO    ][31528] Running state [zabbix-agent-package] at time 14:09:51.031073
2017-06-30 14:09:51,032 [salt.state                                                  ][INFO    ][31528] Executing state pkg.installed for zabbix-agent-package
2017-06-30 14:09:51,032 [salt.loaded.int.module.cmdmod                               ][INFO    ][31528] Executing command ['rpm', '-qa', '--queryformat', '%{NAME}_|-%{VERSION}_|-%{RELEASE}_|-%|EPOCH?{%{EPOCH}}:{}|\\n'] in directory '/root'
2017-06-30 14:09:51,731 [salt.utils.lazy                                             ][DEBUG   ][31528] Could not LazyLoad pkg.normalize_name
2017-06-30 14:09:51,736 [salt.utils.lazy                                             ][DEBUG   ][31528] Could not LazyLoad pkg.check_db
2017-06-30 14:09:51,737 [salt.loaded.int.module.zypper                               ][DEBUG   ][31528] Calling Zypper: zypper--non-interactive refresh --force
2017-06-30 14:09:51,738 [salt.loaded.int.module.cmdmod                               ][INFO    ][31528] Executing command ['zypper', '--non-interactive', 'refresh', '--force'] in directory '/root'
2017-06-30 14:09:54,561 [salt.minion                                            ][INFO    ][20757] User salt Executing commandsaltutil.find_job with jid 20170630140954550368
2017-06-30 14:09:54,562 [salt.minion                                            ][DEBUG   ][20757] Command details {'tgt_type': 'list', 'jid': '20170630140954550368', 'tgt': ['bs1f-lnx-sles11sm-x64-58'], 'ret': '', 'user': 'salt', 'arg': ['20170630140949451128'], 'fun': 'saltutil.find_job'}
2017-06-30 14:09:54,579 [salt.minion                                            ][INFO    ][31564] Starting a new job with PID31564
2017-06-30 14:09:54,593 [salt.utils.lazy                                        ][DEBUG   ][31564] LazyLoaded saltutil.find_job
2017-06-30 14:09:54,596 [salt.utils.lazy                                        ][DEBUG   ][31564] LazyLoaded direct_call.get
2017-06-30 14:09:54,599 [salt.minion                                            ][DEBUG   ][31564] Minion return retry timer set to 5 seconds (randomized)
2017-06-30 14:09:54,599 [salt.minion                                            ][INFO    ][31564] Returning information for job: 20170630140954550368
2017-06-30 14:09:54,600 [salt.transport.zeromq                                  ][DEBUG   ][31564] Initializing new AsyncZeroMQReqChannel for ('/etc/salt/pki/minion', 'bs1f-lnx-sles11sm-x64-58', 'tcp://172.20.0.24:4506', 'aes')
2017-06-30 14:09:54,600 [salt.crypt                                             ][DEBUG   ][31564] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'bs1f-lnx-sles11sm-x64-58', 'tcp://172.20.0.24:4506')
2017-06-30 14:10:04,776 [salt.minion                                            ][INFO    ][20757] User salt Executing commandsaltutil.find_job with jid 20170630141004769736
2017-06-30 14:10:04,776 [salt.minion                                            ][DEBUG   ][20757] Command details {'tgt_type': 'list', 'jid': '20170630141004769736', 'tgt': ['bs1f-lnx-sles11sm-x64-58'], 'ret': '', 'user': 'salt', 'arg': ['20170630140949451128'], 'fun': 'saltutil.find_job'}
2017-06-30 14:10:04,790 [salt.minion                                            ][INFO    ][31745] Starting a new job with PID31745
2017-06-30 14:10:04,804 [salt.utils.lazy                                        ][DEBUG   ][31745] LazyLoaded saltutil.find_job
2017-06-30 14:10:04,806 [salt.utils.lazy                                        ][DEBUG   ][31745] LazyLoaded direct_call.get
2017-06-30 14:10:04,808 [salt.minion                                            ][DEBUG   ][31745] Minion return retry timer set to 7 seconds (randomized)
2017-06-30 14:10:04,809 [salt.minion                                            ][INFO    ][31745] Returning information for job: 20170630141004769736
2017-06-30 14:10:04,809 [salt.transport.zeromq                                  ][DEBUG   ][31745] Initializing new AsyncZeroMQReqChannel for ('/etc/salt/pki/minion', 'bs1f-lnx-sles11sm-x64-58', 'tcp://172.20.0.24:4506', 'aes')
2017-06-30 14:10:04,810 [salt.crypt                                             ][DEBUG   ][31745] Initializing new AsyncAuth for ('/etc/salt/pki/minion', 'bs1f-lnx-sles11sm-x64-58', 'tcp://172.20.0.24:4506')
2017-06-30 14:10:05,299 [salt.loaded.int.module.cmdmod                               ][ERROR   ][31528] Command '['zypper', '--non-interactive', 'refresh', '--force']' failed with return code: 4
2017-06-30 14:10:05,300 [salt.loaded.int.module.cmdmod                               ][ERROR   ][31528] stdout: Forcing raw metadata refresh
Retrieving repository 'SUSE-Linux-Enterprise-Software-Development-Kit-11-SP3 11.3.3-1.69' metadata [.done]
Forcing building of repository cache
Building repository 'SUSE-Linux-Enterprise-Software-Development-Kit-11-SP3 11.3.3-1.69' cache [....done]
Forcing raw metadata refresh
Retrieving repository 'SLE11-Security-Module' metadata [....done]
Forcing building of repository cache
Building repository 'SLE11-Security-Module' cache [....done]
Forcing raw metadata refresh
Retrieving repository 'SLES11-SP3-Pool' metadata [....done]
Forcing building of repository cache
Building repository 'SLES11-SP3-Pool' cache [....done]
Forcing raw metadata refresh
Retrieving repository 'SLES11-SP3-Updates' metadata [....done]
Forcing building of repository cache
Building repository 'SLES11-SP3-Updates' cache [....done]
Forcing raw metadata refresh
Retrieving repository 'salt' metadata [..done]
Forcing building of repository cache
Building repository 'salt' cache [....done]
Forcing raw metadata refresh
Retrieving repository 'zabbix' metadata [.

New repository or package signing key received:
Key ID: A5C23697EE454F98
Key Name: server:monitoring OBS Project <server:monitoring@build.opensuse.org>
Key Fingerprint: 8F3BC8EFF549CDCDA918D981A5C23697EE454F98
Key Created: Mon Jun 13 19:49:28 2016
Key Expires: Wed Aug 22 19:49:28 2018
Repository: zabbix

Do you want to reject the key, trust temporarily, or trust always? [r/t/a/? shows all options] (r): r
error]
2017-06-30 14:10:05,300 [salt.loaded.int.module.cmdmod                               ][ERROR   ][31528] stderr: Repository 'zabbix' is invalid.
[|] Valid metadata not found at specified URL(s)
Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'zabbix' because of the above error.
Some of the repositories have not been refreshed because of an error.
2017-06-30 14:10:05,300 [salt.loaded.int.module.cmdmod                               ][ERROR   ][31528] retcode: 4
2017-06-30 14:10:05,301 [salt.state                                                  ][ERROR   ][31528] An error was encountered while installing package(s): Zypper command failure: Repository 'zabbix' is invalid.
[|] Valid metadata not found at specified URL(s)
Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'zabbix' because of the above error.
Some of the repositories have not been refreshed because of an error.
2017-06-30 14:10:05,301 [salt.state                                                  ][INFO    ][31528] Completed state [zabbix-agent-package] at time 14:10:05.300786 duration_in_ms=14269.713

Versions Report

Minion version report:

Salt Version:
           Salt: 2016.3.4

Dependency Versions:
           cffi: Not Installed
       cherrypy: Not Installed
       dateutil: 2.1
          gitdb: Not Installed
      gitpython: Not Installed
          ioflo: Not Installed
         Jinja2: 2.8
        libgit2: 0.20.0
        libnacl: Not Installed
       M2Crypto: 0.22
           Mako: Not Installed
   msgpack-pure: Not Installed
 msgpack-python: 0.4.8
   mysql-python: Not Installed
      pycparser: Not Installed
       pycrypto: 2.6.1
         pygit2: 0.20.0
         Python: 2.6.9 (unknown, Apr  7 2015, 08:28:12)
   python-gnupg: Not Installed
         PyYAML: 3.12
          PyZMQ: 15.2.0
           RAET: Not Installed
          smmap: Not Installed
        timelib: Not Installed
        Tornado: 4.4.2
            ZMQ: 4.2.1

System Versions:
           dist: SuSE 11 x86_64
        machine: x86_64
        release: 3.0.101-0.47.71-default
         system: Linux
        version: SUSE Linux Enterprise Server  11 x86_64

Master version report:

Salt Version:
           Salt: 2016.11.6

Dependency Versions:
           cffi: Not Installed
       cherrypy: Not Installed
       dateutil: 1.5
      docker-py: Not Installed
          gitdb: 0.5.4
      gitpython: 0.3.2 RC1
          ioflo: Not Installed
         Jinja2: 2.7.2
        libgit2: Not Installed
        libnacl: Not Installed
       M2Crypto: Not Installed
           Mako: Not Installed
   msgpack-pure: Not Installed
 msgpack-python: 0.4.6
   mysql-python: 1.2.3
      pycparser: Not Installed
       pycrypto: 2.6.1
   pycryptodome: Not Installed
         pygit2: Not Installed
         Python: 2.7.6 (default, Oct 26 2016, 20:30:19)
   python-gnupg: Not Installed
         PyYAML: 3.10
          PyZMQ: 14.0.1
           RAET: Not Installed
          smmap: 0.8.2
        timelib: Not Installed
        Tornado: 4.2.1
            ZMQ: 4.0.5

System Versions:
           dist: Ubuntu 14.04 trusty
        machine: x86_64
        release: 3.13.0-123-generic
         system: Linux
        version: Ubuntu 14.04 trusty

For reference, someone else got into this as well: https://stackoverflow.com/questions/40663037/using-saltstacks-state-modules-to-accept-newly-added-repos-package-signing-key

Let me know if there's more needed to document this issue. Thanks!

@garethgreenaway garethgreenaway added Bug broken, incorrect, or confusing behavior severity-medium 3rd level, incorrect or bad functionality, confusing and lacks a work around P2 Priority 2 State-Module labels Jun 30, 2017
@garethgreenaway
Copy link
Contributor

@dumol Thanks for the report. Seems an option to check if an updated GPG key is available would be helpful here.

@garethgreenaway garethgreenaway added this to the Approved milestone Jun 30, 2017
@dumol
Copy link
Contributor Author

dumol commented Jul 1, 2017

Or a new one, as this also happens on a fresh installation.

@dumol
Copy link
Contributor Author

dumol commented Dec 5, 2017

Reproduces on SLES 11 SP4 as well.

@Nick2253
Copy link

Nick2253 commented Jan 23, 2018

I am seeing similar behavior on CentOS 7. I am installing the repo (in my case, Icinga2) using pkgrepo.managed, and when I attempt to install packages from this repo, I am prompted to trust the GPG key.

Setup

icinga-stable-release:
  pkgrepo.managed:
    - humanname: ICINGA (stable release for epel)
    - baseurl: https://packages.icinga.com/epel/$releasever/release/
    - gpgcheck: 1
    - gpgkey: https://packages.icinga.com/icinga.key

Versions Report

Minion

Salt Version:
           Salt: 2017.7.2

Dependency Versions:
           cffi: Not Installed
       cherrypy: Not Installed
       dateutil: Not Installed
      docker-py: Not Installed
          gitdb: Not Installed
      gitpython: Not Installed
          ioflo: Not Installed
         Jinja2: 2.7.2
        libgit2: Not Installed
        libnacl: Not Installed
       M2Crypto: Not Installed
           Mako: Not Installed
   msgpack-pure: Not Installed
 msgpack-python: 0.4.8
   mysql-python: Not Installed
      pycparser: Not Installed
       pycrypto: 2.6.1
   pycryptodome: Not Installed
         pygit2: Not Installed
         Python: 2.7.5 (default, Aug  4 2017, 00:39:18)
   python-gnupg: Not Installed
         PyYAML: 3.11
          PyZMQ: 15.3.0
           RAET: Not Installed
          smmap: Not Installed
        timelib: Not Installed
        Tornado: 4.2.1
            ZMQ: 4.1.4

System Versions:
           dist: centos 7.4.1708 Core
         locale: UTF-8
        machine: x86_64
        release: 3.10.0-693.11.6.el7.x86_64
         system: Linux
        version: CentOS Linux 7.4.1708 Core

Master

Salt Version:
           Salt: 2017.7.2

Dependency Versions:
           cffi: Not Installed
       cherrypy: Not Installed
       dateutil: Not Installed
      docker-py: Not Installed
          gitdb: Not Installed
      gitpython: Not Installed
          ioflo: Not Installed
         Jinja2: 2.7.2
        libgit2: Not Installed
        libnacl: Not Installed
       M2Crypto: Not Installed
           Mako: Not Installed
   msgpack-pure: Not Installed
 msgpack-python: 0.4.6
   mysql-python: Not Installed
      pycparser: Not Installed
       pycrypto: 2.6.1
   pycryptodome: Not Installed
         pygit2: Not Installed
         Python: 2.7.5 (default, Aug  4 2017, 00:39:18)
   python-gnupg: Not Installed
         PyYAML: 3.11
          PyZMQ: 15.3.0
           RAET: Not Installed
          smmap: Not Installed
        timelib: Not Installed
        Tornado: 4.2.1
            ZMQ: 4.1.4

System Versions:
           dist: centos 7.4.1708 Core
         locale: UTF-8
        machine: x86_64
        release: 3.10.0-693.11.6.el7.x86_64
         system: Linux
        version: CentOS Linux 7.4.1708 Core

@dumol
Copy link
Contributor Author

dumol commented Jul 11, 2018

True, this seems to affect all RPM-based Linux distros.

Maybe the reason for not attending to it is that it's easy to fix by manually adding the missing key through command line on the affected minion, and then it's out of the way. Still, quite annoying on fresh minions…

@dumol
Copy link
Contributor Author

dumol commented Oct 3, 2019

This has not been an issue with CentOS 8 and Salt 2009.2.1 though, so maybe it was fixed in the meantime?

@sagetherage sagetherage removed the P2 Priority 2 label Jun 3, 2020
@n-rodriguez
Copy link

This has not been an issue with CentOS 8 and Salt 2009.2.1 though, so maybe it was fixed in the meantime?

It's still an issue with OpenSuse leap 15.2.

But what I'd like to know is :

is gpgkey really used in Salt codebase? See : https://github.com/saltstack/salt/search?q=gpgkey

@n-rodriguez
Copy link

@aboe76 : any opinion?

@n-rodriguez
Copy link

It's linked to saltstack-formulas/lynis-formula#7

And found this one too : #21507

@n-rodriguez
Copy link

On OpenSuse :

4f3083e9eec5:/usr/lib/python3.6/site-packages/salt # grep -rnw --exclude=*.pyc  gpgkey .
./states/pkgrepo.py:18:        - gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
./states/pkgrepo.py:156:        specified with ``gpgkey`` parameter. See details below.
./states/pkgrepo.py:159:    ``gpgkey`` or ``gpgcheck``, will be used directly as key-value pairs.
./states/pkgrepo.py:168:            - gpgkey: file:///etc/pki/rpm-gpg/foo-signing-key
./cloud/deploy/bootstrap-salt.sh:4065:gpgkey=${base_url}${gpg_key}
./cloud/deploy/bootstrap-salt.sh:5097:gpgkey=$gpg_key
./cloud/deploy/bootstrap-salt.sh:5339:gpgkey=$gpg_key

@n-rodriguez
Copy link

or am I missing something?

@aboe76
Copy link
Contributor

aboe76 commented Sep 22, 2020

This is strange, because zypper module in salt does have: gpgautoimport

gpgautoimport : False

But it's not propagated to the state.pkg, only skip gpg...

And I'm using the same repo on my suse boxes except I have gpgcheck enabled:

[lynis]
name=CISOfy Lynis repository
enabled=1
autorefresh=1
baseurl=https://packages.cisofy.com/community/lynis/rpm/
type=rpm-md
priority=1
gpgcheck=1
keeppackages=0

Then Again, the pkgrepo for suse systems does have this option:

https://docs.saltstack.com/en/latest/ref/states/all/salt.states.pkgrepo.html#salt.states.pkgrepo.managed
gpgautoimport
Only valid for Zypper package manager. If set to True, automatically trust and import public GPG key for the repository. The key should be specified with gpgkey parameter. See details below.

@n-rodriguez
Copy link

I finally got it : gpgkey param is written as is for Redhat.
For Suse it's not used. The issue comes from lynis repo which doesn't provide repodata.xml.key which is mandatory to validate repodata.xml signature. I've sent an email to Lynis to try to fix this.

@n-rodriguez
Copy link

@aboe76
Copy link
Contributor

aboe76 commented Sep 22, 2020

@n-rodriguez
Copy link

Sure, but the logs in saltstack-formulas/lynis-formula#7 (comment) clearly shows that it doesn't use it. I've made several tests and zypper never uses https://packages.cisofy.com/keys/cisofy-software-rpms-public.key

@aboe76
Copy link
Contributor

aboe76 commented Sep 26, 2020

@n-rodriguez, I think I found the issue with the suse repo:

repo:
  humanname: CISOfy Lynis repository
  name: lynis
  enabled: true
  gpgcheck: 1
  baseurl: https://packages.cisofy.com/community/lynis/rpm/
  gpgkey: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
  gpgpautoimport: true

With these it works on my machine without issues.

@n-rodriguez
Copy link

With these it works on my machine without issues.

Not on mine :

nicolas@server:~/lynis-formula bin/kitchen verify repo-opensuse-leap-152-master-py3
-----> Starting Test Kitchen (v2.5.2)
-----> Creating <repo-opensuse-leap-152-master-py3>...
       Sending build context to Docker daemon  304.1kB
       Step 1/16 : FROM saltimages/salt-master-py3:opensuse-leap-15.2
        ---> d24ea8e43878
       Step 2/16 : ENV container docker
        ---> Running in 755ae75e5fb3
       Removing intermediate container 755ae75e5fb3
        ---> ab9681a0de67
       Step 3/16 : RUN zypper install -y sudo openssh which curl
        ---> Running in 73a8009f77ca
       + zypper install -y sudo openssh which curl
       Retrieving repository 'Main Update Repository' metadata [..done]
       Building repository 'Main Update Repository' cache [....done]
       Loading repository data...
       Reading installed packages...
       'openssh' is already installed.
       No update candidate for 'openssh-8.1p1-lp152.3.18.x86_64'. The highest available version is already installed.
       'sudo' is already installed.
       No update candidate for 'sudo-1.8.22-lp152.7.17.x86_64'. The highest available version is already installed.
       'which' is already installed.
       No update candidate for 'which-2.21-lp152.4.114.x86_64'. The highest available version is already installed.
       Resolving package dependencies...
       
       The following package is going to be upgraded:
         curl
       
       1 package to upgrade.
       Overall download size: 329.4 KiB. Already cached: 0 B. No additional space will be used or freed after the operation.
       Continue? [y/n/v/...? shows all options] (y): y
       Retrieving package curl-7.66.0-lp152.3.9.1.x86_64 (1/1), 329.4 KiB (479.2 KiB unpacked)
       Retrieving: curl-7.66.0-lp152.3.9.1.x86_64.rpm [.done (975 B/s)]
       
       Checking for file conflicts: [......done]
       (1/1) Installing: curl-7.66.0-lp152.3.9.1.x86_64 [..................done]
        
       Core libraries or services have been updated.
       Reboot is required to ensure that your system benefits from these updates.
       Removing intermediate container 73a8009f77ca
        ---> bf29c58c5779
       Step 4/16 : RUN [ -f "/etc/ssh/ssh_host_rsa_key" ] || ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''
        ---> Running in 430565eb379e
       + '[' -f /etc/ssh/ssh_host_rsa_key ']'
       + ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''
       Generating public/private rsa key pair.
       Your identification has been saved in /etc/ssh/ssh_host_rsa_key.
       Your public key has been saved in /etc/ssh/ssh_host_rsa_key.pub.
       The key fingerprint is:
       SHA256:9aELTFcDZ/hsjGFh9JC4H0mjRYrmDNTkLuCbym6hm2o root@430565eb379e
       The key's randomart image is:
       +---[RSA 3072]----+
       |    .o.  +B==    |
       |   . ....oO* .   |
       |  . . + o*oOo    |
       | . . * ooo+o=.   |
       |  . . + S..o.    |
       | . o .   ...     |
       |. +       .      |
       |oE               |
       |X+               |
       +----[SHA256]-----+
       Removing intermediate container 430565eb379e
        ---> a6380846b469
       Step 5/16 : RUN [ -f "/etc/ssh/ssh_host_dsa_key" ] || ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''
        ---> Running in 6a73aab0c129
       + '[' -f /etc/ssh/ssh_host_dsa_key ']'
       + ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''
       Generating public/private dsa key pair.
       Your identification has been saved in /etc/ssh/ssh_host_dsa_key.
       Your public key has been saved in /etc/ssh/ssh_host_dsa_key.pub.
       The key fingerprint is:
       SHA256:pzHQRBbWXbSwoZPnq3C98Szh64PTIql7ORZIK0qU0sU root@6a73aab0c129
       The key's randomart image is:
       +---[DSA 1024]----+
       |   .   .*o .ooo  |
       |    E  =  .o.+ . |
       | . o  . . + o .  |
       |. +   ..   +     |
       | o   . oS . .    |
       |  . . o .= ...   |
       | . . .  o+.++.   |
       |  .     Bo+.==   |
       |      o= o.+++o  |
       +----[SHA256]-----+
       Removing intermediate container 6a73aab0c129
        ---> 9f027294a6d9
       Step 6/16 : RUN if ! getent passwd kitchen; then                   useradd -d /home/kitchen -m -s /bin/bash -p '*' kitchen;                 fi
        ---> Running in 5e7eacf36e30
       + getent passwd kitchen
       + useradd -d /home/kitchen -m -s /bin/bash -p '*' kitchen
       Group 'mail' not found. Creating the user mailbox file with 0600 mode.
       Removing intermediate container 5e7eacf36e30
        ---> 3a19163c0aef
       Step 7/16 : RUN echo "kitchen ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
        ---> Running in 895377cdac36
       + echo 'kitchen ALL=(ALL) NOPASSWD: ALL'
       Removing intermediate container 895377cdac36
        ---> 5d8dc68a1ab7
       Step 8/16 : RUN echo "Defaults !requiretty" >> /etc/sudoers
        ---> Running in a9d336871347
       + echo 'Defaults !requiretty'
       Removing intermediate container a9d336871347
        ---> 3020b61866f5
       Step 9/16 : RUN mkdir -p /home/kitchen/.ssh
        ---> Running in 69366b1e7d24
       + mkdir -p /home/kitchen/.ssh
       Removing intermediate container 69366b1e7d24
        ---> b23f37814f9f
       Step 10/16 : RUN chown -R kitchen /home/kitchen/.ssh
        ---> Running in 5c33555caa10
       + chown -R kitchen /home/kitchen/.ssh
       Removing intermediate container 5c33555caa10
        ---> 94a2f63a11f8
       Step 11/16 : RUN chmod 0700 /home/kitchen/.ssh
        ---> Running in afebc9800af9
       + chmod 0700 /home/kitchen/.ssh
       Removing intermediate container afebc9800af9
        ---> 0adbd3a918db
       Step 12/16 : RUN touch /home/kitchen/.ssh/authorized_keys
        ---> Running in fa01d51cbf37
       + touch /home/kitchen/.ssh/authorized_keys
       Removing intermediate container fa01d51cbf37
        ---> 4dc5fdc55c02
       Step 13/16 : RUN chown kitchen /home/kitchen/.ssh/authorized_keys
        ---> Running in 28cbe5c50953
       + chown kitchen /home/kitchen/.ssh/authorized_keys
       Removing intermediate container 28cbe5c50953
        ---> e89e15e57465
       Step 14/16 : RUN chmod 0600 /home/kitchen/.ssh/authorized_keys
        ---> Running in dd6b9e1be48a
       + chmod 0600 /home/kitchen/.ssh/authorized_keys
       Removing intermediate container dd6b9e1be48a
        ---> 5f4940082668
       Step 15/16 : RUN mkdir -p /run/sshd
        ---> Running in e44aa7fd0e2e
       + mkdir -p /run/sshd
       Removing intermediate container e44aa7fd0e2e
        ---> 091c493693bb
       Step 16/16 : RUN echo ssh-rsa\ AAAAB3NzaC1yc2EAAAADAQABAAABAQCzarIIMAmAtY895lUbjdsKx/dGIy1coChJVfu59srm1YKG0eUrZA6mrd71JCrVUzgMJSzs1svtr1MSNT6pR/VLQwsDiuGM+A681gofjUcDVJakmkOiwPkMmgVHcR89wYZ0t231V9EakyXla7XPrc52Adr9FnvBOiuBIGFHGafNBQvhCLxkFoDH7QSn8OTwhLkyWwy09o5NFsEqRAZo5suSifJvubVwGEkq4bxMmbeyzxP1oEurm2jhuKBbEIFh6tV+Jcbw35Js4z1Ic+k3cc37fEN/jXwJJnKRMHpSOAf4TBIl+shXEV1gqsMU4bogCClHsBPtlZcQmIrIY6o87leF\ kitchen_docker_key >> /home/kitchen/.ssh/authorized_keys
        ---> Running in eda7be416334
       + echo 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzarIIMAmAtY895lUbjdsKx/dGIy1coChJVfu59srm1YKG0eUrZA6mrd71JCrVUzgMJSzs1svtr1MSNT6pR/VLQwsDiuGM+A681gofjUcDVJakmkOiwPkMmgVHcR89wYZ0t231V9EakyXla7XPrc52Adr9FnvBOiuBIGFHGafNBQvhCLxkFoDH7QSn8OTwhLkyWwy09o5NFsEqRAZo5suSifJvubVwGEkq4bxMmbeyzxP1oEurm2jhuKBbEIFh6tV+Jcbw35Js4z1Ic+k3cc37fEN/jXwJJnKRMHpSOAf4TBIl+shXEV1gqsMU4bogCClHsBPtlZcQmIrIY6o87leF kitchen_docker_key'
       Removing intermediate container eda7be416334
        ---> d2f0b3ee5d98
       Successfully built d2f0b3ee5d98
       74365843a419415b8add18f78e58868a8668d371dc42f11ed7a0457e722d1c8f
       127.0.0.1:32768
       Waiting for SSH service on localhost:32768, retrying in 3 seconds
       [SSH] Established
       Finished creating <repo-opensuse-leap-152-master-py3> (1m5.60s).
-----> Converging <repo-opensuse-leap-152-master-py3>...
       Preparing files for transfer
       Preparing salt-minion
       Preparing pillars into /srv/pillar
       Preparing formula: lynis from /data/nicolas/lynis-formula
       Preparing state_top
       Preparing scripts into /etc/salt/scripts
       You asked for latest and you have 3001-n/a-04a0068 installed, sweet!
       Transferring files to <repo-opensuse-leap-152-master-py3>
       Install External Dependencies
       Content of /tmp/kitchen//srv/salt :
       total 4
       drwxr-xr-x 1 kitchen users  24 Sep 27 13:35 .
       drwxr-xr-x 1 kitchen users  20 Sep 27 13:35 ..
       drwxr-xr-x 1 kitchen users 278 Sep 27 13:35 lynis
       -rw-r--r-- 1 kitchen users  27 Sep 27 13:35 top.sls
       [DEBUG   ] Reading configuration from /tmp/kitchen/etc/salt/minion
       [DEBUG   ] Guessing ID. The id can be explicitly set in /etc/salt/minion
       [DEBUG   ] Found minion id from generate_minion_id(): 74365843a419
       [DEBUG   ] Configuration file path: /tmp/kitchen/etc/salt/minion
       [WARNING ] Insecure logging configuration detected! Sensitive data may be logged.
       [DEBUG   ] Grains refresh requested. Refreshing grains.
       [DEBUG   ] Reading configuration from /tmp/kitchen/etc/salt/minion
       [DEBUG   ] /etc/resolv.conf: The domain and search keywords are mutually exclusive.
       [DEBUG   ] Elapsed time getting FQDNs: 0.11979365348815918 seconds
       [DEBUG   ] The `lspci` binary is not available on the system. GPU grains will not be available.
       [DEBUG   ] LazyLoaded zfs.is_supported
       [DEBUG   ] Determining pillar cache
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] compile template: /tmp/kitchen/srv/pillar/top.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/srv/pillar', '/tmp/kitchen/srv/spm/pillar']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/top.sls' using 'jinja' renderer: 0.010636091232299805
       [DEBUG   ] Rendered data from file: /tmp/kitchen/srv/pillar/top.sls:
       ---
       base:
         "*":
         - lynis
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('base', OrderedDict([('*', ['lynis'])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/top.sls' using 'yaml' renderer: 0.0004723072052001953
       [DEBUG   ] LazyLoaded confirm_top.confirm_top
       [DEBUG   ] LazyLoaded compound_match.match
       [DEBUG   ] compound_match: 74365843a419 ? *
       [DEBUG   ] LazyLoaded glob_match.match
       [DEBUG   ] compound_match 74365843a419 ? "*" => "True"
       [DEBUG   ] compile template: /tmp/kitchen/srv/pillar/lynis.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/srv/pillar', '/tmp/kitchen/srv/spm/pillar']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/lynis.sls' using 'jinja' renderer: 0.001123666763305664
       [DEBUG   ] Rendered data from file: /tmp/kitchen/srv/pillar/lynis.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=yaml
       ---
       lynis:
         install_from_package: true
         install_from_source: false
         use_repo: true
       
         config:
           profiles:
             foo:
        skip-test:
          - name: LYNIS
            description: This release is more than 4 months old. Consider upgrading
            reason: We wait for new Debian package
             bar:
        skip-test:
          - name: KRNL-5788
            description: Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system
            reason: This is OVH kernel
       
          - name: 'KRNL-6000:net.ipv4.conf.all.log_martians'
            description: 'net.ipv4.conf.all.log_martians (exp: 1)'
            reason: What for?
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('lynis', OrderedDict([('install_from_package', True), ('install_from_source', False), ('use_repo', True), ('config', OrderedDict([('profiles', OrderedDict([('foo', OrderedDict([('skip-test', [OrderedDict([('name', 'LYNIS'), ('description', 'This release is more than 4 months old. Consider upgrading'), ('reason', 'We wait for new Debian package')])])])), ('bar', OrderedDict([('skip-test', [OrderedDict([('name', 'KRNL-5788'), ('description', 'Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system'), ('reason', 'This is OVH kernel')]), OrderedDict([('name', 'KRNL-6000:net.ipv4.conf.all.log_martians'), ('description', 'net.ipv4.conf.all.log_martians (exp: 1)'), ('reason', 'What for?')])])]))]))]))]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/lynis.sls' using 'yaml' renderer: 0.0007932186126708984
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] LazyLoaded state.highstate
       [DEBUG   ] LazyLoaded direct_call.execute
       [DEBUG   ] LazyLoaded grains.get
       [DEBUG   ] LazyLoaded saltutil.is_running
       [DEBUG   ] LazyLoaded config.get
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [DEBUG   ] Updating roots fileserver cache
       [DEBUG   ] Gathering pillar data for state run
       [DEBUG   ] Finished gathering pillar data for state run
       [INFO    ] Loading fresh modules for state activity
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] In saltenv 'base', looking at rel_path 'top.sls' to resolve 'salt://top.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/top.sls' to resolve 'salt://top.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://top.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'top.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/top.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/top.sls' using 'jinja' renderer: 0.02188563346862793
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/top.sls:
       ---
       base:
         "*":
         - lynis
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('base', OrderedDict([('*', ['lynis'])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/top.sls' using 'yaml' renderer: 0.00033354759216308594
       [DEBUG   ] LazyLoaded confirm_top.confirm_top
       [DEBUG   ] LazyLoaded compound_match.match
       [DEBUG   ] compound_match: 74365843a419 ? *
       [DEBUG   ] LazyLoaded glob_match.match
       [DEBUG   ] compound_match 74365843a419 ? "*" => "True"
       [DEBUG   ] The _ext_nodes master function has been renamed to _master_tops. To ensure compatibility when using older Salt masters we will continue to invoke the function as _ext_nodes until the Magnesium release.
       [DEBUG   ] LazyLoaded saltutil.sync_all
       [DEBUG   ] Syncing all
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/clouds'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing clouds for environment 'base'
       [INFO    ] Loading cache from salt://_clouds, for base
       [INFO    ] Caching directory '_clouds/' for environment 'base'
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_clouds'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/beacons'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing beacons for environment 'base'
       [INFO    ] Loading cache from salt://_beacons, for base
       [INFO    ] Caching directory '_beacons/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_beacons'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/modules'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing modules for environment 'base'
       [INFO    ] Loading cache from salt://_modules, for base
       [INFO    ] Caching directory '_modules/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_modules'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/states'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing states for environment 'base'
       [INFO    ] Loading cache from salt://_states, for base
       [INFO    ] Caching directory '_states/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_states'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/sdb'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing sdb for environment 'base'
       [INFO    ] Loading cache from salt://_sdb, for base
       [INFO    ] Caching directory '_sdb/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_sdb'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/grains'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing grains for environment 'base'
       [INFO    ] Loading cache from salt://_grains, for base
       [INFO    ] Caching directory '_grains/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_grains'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/renderers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing renderers for environment 'base'
       [INFO    ] Loading cache from salt://_renderers, for base
       [INFO    ] Caching directory '_renderers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_renderers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/returners'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing returners for environment 'base'
       [INFO    ] Loading cache from salt://_returners, for base
       [INFO    ] Caching directory '_returners/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_returners'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/output'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing output for environment 'base'
       [INFO    ] Loading cache from salt://_output, for base
       [INFO    ] Caching directory '_output/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_output'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/utils'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing utils for environment 'base'
       [INFO    ] Loading cache from salt://_utils, for base
       [INFO    ] Caching directory '_utils/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_utils'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/log_handlers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing log_handlers for environment 'base'
       [INFO    ] Loading cache from salt://_log_handlers, for base
       [INFO    ] Caching directory '_log_handlers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_log_handlers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/executors'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing executors for environment 'base'
       [INFO    ] Loading cache from salt://_executors, for base
       [INFO    ] Caching directory '_executors/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_executors'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/proxy'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing proxy for environment 'base'
       [INFO    ] Loading cache from salt://_proxy, for base
       [INFO    ] Caching directory '_proxy/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_proxy'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/engines'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing engines for environment 'base'
       [INFO    ] Loading cache from salt://_engines, for base
       [INFO    ] Caching directory '_engines/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_engines'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/thorium'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing thorium for environment 'base'
       [INFO    ] Loading cache from salt://_thorium, for base
       [INFO    ] Caching directory '_thorium/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_thorium'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/serializers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing serializers for environment 'base'
       [INFO    ] Loading cache from salt://_serializers, for base
       [INFO    ] Caching directory '_serializers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_serializers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/matchers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing matchers for environment 'base'
       [INFO    ] Loading cache from salt://_matchers, for base
       [INFO    ] Caching directory '_matchers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_matchers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/pillar'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing pillar for environment 'base'
       [INFO    ] Loading cache from salt://_pillar, for base
       [INFO    ] Caching directory '_pillar/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_pillar'
       [DEBUG   ] Refreshing modules...
       [INFO    ] Loading fresh modules for state activity
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Could not find file 'salt://lynis.sls' in saltenv 'base'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/init.sls' to resolve 'salt://lynis/init.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls' to resolve 'salt://lynis/init.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/init.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/init.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/map.jinja'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/defaults.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osmap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osfingermap.yaml'
       [DEBUG   ] LazyLoaded config.get
       [DEBUG   ] LazyLoaded grains.filter_by
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls' using 'jinja' renderer: 0.03348517417907715
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       
       
       include:
       
         - .package
       
         - .config
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['.package', '.config'])])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls' using 'yaml' renderer: 0.0002601146697998047
       [DEBUG   ] Could not find file 'salt://lynis/package.sls' in saltenv 'base'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/package/init.sls' to resolve 'salt://lynis/package/init.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls' to resolve 'salt://lynis/package/init.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/package/init.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/package/init.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls' using 'jinja' renderer: 0.0007641315460205078
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls:
       #.-*- coding: utf-8 -*-
       # vim: ft=sls
       
       include:
         - .install
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['.install'])])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls' using 'yaml' renderer: 0.0002415180206298828
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/package/install.sls' to resolve 'salt://lynis/package/install.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls' to resolve 'salt://lynis/package/install.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/package/install.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/package/install.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls' using 'jinja' renderer: 0.02734208106994629
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       
       include:
         - lynis.repo.install
       
       
       lynis/package/install:
         pkg.installed:
           - pkgs:
             - lynis
             
           
           - refresh: true
           - require:
             - sls: lynis.repo.install
           
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['lynis.repo.install']), ('lynis/package/install', OrderedDict([('pkg.installed', [OrderedDict([('pkgs', ['lynis'])]), OrderedDict([('refresh', True)]), OrderedDict([('require', [OrderedDict([('sls', 'lynis.repo.install')])])])])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls' using 'yaml' renderer: 0.0004661083221435547
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/repo/install.sls' to resolve 'salt://lynis/repo/install.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls' to resolve 'salt://lynis/repo/install.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/repo/install.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/repo/install.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/macros.jinja' to resolve 'salt://lynis/macros.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/macros.jinja' to resolve 'salt://lynis/macros.jinja'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/macros.jinja'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/macros.jinja'
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls' using 'jinja' renderer: 0.0282289981842041
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       lynis/repo/install:
         pkgrepo.managed:
           - baseurl: https://packages.cisofy.com/community/lynis/rpm/
           - enabled: True
           - gpgautoimport: True
           - gpgcheck: 1
           - gpgkey: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
           - humanname: Lynis repo
           - name: Lynis
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('lynis/repo/install', OrderedDict([('pkgrepo.managed', [OrderedDict([('baseurl', 'https://packages.cisofy.com/community/lynis/rpm/')]), OrderedDict([('enabled', True)]), OrderedDict([('gpgautoimport', True)]), OrderedDict([('gpgcheck', 1)]), OrderedDict([('gpgkey', 'https://packages.cisofy.com/keys/cisofy-software-rpms-public.key')]), OrderedDict([('humanname', 'Lynis repo')]), OrderedDict([('name', 'Lynis')])])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls' using 'yaml' renderer: 0.0005075931549072266
       [DEBUG   ] Could not find file 'salt://lynis/config.sls' in saltenv 'base'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/config/init.sls' to resolve 'salt://lynis/config/init.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls' to resolve 'salt://lynis/config/init.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/config/init.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/config/init.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls' using 'jinja' renderer: 0.0007715225219726562
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       include:
         - .file
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['.file'])])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls' using 'yaml' renderer: 0.00024056434631347656
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/config/file.sls' to resolve 'salt://lynis/config/file.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls' to resolve 'salt://lynis/config/file.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/config/file.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/config/file.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/libtofs.jinja' to resolve 'salt://lynis/libtofs.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/libtofs.jinja' to resolve 'salt://lynis/libtofs.jinja'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/libtofs.jinja'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/libtofs.jinja'
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls' using 'jinja' renderer: 0.05401134490966797
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       include:
         - lynis.package.install
       lynis/config/install/profile/foo:
         file.managed:
           - name: /etc/lynis/foo.prf
           - source: 
             - salt://lynis/files/74365843a419/profile.tmpl.jinja
             - salt://lynis/files/Suse/profile.tmpl.jinja
             - salt://lynis/files/default/profile.tmpl.jinja
           - template: jinja
           - user: root
           - group: root
           - mode: 644
           - makedirs: true
           - require:
             - sls: lynis.package.install
           - context:
        config: {"skip-test": [{"description": "This release is more than 4 months old. Consider upgrading", "name": "LYNIS", "reason": "We wait for new Debian package"}]}
       lynis/config/install/profile/bar:
         file.managed:
           - name: /etc/lynis/bar.prf
           - source: 
             - salt://lynis/files/74365843a419/profile.tmpl.jinja
             - salt://lynis/files/Suse/profile.tmpl.jinja
             - salt://lynis/files/default/profile.tmpl.jinja
           - template: jinja
           - user: root
           - group: root
           - mode: 644
           - makedirs: true
           - require:
             - sls: lynis.package.install
           - context:
        config: {"skip-test": [{"description": "Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system", "name": "KRNL-5788", "reason": "This is OVH kernel"}, {"description": "net.ipv4.conf.all.log_martians (exp: 1)", "name": "KRNL-6000:net.ipv4.conf.all.log_martians", "reason": "What for?"}]}
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['lynis.package.install']), ('lynis/config/install/profile/foo', OrderedDict([('file.managed', [OrderedDict([('name', '/etc/lynis/foo.prf')]), OrderedDict([('source', ['salt://lynis/files/74365843a419/profile.tmpl.jinja', 'salt://lynis/files/Suse/profile.tmpl.jinja', 'salt://lynis/files/default/profile.tmpl.jinja'])]), OrderedDict([('template', 'jinja')]), OrderedDict([('user', 'root')]), OrderedDict([('group', 'root')]), OrderedDict([('mode', 644)]), OrderedDict([('makedirs', True)]), OrderedDict([('require', [OrderedDict([('sls', 'lynis.package.install')])])]), OrderedDict([('context', OrderedDict([('config', OrderedDict([('skip-test', [OrderedDict([('description', 'This release is more than 4 months old. Consider upgrading'), ('name', 'LYNIS'), ('reason', 'We wait for new Debian package')])])]))]))])])])), ('lynis/config/install/profile/bar', OrderedDict([('file.managed', [OrderedDict([('name', '/etc/lynis/bar.prf')]), OrderedDict([('source', ['salt://lynis/files/74365843a419/profile.tmpl.jinja', 'salt://lynis/files/Suse/profile.tmpl.jinja', 'salt://lynis/files/default/profile.tmpl.jinja'])]), OrderedDict([('template', 'jinja')]), OrderedDict([('user', 'root')]), OrderedDict([('group', 'root')]), OrderedDict([('mode', 644)]), OrderedDict([('makedirs', True)]), OrderedDict([('require', [OrderedDict([('sls', 'lynis.package.install')])])]), OrderedDict([('context', OrderedDict([('config', OrderedDict([('skip-test', [OrderedDict([('description', 'Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system'), ('name', 'KRNL-5788'), ('reason', 'This is OVH kernel')]), OrderedDict([('description', 'net.ipv4.conf.all.log_martians (exp: 1)'), ('name', 'KRNL-6000:net.ipv4.conf.all.log_martians'), ('reason', 'What for?')])])]))]))])])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls' using 'yaml' renderer: 0.0012660026550292969
       [DEBUG   ] LazyLoaded pkg.mod_repo
       [DEBUG   ] LazyLoaded pkgrepo.managed
       [INFO    ] Running state [Lynis] at time 13:35:45.716936
       [INFO    ] Executing state pkgrepo.managed for [Lynis]
       [DEBUG   ] Reading configuration from /etc/salt/minion
       [DEBUG   ] Guessing ID. The id can be explicitly set in /etc/salt/minion
       [DEBUG   ] Found minion id from generate_minion_id(): 74365843a419
       [DEBUG   ] Failed to import utils psutil_compat:
       Traceback (most recent call last):
         File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1695, in _load_module
           mod = spec.loader.load_module()
         File "<frozen importlib._bootstrap_external>", line 399, in _check_name_wrapper
         File "<frozen importlib._bootstrap_external>", line 823, in load_module
         File "<frozen importlib._bootstrap_external>", line 682, in load_module
         File "<frozen importlib._bootstrap>", line 265, in _load_module_shim
         File "<frozen importlib._bootstrap>", line 684, in _load
         File "<frozen importlib._bootstrap>", line 665, in _load_unlocked
         File "<frozen importlib._bootstrap_external>", line 678, in exec_module
         File "<frozen importlib._bootstrap>", line 219, in _call_with_frames_removed
         File "/usr/lib/python3.6/site-packages/salt/utils/psutil_compat.py", line 17, in <module>
           import psutil  # pylint: disable=3rd-party-module-not-gated
       ModuleNotFoundError: No module named 'psutil'
       [DEBUG   ] Could not LazyLoad boto3.assign_funcs: 'boto3.assign_funcs' is not available.
       [DEBUG   ] Error loading module.boto3_elasticsearch: __init__ failed
       Traceback (most recent call last):
         File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1764, in _load_module
           module_init(self.opts)
         File "/usr/lib/python3.6/site-packages/salt/modules/boto3_elasticsearch.py", line 96, in __init__
           __utils__["boto3.assign_funcs"](__name__, "es")
         File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1273, in __getitem__
           func = super().__getitem__(item)
         File "/usr/lib/python3.6/site-packages/salt/utils/lazy.py", line 108, in __getitem__
           raise KeyError(key)
       KeyError: 'boto3.assign_funcs'
       [DEBUG   ] LazyLoaded idem.hub
       [DEBUG   ] DSC: Only available on Windows systems
       [DEBUG   ] Module PSGet: Only available on Windows systems
       [DEBUG   ] Could not LazyLoad pkg.expand_repo_def: 'pkg.expand_repo_def' is not available.
       [DEBUG   ] Calling Zypper: zypper --non-interactive --xmlout --no-refresh ar https://packages.cisofy.com/community/lynis/rpm/ Lynis
       [INFO    ] Executing command ['zypper', '--non-interactive', '--xmlout', '--no-refresh', 'ar', 'https://packages.cisofy.com/community/lynis/rpm/', 'Lynis'] in directory '/root'
       [DEBUG   ] Calling Zypper: zypper --non-interactive --xmlout --gpg-auto-import-keys mr --enable --gpgcheck Lynis
       [INFO    ] Executing command ['zypper', '--non-interactive', '--xmlout', '--gpg-auto-import-keys', 'mr', '--enable', '--gpgcheck', 'Lynis'] in directory '/root'
       [DEBUG   ] Calling Zypper: zypper --non-interactive --xmlout --no-refresh --gpg-auto-import-keys refresh Lynis
       [INFO    ] Executing command ['zypper', '--non-interactive', '--xmlout', '--no-refresh', '--gpg-auto-import-keys', 'refresh', 'Lynis'] in directory '/root'
       [ERROR   ] Command '['zypper', '--non-interactive', '--xmlout', '--no-refresh', '--gpg-auto-import-keys', 'refresh', 'Lynis']' failed with return code: 4
       [ERROR   ] stdout: <?xml version='1.0'?>
       <stream>
       <message type="warning">The &apos;--no-refresh&apos; global option has no effect here.</message>
       <progress id="raw-refresh" name="Retrieving repository &apos;Lynis&apos; metadata" value="0"/>
       <message type="info">Looking for gpg key ID 0ACF951B in cache /var/cache/zypp/pubkeys.</message>
       <message type="info">Repository Lynis does not define additional &apos;gpgkey=&apos; URLs.</message>
       <message type="warning">File &apos;repomd.xml&apos; from repository &apos;Lynis&apos; is signed with an unknown key &apos;824612E20ACF951B&apos;.</message>
       <message type="info">    Note: Signing data enables the recipient to verify that no modifications occurred after the data
           were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
           and in extreme cases even to a system compromise.</message>
       <message type="info">    Note: File &apos;repomd.xml&apos; is the repositories master index file. It ensures the integrity of the
           whole repo.</message>
       <message type="info">    Warning: We can&apos;t verify that no one meddled with this file, so it might not be trustworthy
           anymore! You should not continue unless you know it&apos;s safe.</message>
       <prompt id="13">
       <text>File &apos;repomd.xml&apos; from repository &apos;Lynis&apos; is signed with an unknown key &apos;824612E20ACF951B&apos;. Continue?</text>
       <option value="yes" desc=""/>
       <option default="1" value="no" desc=""/>
       </prompt>
       <progress id="raw-refresh" name="Retrieving repository &apos;Lynis&apos; metadata" done="0"/>
       <message type="error">Repository &apos;Lynis&apos; is invalid.
       [Lynis|https://packages.cisofy.com/community/lynis/rpm/] Valid metadata not found at specified URL
       History:
        - Signature verification failed for repomd.xml
        - Can&apos;t provide /repodata/repomd.xml
       
       Please check if the URIs defined for this repository are pointing to a valid repository.
       </message>
       <message type="error">Skipping repository &apos;Lynis&apos; because of the above error.</message>
       <message type="error">Could not refresh the repositories because of errors.</message>
       </stream>
       [ERROR   ] retcode: 4
       [ERROR   ] Failed to configure repo 'Lynis': Zypper command failure: Repository 'Lynis' is invalid.
       [Lynis|https://packages.cisofy.com/community/lynis/rpm/] Valid metadata not found at specified URL
       History:
        - Signature verification failed for repomd.xml
        - Can't provide /repodata/repomd.xml
       
       Please check if the URIs defined for this repository are pointing to a valid repository.
       
       Skipping repository 'Lynis' because of the above error.
       Could not refresh the repositories because of errors.
       [INFO    ] Completed state [Lynis] at time 13:35:51.463078 (duration_in_ms=5746.142)
       [DEBUG   ] LazyLoaded pkg.installed
       [DEBUG   ] Could not LazyLoad pkg.ex_mod_init: 'pkg.ex_mod_init' is not available.
       [DEBUG   ] LazyLoaded file.managed
       [DEBUG   ] File /tmp/kitchen/var/cache/salt/minion/accumulator/140333613088440 does not exist, no need to cleanup
       [DEBUG   ] LazyLoaded highstate.output
       local:
       ----------
                 ID: lynis/repo/install
           Function: pkgrepo.managed
               Name: Lynis
             Result: False
            Comment: Failed to configure repo 'Lynis': Zypper command failure: Repository 'Lynis' is invalid.
              [Lynis|https://packages.cisofy.com/community/lynis/rpm/] Valid metadata not found at specified URL
              History:
               - Signature verification failed for repomd.xml
               - Can't provide /repodata/repomd.xml
              
              Please check if the URIs defined for this repository are pointing to a valid repository.
              
              Skipping repository 'Lynis' because of the above error.
              Could not refresh the repositories because of errors.
            Started: 13:35:45.716936
           Duration: 5746.142 ms
            Changes:   
       ----------
                 ID: lynis/package/install
           Function: pkg.installed
             Result: False
            Comment: One or more requisite failed: lynis.repo.install.lynis/repo/install
            Started: 13:35:51.501899
           Duration: 0.007 ms
            Changes:   
       ----------
                 ID: lynis/config/install/profile/foo
           Function: file.managed
               Name: /etc/lynis/foo.prf
             Result: False
            Comment: One or more requisite failed: lynis.package.install.lynis/package/install
            Started: 13:35:51.536083
           Duration: 0.007 ms
            Changes:   
       ----------
                 ID: lynis/config/install/profile/bar
           Function: file.managed
               Name: /etc/lynis/bar.prf
             Result: False
            Comment: One or more requisite failed: lynis.package.install.lynis/package/install
            Started: 13:35:51.536223
           Duration: 0.002 ms
            Changes:   
       
       Summary for local
       ------------
       Succeeded: 0
       Failed:    4
       ------------
       Total states run:     4
       Total run time:   5.746 s
>>>>>> ------Exception-------
>>>>>> Class: Kitchen::ActionFailed
>>>>>> Message: 1 actions failed.
>>>>>>     Converge failed on instance <repo-opensuse-leap-152-master-py3>.  Please see .kitchen/logs/repo-opensuse-leap-152-master-py3.log for more details
>>>>>> ----------------------
>>>>>> Please see .kitchen/logs/kitchen.log for more details
>>>>>> Also try running `kitchen diagnose --all` for configuration

@n-rodriguez
Copy link

kitchen@74365843a419:~> cat /etc/zypp/repos.d/Lynis.repo 
[Lynis]
enabled=1
autorefresh=0
baseurl=https://packages.cisofy.com/community/lynis/rpm/
gpgcheck=1

@n-rodriguez
Copy link

nicolas@server:~/lynis-formula git diff 
diff --git a/lynis/osfamilymap.yaml b/lynis/osfamilymap.yaml
index 6eb0ded..318d312 100644
--- a/lynis/osfamilymap.yaml
+++ b/lynis/osfamilymap.yaml
@@ -31,6 +31,7 @@ Suse:
     humanname: Lynis repo
     name: Lynis
     enabled: true
-    gpgcheck: 0
+    gpgcheck: 1
     baseurl: https://packages.cisofy.com/community/lynis/rpm/
+    gpgkey: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
     gpgautoimport: true

@aboe76
Copy link
Contributor

aboe76 commented Sep 28, 2020

@n-rodriguez, that's too bad, I thought I had it...
can you try it with adding: refresh: true

repo:
  humanname: CISOfy Lynis repository
  name: lynis
  enabled: true
  gpgcheck: 1
  baseurl: https://packages.cisofy.com/community/lynis/rpm/
  gpgkey: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
  gpgpautoimport: true
  refresh: true

@n-rodriguez
Copy link

can you try it with adding: refresh: true

Not better :

nicolas@server:~/lynis-formula bin/kitchen verify repo-opensuse-leap-152-master-py3
-----> Starting Test Kitchen (v2.5.2)
-----> Creating <repo-opensuse-leap-152-master-py3>...
       Sending build context to Docker daemon  353.3kB
       Step 1/16 : FROM saltimages/salt-master-py3:opensuse-leap-15.2
        ---> d24ea8e43878
       Step 2/16 : ENV container docker
        ---> Using cache
        ---> ab9681a0de67
       Step 3/16 : RUN zypper install -y sudo openssh which curl
        ---> Using cache
        ---> bf29c58c5779
       Step 4/16 : RUN [ -f "/etc/ssh/ssh_host_rsa_key" ] || ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key -N ''
        ---> Using cache
        ---> a6380846b469
       Step 5/16 : RUN [ -f "/etc/ssh/ssh_host_dsa_key" ] || ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key -N ''
        ---> Using cache
        ---> 9f027294a6d9
       Step 6/16 : RUN if ! getent passwd kitchen; then                   useradd -d /home/kitchen -m -s /bin/bash -p '*' kitchen;                 fi
        ---> Using cache
        ---> 3a19163c0aef
       Step 7/16 : RUN echo "kitchen ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
        ---> Using cache
        ---> 5d8dc68a1ab7
       Step 8/16 : RUN echo "Defaults !requiretty" >> /etc/sudoers
        ---> Using cache
        ---> 3020b61866f5
       Step 9/16 : RUN mkdir -p /home/kitchen/.ssh
        ---> Using cache
        ---> b23f37814f9f
       Step 10/16 : RUN chown -R kitchen /home/kitchen/.ssh
        ---> Using cache
        ---> 94a2f63a11f8
       Step 11/16 : RUN chmod 0700 /home/kitchen/.ssh
        ---> Using cache
        ---> 0adbd3a918db
       Step 12/16 : RUN touch /home/kitchen/.ssh/authorized_keys
        ---> Using cache
        ---> 4dc5fdc55c02
       Step 13/16 : RUN chown kitchen /home/kitchen/.ssh/authorized_keys
        ---> Using cache
        ---> e89e15e57465
       Step 14/16 : RUN chmod 0600 /home/kitchen/.ssh/authorized_keys
        ---> Using cache
        ---> 5f4940082668
       Step 15/16 : RUN mkdir -p /run/sshd
        ---> Using cache
        ---> 091c493693bb
       Step 16/16 : RUN echo ssh-rsa\ AAAAB3NzaC1yc2EAAAADAQABAAABAQCzarIIMAmAtY895lUbjdsKx/dGIy1coChJVfu59srm1YKG0eUrZA6mrd71JCrVUzgMJSzs1svtr1MSNT6pR/VLQwsDiuGM+A681gofjUcDVJakmkOiwPkMmgVHcR89wYZ0t231V9EakyXla7XPrc52Adr9FnvBOiuBIGFHGafNBQvhCLxkFoDH7QSn8OTwhLkyWwy09o5NFsEqRAZo5suSifJvubVwGEkq4bxMmbeyzxP1oEurm2jhuKBbEIFh6tV+Jcbw35Js4z1Ic+k3cc37fEN/jXwJJnKRMHpSOAf4TBIl+shXEV1gqsMU4bogCClHsBPtlZcQmIrIY6o87leF\ kitchen_docker_key >> /home/kitchen/.ssh/authorized_keys
        ---> Using cache
        ---> d2f0b3ee5d98
       Successfully built d2f0b3ee5d98
       1b8f57806e4657ac6c9ab1bb4045c3b6ea617f7dc4e3e8824db4e311c6100d87
       127.0.0.1:32769
       Waiting for SSH service on localhost:32769, retrying in 3 seconds
       [SSH] Established
       Finished creating <repo-opensuse-leap-152-master-py3> (0m4.50s).
-----> Converging <repo-opensuse-leap-152-master-py3>...
       Preparing files for transfer
       Preparing salt-minion
       Preparing pillars into /srv/pillar
       Preparing formula: lynis from /data/nicolas/lynis-formula
       Preparing state_top
       Preparing scripts into /etc/salt/scripts
       You asked for latest and you have 3001-n/a-04a0068 installed, sweet!
       Transferring files to <repo-opensuse-leap-152-master-py3>
       Install External Dependencies
       Content of /tmp/kitchen//srv/salt :
       total 4
       drwxr-xr-x 1 kitchen users  24 Sep 29 08:31 .
       drwxr-xr-x 1 kitchen users  20 Sep 29 08:31 ..
       drwxr-xr-x 1 kitchen users 278 Sep 29 08:31 lynis
       -rw-r--r-- 1 kitchen users  27 Sep 29 08:31 top.sls
       [DEBUG   ] Reading configuration from /tmp/kitchen/etc/salt/minion
       [DEBUG   ] Guessing ID. The id can be explicitly set in /etc/salt/minion
       [DEBUG   ] Found minion id from generate_minion_id(): 1b8f57806e46
       [DEBUG   ] Configuration file path: /tmp/kitchen/etc/salt/minion
       [WARNING ] Insecure logging configuration detected! Sensitive data may be logged.
       [DEBUG   ] Grains refresh requested. Refreshing grains.
       [DEBUG   ] Reading configuration from /tmp/kitchen/etc/salt/minion
       [DEBUG   ] /etc/resolv.conf: The domain and search keywords are mutually exclusive.
       [DEBUG   ] Elapsed time getting FQDNs: 0.11746048927307129 seconds
       [DEBUG   ] The `lspci` binary is not available on the system. GPU grains will not be available.
       [DEBUG   ] LazyLoaded zfs.is_supported
       [DEBUG   ] Determining pillar cache
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] compile template: /tmp/kitchen/srv/pillar/top.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/srv/pillar', '/tmp/kitchen/srv/spm/pillar']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/top.sls' using 'jinja' renderer: 0.010895729064941406
       [DEBUG   ] Rendered data from file: /tmp/kitchen/srv/pillar/top.sls:
       ---
       base:
         "*":
         - lynis
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('base', OrderedDict([('*', ['lynis'])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/top.sls' using 'yaml' renderer: 0.0006237030029296875
       [DEBUG   ] LazyLoaded confirm_top.confirm_top
       [DEBUG   ] LazyLoaded compound_match.match
       [DEBUG   ] compound_match: 1b8f57806e46 ? *
       [DEBUG   ] LazyLoaded glob_match.match
       [DEBUG   ] compound_match 1b8f57806e46 ? "*" => "True"
       [DEBUG   ] compile template: /tmp/kitchen/srv/pillar/lynis.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/srv/pillar', '/tmp/kitchen/srv/spm/pillar']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/lynis.sls' using 'jinja' renderer: 0.0014574527740478516
       [DEBUG   ] Rendered data from file: /tmp/kitchen/srv/pillar/lynis.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=yaml
       ---
       lynis:
         install_from_package: true
         install_from_source: false
         use_repo: true
       
         config:
           profiles:
             foo:
        skip-test:
          - name: LYNIS
            description: This release is more than 4 months old. Consider upgrading
            reason: We wait for new Debian package
             bar:
        skip-test:
          - name: KRNL-5788
            description: Determine why /vmlinuz or /boot/vmlinuz is missing on this
                         Debian/Ubuntu system
            reason: This is OVH kernel
       
          - name: 'KRNL-6000:net.ipv4.conf.all.log_martians'
            description: 'net.ipv4.conf.all.log_martians (exp: 1)'
            reason: What for?
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('lynis', OrderedDict([('install_from_package', True), ('install_from_source', False), ('use_repo', True), ('config', OrderedDict([('profiles', OrderedDict([('foo', OrderedDict([('skip-test', [OrderedDict([('name', 'LYNIS'), ('description', 'This release is more than 4 months old. Consider upgrading'), ('reason', 'We wait for new Debian package')])])])), ('bar', OrderedDict([('skip-test', [OrderedDict([('name', 'KRNL-5788'), ('description', 'Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system'), ('reason', 'This is OVH kernel')]), OrderedDict([('name', 'KRNL-6000:net.ipv4.conf.all.log_martians'), ('description', 'net.ipv4.conf.all.log_martians (exp: 1)'), ('reason', 'What for?')])])]))]))]))]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/srv/pillar/lynis.sls' using 'yaml' renderer: 0.001402139663696289
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] LazyLoaded state.highstate
       [DEBUG   ] LazyLoaded direct_call.execute
       [DEBUG   ] LazyLoaded grains.get
       [DEBUG   ] LazyLoaded saltutil.is_running
       [DEBUG   ] LazyLoaded config.get
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [DEBUG   ] Updating roots fileserver cache
       [DEBUG   ] Gathering pillar data for state run
       [DEBUG   ] Finished gathering pillar data for state run
       [INFO    ] Loading fresh modules for state activity
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] In saltenv 'base', looking at rel_path 'top.sls' to resolve 'salt://top.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/top.sls' to resolve 'salt://top.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://top.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'top.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/top.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/top.sls' using 'jinja' renderer: 0.0212249755859375
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/top.sls:
       ---
       base:
         "*":
         - lynis
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('base', OrderedDict([('*', ['lynis'])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/top.sls' using 'yaml' renderer: 0.0003662109375
       [DEBUG   ] LazyLoaded confirm_top.confirm_top
       [DEBUG   ] LazyLoaded compound_match.match
       [DEBUG   ] compound_match: 1b8f57806e46 ? *
       [DEBUG   ] LazyLoaded glob_match.match
       [DEBUG   ] compound_match 1b8f57806e46 ? "*" => "True"
       [DEBUG   ] The _ext_nodes master function has been renamed to _master_tops. To ensure compatibility when using older Salt masters we will continue to invoke the function as _ext_nodes until the Magnesium release.
       [DEBUG   ] LazyLoaded saltutil.sync_all
       [DEBUG   ] Syncing all
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/clouds'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing clouds for environment 'base'
       [INFO    ] Loading cache from salt://_clouds, for base
       [INFO    ] Caching directory '_clouds/' for environment 'base'
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_clouds'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/beacons'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing beacons for environment 'base'
       [INFO    ] Loading cache from salt://_beacons, for base
       [INFO    ] Caching directory '_beacons/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_beacons'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/modules'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing modules for environment 'base'
       [INFO    ] Loading cache from salt://_modules, for base
       [INFO    ] Caching directory '_modules/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_modules'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/states'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing states for environment 'base'
       [INFO    ] Loading cache from salt://_states, for base
       [INFO    ] Caching directory '_states/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_states'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/sdb'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing sdb for environment 'base'
       [INFO    ] Loading cache from salt://_sdb, for base
       [INFO    ] Caching directory '_sdb/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_sdb'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/grains'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing grains for environment 'base'
       [INFO    ] Loading cache from salt://_grains, for base
       [INFO    ] Caching directory '_grains/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_grains'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/renderers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing renderers for environment 'base'
       [INFO    ] Loading cache from salt://_renderers, for base
       [INFO    ] Caching directory '_renderers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_renderers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/returners'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing returners for environment 'base'
       [INFO    ] Loading cache from salt://_returners, for base
       [INFO    ] Caching directory '_returners/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_returners'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/output'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing output for environment 'base'
       [INFO    ] Loading cache from salt://_output, for base
       [INFO    ] Caching directory '_output/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_output'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/utils'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing utils for environment 'base'
       [INFO    ] Loading cache from salt://_utils, for base
       [INFO    ] Caching directory '_utils/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_utils'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/log_handlers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing log_handlers for environment 'base'
       [INFO    ] Loading cache from salt://_log_handlers, for base
       [INFO    ] Caching directory '_log_handlers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_log_handlers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/executors'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing executors for environment 'base'
       [INFO    ] Loading cache from salt://_executors, for base
       [INFO    ] Caching directory '_executors/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_executors'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/proxy'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing proxy for environment 'base'
       [INFO    ] Loading cache from salt://_proxy, for base
       [INFO    ] Caching directory '_proxy/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_proxy'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/engines'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing engines for environment 'base'
       [INFO    ] Loading cache from salt://_engines, for base
       [INFO    ] Caching directory '_engines/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_engines'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/thorium'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing thorium for environment 'base'
       [INFO    ] Loading cache from salt://_thorium, for base
       [INFO    ] Caching directory '_thorium/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_thorium'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/serializers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing serializers for environment 'base'
       [INFO    ] Loading cache from salt://_serializers, for base
       [INFO    ] Caching directory '_serializers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_serializers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/matchers'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing matchers for environment 'base'
       [INFO    ] Loading cache from salt://_matchers, for base
       [INFO    ] Caching directory '_matchers/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_matchers'
       [INFO    ] Creating module dir '/tmp/kitchen/var/cache/salt/minion/extmods/pillar'
       [DEBUG   ] LazyLoaded roots.envs
       [DEBUG   ] Could not LazyLoad roots.init: 'roots.init' is not available.
       [INFO    ] Syncing pillar for environment 'base'
       [INFO    ] Loading cache from salt://_pillar, for base
       [INFO    ] Caching directory '_pillar/' for environment 'base'
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Local cache dir: '/tmp/kitchen/var/cache/salt/minion/files/base/_pillar'
       [DEBUG   ] Refreshing modules...
       [INFO    ] Loading fresh modules for state activity
       [DEBUG   ] LazyLoaded jinja.render
       [DEBUG   ] LazyLoaded yaml.render
       [DEBUG   ] Returning file list from cache: age=0 cache_time=20 /tmp/kitchen/var/cache/salt/minion/file_lists/roots/base.p
       [DEBUG   ] Could not find file 'salt://lynis.sls' in saltenv 'base'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/init.sls' to resolve 'salt://lynis/init.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls' to resolve 'salt://lynis/init.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/init.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/init.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/map.jinja'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/defaults.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osmap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/osfingermap.yaml'
       [DEBUG   ] LazyLoaded config.get
       [DEBUG   ] LazyLoaded grains.filter_by
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls' using 'jinja' renderer: 0.03342008590698242
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       
       
       include:
       
         - .package
       
         - .config
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['.package', '.config'])])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/init.sls' using 'yaml' renderer: 0.0002613067626953125
       [DEBUG   ] Could not find file 'salt://lynis/package.sls' in saltenv 'base'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/package/init.sls' to resolve 'salt://lynis/package/init.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls' to resolve 'salt://lynis/package/init.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/package/init.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/package/init.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls' using 'jinja' renderer: 0.0007650852203369141
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls:
       #.-*- coding: utf-8 -*-
       # vim: ft=sls
       
       include:
         - .install
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['.install'])])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/init.sls' using 'yaml' renderer: 0.0002415180206298828
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/package/install.sls' to resolve 'salt://lynis/package/install.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls' to resolve 'salt://lynis/package/install.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/package/install.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/package/install.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls' using 'jinja' renderer: 0.026755332946777344
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       
       include:
         - lynis.repo.install
       
       
       lynis/package/install:
         pkg.installed:
           - pkgs:
             - lynis
             
           
           - refresh: true
           - require:
             - sls: lynis.repo.install
           
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['lynis.repo.install']), ('lynis/package/install', OrderedDict([('pkg.installed', [OrderedDict([('pkgs', ['lynis'])]), OrderedDict([('refresh', True)]), OrderedDict([('require', [OrderedDict([('sls', 'lynis.repo.install')])])])])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/package/install.sls' using 'yaml' renderer: 0.00042057037353515625
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/repo/install.sls' to resolve 'salt://lynis/repo/install.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls' to resolve 'salt://lynis/repo/install.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/repo/install.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/repo/install.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/macros.jinja' to resolve 'salt://lynis/macros.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/macros.jinja' to resolve 'salt://lynis/macros.jinja'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/macros.jinja'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/macros.jinja'
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls' using 'jinja' renderer: 0.032430171966552734
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       lynis/repo/install:
         pkgrepo.managed:
           - baseurl: https://packages.cisofy.com/community/lynis/rpm/
           - enabled: True
           - gpgautoimport: True
           - gpgcheck: 1
           - gpgkey: https://packages.cisofy.com/keys/cisofy-software-rpms-public.key
           - humanname: Lynis repo
           - name: Lynis
           - refresh: True
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('lynis/repo/install', OrderedDict([('pkgrepo.managed', [OrderedDict([('baseurl', 'https://packages.cisofy.com/community/lynis/rpm/')]), OrderedDict([('enabled', True)]), OrderedDict([('gpgautoimport', True)]), OrderedDict([('gpgcheck', 1)]), OrderedDict([('gpgkey', 'https://packages.cisofy.com/keys/cisofy-software-rpms-public.key')]), OrderedDict([('humanname', 'Lynis repo')]), OrderedDict([('name', 'Lynis')]), OrderedDict([('refresh', True)])])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/repo/install.sls' using 'yaml' renderer: 0.0007205009460449219
       [DEBUG   ] Could not find file 'salt://lynis/config.sls' in saltenv 'base'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/config/init.sls' to resolve 'salt://lynis/config/init.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls' to resolve 'salt://lynis/config/init.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/config/init.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/config/init.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls' using 'jinja' renderer: 0.0012655258178710938
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       include:
         - .file
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['.file'])])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/init.sls' using 'yaml' renderer: 0.00030422210693359375
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/config/file.sls' to resolve 'salt://lynis/config/file.sls'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls' to resolve 'salt://lynis/config/file.sls'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/config/file.sls'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/config/file.sls'
       [DEBUG   ] compile template: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls
       [DEBUG   ] Jinja search path: ['/tmp/kitchen/var/cache/salt/minion/files/base']
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/map.jinja' to resolve 'salt://lynis/map.jinja'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/defaults.yaml' to resolve 'salt://lynis/defaults.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osarchmap.yaml' to resolve 'salt://lynis/osarchmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfamilymap.yaml' to resolve 'salt://lynis/osfamilymap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osmap.yaml' to resolve 'salt://lynis/osmap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/osfingermap.yaml' to resolve 'salt://lynis/osfingermap.yaml'
       [DEBUG   ] In saltenv 'base', looking at rel_path 'lynis/libtofs.jinja' to resolve 'salt://lynis/libtofs.jinja'
       [DEBUG   ] In saltenv 'base', ** considering ** path '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/libtofs.jinja' to resolve 'salt://lynis/libtofs.jinja'
       [DEBUG   ] Fetching file from saltenv 'base', ** attempting ** 'salt://lynis/libtofs.jinja'
       [DEBUG   ] No dest file found
       [INFO    ] Fetching file from saltenv 'base', ** done ** 'lynis/libtofs.jinja'
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls' using 'jinja' renderer: 0.05906534194946289
       [DEBUG   ] Rendered data from file: /tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls:
       # -*- coding: utf-8 -*-
       # vim: ft=sls
       
       include:
         - lynis.package.install
       lynis/config/install/profile/foo:
         file.managed:
           - name: /etc/lynis/foo.prf
           - source: 
             - salt://lynis/files/1b8f57806e46/profile.tmpl.jinja
             - salt://lynis/files/Suse/profile.tmpl.jinja
             - salt://lynis/files/default/profile.tmpl.jinja
           - template: jinja
           - user: root
           - group: root
           - mode: 644
           - makedirs: true
           - require:
             - sls: lynis.package.install
           - context:
        config: {"skip-test": [{"description": "This release is more than 4 months old. Consider upgrading", "name": "LYNIS", "reason": "We wait for new Debian package"}]}
       lynis/config/install/profile/bar:
         file.managed:
           - name: /etc/lynis/bar.prf
           - source: 
             - salt://lynis/files/1b8f57806e46/profile.tmpl.jinja
             - salt://lynis/files/Suse/profile.tmpl.jinja
             - salt://lynis/files/default/profile.tmpl.jinja
           - template: jinja
           - user: root
           - group: root
           - mode: 644
           - makedirs: true
           - require:
             - sls: lynis.package.install
           - context:
        config: {"skip-test": [{"description": "Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system", "name": "KRNL-5788", "reason": "This is OVH kernel"}, {"description": "net.ipv4.conf.all.log_martians (exp: 1)", "name": "KRNL-6000:net.ipv4.conf.all.log_martians", "reason": "What for?"}]}
       
       [DEBUG   ] Results of YAML rendering: 
       OrderedDict([('include', ['lynis.package.install']), ('lynis/config/install/profile/foo', OrderedDict([('file.managed', [OrderedDict([('name', '/etc/lynis/foo.prf')]), OrderedDict([('source', ['salt://lynis/files/1b8f57806e46/profile.tmpl.jinja', 'salt://lynis/files/Suse/profile.tmpl.jinja', 'salt://lynis/files/default/profile.tmpl.jinja'])]), OrderedDict([('template', 'jinja')]), OrderedDict([('user', 'root')]), OrderedDict([('group', 'root')]), OrderedDict([('mode', 644)]), OrderedDict([('makedirs', True)]), OrderedDict([('require', [OrderedDict([('sls', 'lynis.package.install')])])]), OrderedDict([('context', OrderedDict([('config', OrderedDict([('skip-test', [OrderedDict([('description', 'This release is more than 4 months old. Consider upgrading'), ('name', 'LYNIS'), ('reason', 'We wait for new Debian package')])])]))]))])])])), ('lynis/config/install/profile/bar', OrderedDict([('file.managed', [OrderedDict([('name', '/etc/lynis/bar.prf')]), OrderedDict([('source', ['salt://lynis/files/1b8f57806e46/profile.tmpl.jinja', 'salt://lynis/files/Suse/profile.tmpl.jinja', 'salt://lynis/files/default/profile.tmpl.jinja'])]), OrderedDict([('template', 'jinja')]), OrderedDict([('user', 'root')]), OrderedDict([('group', 'root')]), OrderedDict([('mode', 644)]), OrderedDict([('makedirs', True)]), OrderedDict([('require', [OrderedDict([('sls', 'lynis.package.install')])])]), OrderedDict([('context', OrderedDict([('config', OrderedDict([('skip-test', [OrderedDict([('description', 'Determine why /vmlinuz or /boot/vmlinuz is missing on this Debian/Ubuntu system'), ('name', 'KRNL-5788'), ('reason', 'This is OVH kernel')]), OrderedDict([('description', 'net.ipv4.conf.all.log_martians (exp: 1)'), ('name', 'KRNL-6000:net.ipv4.conf.all.log_martians'), ('reason', 'What for?')])])]))]))])])]))])
       [PROFILE ] Time (in seconds) to render '/tmp/kitchen/var/cache/salt/minion/files/base/lynis/config/file.sls' using 'yaml' renderer: 0.0012807846069335938
       [DEBUG   ] LazyLoaded pkg.mod_repo
       [DEBUG   ] LazyLoaded pkgrepo.managed
       [INFO    ] Running state [Lynis] at time 08:32:00.243563
       [INFO    ] Executing state pkgrepo.managed for [Lynis]
       [DEBUG   ] Reading configuration from /etc/salt/minion
       [DEBUG   ] Guessing ID. The id can be explicitly set in /etc/salt/minion
       [DEBUG   ] Found minion id from generate_minion_id(): 1b8f57806e46
       [DEBUG   ] Failed to import utils psutil_compat:
       Traceback (most recent call last):
         File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1695, in _load_module
           mod = spec.loader.load_module()
         File "<frozen importlib._bootstrap_external>", line 399, in _check_name_wrapper
         File "<frozen importlib._bootstrap_external>", line 823, in load_module
         File "<frozen importlib._bootstrap_external>", line 682, in load_module
         File "<frozen importlib._bootstrap>", line 265, in _load_module_shim
         File "<frozen importlib._bootstrap>", line 684, in _load
         File "<frozen importlib._bootstrap>", line 665, in _load_unlocked
         File "<frozen importlib._bootstrap_external>", line 678, in exec_module
         File "<frozen importlib._bootstrap>", line 219, in _call_with_frames_removed
         File "/usr/lib/python3.6/site-packages/salt/utils/psutil_compat.py", line 17, in <module>
           import psutil  # pylint: disable=3rd-party-module-not-gated
       ModuleNotFoundError: No module named 'psutil'
       [DEBUG   ] Could not LazyLoad boto3.assign_funcs: 'boto3.assign_funcs' is not available.
       [DEBUG   ] Error loading module.boto3_elasticsearch: __init__ failed
       Traceback (most recent call last):
         File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1764, in _load_module
           module_init(self.opts)
         File "/usr/lib/python3.6/site-packages/salt/modules/boto3_elasticsearch.py", line 96, in __init__
           __utils__["boto3.assign_funcs"](__name__, "es")
         File "/usr/lib/python3.6/site-packages/salt/loader.py", line 1273, in __getitem__
           func = super().__getitem__(item)
         File "/usr/lib/python3.6/site-packages/salt/utils/lazy.py", line 108, in __getitem__
           raise KeyError(key)
       KeyError: 'boto3.assign_funcs'
       [DEBUG   ] LazyLoaded idem.hub
       [DEBUG   ] DSC: Only available on Windows systems
       [DEBUG   ] Module PSGet: Only available on Windows systems
       [DEBUG   ] Could not LazyLoad pkg.expand_repo_def: 'pkg.expand_repo_def' is not available.
       [DEBUG   ] Calling Zypper: zypper --non-interactive --xmlout --no-refresh ar https://packages.cisofy.com/community/lynis/rpm/ Lynis
       [INFO    ] Executing command ['zypper', '--non-interactive', '--xmlout', '--no-refresh', 'ar', 'https://packages.cisofy.com/community/lynis/rpm/', 'Lynis'] in directory '/root'
       [DEBUG   ] Calling Zypper: zypper --non-interactive --xmlout --gpg-auto-import-keys mr --enable --refresh --gpgcheck Lynis
       [INFO    ] Executing command ['zypper', '--non-interactive', '--xmlout', '--gpg-auto-import-keys', 'mr', '--enable', '--refresh', '--gpgcheck', 'Lynis'] in directory '/root'
       [DEBUG   ] Calling Zypper: zypper --non-interactive --xmlout --no-refresh --gpg-auto-import-keys refresh Lynis
       [INFO    ] Executing command ['zypper', '--non-interactive', '--xmlout', '--no-refresh', '--gpg-auto-import-keys', 'refresh', 'Lynis'] in directory '/root'
       [ERROR   ] Command '['zypper', '--non-interactive', '--xmlout', '--no-refresh', '--gpg-auto-import-keys', 'refresh', 'Lynis']' failed with return code: 4
       [ERROR   ] stdout: <?xml version='1.0'?>
       <stream>
       <message type="warning">The &apos;--no-refresh&apos; global option has no effect here.</message>
       <progress id="raw-refresh" name="Retrieving repository &apos;Lynis&apos; metadata" value="0"/>
       <message type="info">Looking for gpg key ID 0ACF951B in cache /var/cache/zypp/pubkeys.</message>
       <message type="info">Repository Lynis does not define additional &apos;gpgkey=&apos; URLs.</message>
       <message type="warning">File &apos;repomd.xml&apos; from repository &apos;Lynis&apos; is signed with an unknown key &apos;824612E20ACF951B&apos;.</message>
       <message type="info">    Note: Signing data enables the recipient to verify that no modifications occurred after the data
           were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
           and in extreme cases even to a system compromise.</message>
       <message type="info">    Note: File &apos;repomd.xml&apos; is the repositories master index file. It ensures the integrity of the
           whole repo.</message>
       <message type="info">    Warning: We can&apos;t verify that no one meddled with this file, so it might not be trustworthy
           anymore! You should not continue unless you know it&apos;s safe.</message>
       <prompt id="13">
       <text>File &apos;repomd.xml&apos; from repository &apos;Lynis&apos; is signed with an unknown key &apos;824612E20ACF951B&apos;. Continue?</text>
       <option value="yes" desc=""/>
       <option default="1" value="no" desc=""/>
       </prompt>
       <progress id="raw-refresh" name="Retrieving repository &apos;Lynis&apos; metadata" done="0"/>
       <message type="error">Repository &apos;Lynis&apos; is invalid.
       [Lynis|https://packages.cisofy.com/community/lynis/rpm/] Valid metadata not found at specified URL
       History:
        - Signature verification failed for repomd.xml
        - Can&apos;t provide /repodata/repomd.xml
       
       Please check if the URIs defined for this repository are pointing to a valid repository.
       </message>
       <message type="error">Skipping repository &apos;Lynis&apos; because of the above error.</message>
       <message type="error">Could not refresh the repositories because of errors.</message>
       </stream>
       [ERROR   ] retcode: 4
       [ERROR   ] Failed to configure repo 'Lynis': Zypper command failure: Repository 'Lynis' is invalid.
       [Lynis|https://packages.cisofy.com/community/lynis/rpm/] Valid metadata not found at specified URL
       History:
        - Signature verification failed for repomd.xml
        - Can't provide /repodata/repomd.xml
       
       Please check if the URIs defined for this repository are pointing to a valid repository.
       
       Skipping repository 'Lynis' because of the above error.
       Could not refresh the repositories because of errors.
       [INFO    ] Completed state [Lynis] at time 08:32:05.897088 (duration_in_ms=5653.525)
       [DEBUG   ] LazyLoaded pkg.installed
       [DEBUG   ] Could not LazyLoad pkg.ex_mod_init: 'pkg.ex_mod_init' is not available.
       [DEBUG   ] LazyLoaded file.managed
       [DEBUG   ] File /tmp/kitchen/var/cache/salt/minion/accumulator/139910261927608 does not exist, no need to cleanup
       [DEBUG   ] LazyLoaded highstate.output
       local:
       ----------
                 ID: lynis/repo/install
           Function: pkgrepo.managed
               Name: Lynis
             Result: False
            Comment: Failed to configure repo 'Lynis': Zypper command failure: Repository 'Lynis' is invalid.
              [Lynis|https://packages.cisofy.com/community/lynis/rpm/] Valid metadata not found at specified URL
              History:
               - Signature verification failed for repomd.xml
               - Can't provide /repodata/repomd.xml
              
              Please check if the URIs defined for this repository are pointing to a valid repository.
              
              Skipping repository 'Lynis' because of the above error.
              Could not refresh the repositories because of errors.
            Started: 08:32:00.243563
           Duration: 5653.525 ms
            Changes:   
       ----------
                 ID: lynis/package/install
           Function: pkg.installed
             Result: False
            Comment: One or more requisite failed: lynis.repo.install.lynis/repo/install
            Started: 08:32:05.939619
           Duration: 0.008 ms
            Changes:   
       ----------
                 ID: lynis/config/install/profile/foo
           Function: file.managed
               Name: /etc/lynis/foo.prf
             Result: False
            Comment: One or more requisite failed: lynis.package.install.lynis/package/install
            Started: 08:32:05.980684
           Duration: 0.008 ms
            Changes:   
       ----------
                 ID: lynis/config/install/profile/bar
           Function: file.managed
               Name: /etc/lynis/bar.prf
             Result: False
            Comment: One or more requisite failed: lynis.package.install.lynis/package/install
            Started: 08:32:05.980848
           Duration: 0.002 ms
            Changes:   
       
       Summary for local
       ------------
       Succeeded: 0
       Failed:    4
       ------------
       Total states run:     4
       Total run time:   5.654 s
>>>>>> ------Exception-------
>>>>>> Class: Kitchen::ActionFailed
>>>>>> Message: 1 actions failed.
>>>>>>     Converge failed on instance <repo-opensuse-leap-152-master-py3>.  Please see .kitchen/logs/repo-opensuse-leap-152-master-py3.log for more details
>>>>>> ----------------------
>>>>>> Please see .kitchen/logs/kitchen.log for more details
>>>>>> Also try running `kitchen diagnose --all` for configuration

@n-rodriguez
Copy link

I sent them a mail :

Hi there!

I'm working on Saltstack formula to install Lynis from your repositories. (https://github.com/saltstack-formulas/lynis-formula)

You provide this url to download the signing key : https://packages.cisofy.com/community/lynis/rpm/repodata/repomd.xml.asc

But OpenSuse zypper automatically looks for the key here : https://packages.cisofy.com/community/lynis/rpm/repodata/repomd.xml.key

Can you do something about that? (a symlink for example :))

Here some Zypper logs :

2020-09-22 14:17:42 <1> 75efa8649c15(434) [zypp++] MediaCurl.cc(doGetFileCopyFile):1139 URL: https://packages.cisofy.com/community/lynis/rpm/repodata/repomd.xml.asc
2020-09-22 14:17:42 <1> 75efa8649c15(434) [zypp++] MediaCurl.cc(doGetFileCopyFile):1139 URL: https://packages.cisofy.com/community/lynis/rpm/repodata/repomd.xml.key
2020-09-22 14:17:42 <5> 75efa8649c15(434) [zypp] Exception.cc(log):166 MediaCurl.cc(evaluateCurlCode):762 THROW:    File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 14:17:42 <5> 75efa8649c15(434) [zypp] Exception.cc(log):166 MediaCurl.cc(doGetFileCopyFile):1220 RETHROW:  File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 14:17:42 <5> 75efa8649c15(434) [zypp] Exception.cc(log):166 MediaMultiCurl.cc(doGetFileCopy):1364 RETHROW:  File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 14:17:42 <5> 75efa8649c15(434) [zypp] Exception.cc(log):166 MediaCurl.cc(getFileCopy):649 RETHROW:  File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 14:17:42 <5> 75efa8649c15(434) [zypp] Exception.cc(log):166 MediaSetAccess.cc(provide):266 CAUGHT:   File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'

2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp:fetcher] Fetcher.cc(provideToDest):518 Not found in cache, retrieving...
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaSetAccess.cc(provide):253 Going to try to provide optional file /repodata/repomd.xml.key from media number 1
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaManager.cc(checkDesired):98 checkDesired(2): desired (cached)
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaManager.cc(checkDesired):98 checkDesired(2): desired (cached)
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaMultiCurl.cc(doGetFileCopy):1335 dest: /var/tmp/AP_0xavfFJW/repodata/repomd.xml.key
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaMultiCurl.cc(doGetFileCopy):1336 temp: /var/tmp/AP_0xavfFJW/repodata/repomd.xml.key.new.zypp.KjZT0r
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaCurl.cc(doGetFileCopyFile):1129 /repodata/repomd.xml.key
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp++] MediaCurl.cc(doGetFileCopyFile):1139 URL: https://packages.cisofy.com/community/lynis/rpm/repodata/repomd.xml.key
2020-09-22 15:20:53 <3> 75efa8649c15(3199) [zypp] MediaCurl.cc(doGetFileCopyFile):1204 curl error: 22: The requested URL returned error: 404 , temp file size 0 bytes.
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 MediaCurl.cc(evaluateCurlCode):762 THROW:    File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 MediaCurl.cc(doGetFileCopyFile):1220 RETHROW:  File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 MediaMultiCurl.cc(doGetFileCopy):1364 RETHROW:  File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 15:20:53 <1> 75efa8649c15(3199) [zypp] PathInfo.cc(unlink):659 unlink /var/tmp/AP_0xavfFJW/repodata/repomd.xml.key.new.zypp.KjZT0r
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 MediaCurl.cc(getFileCopy):649 RETHROW:  File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 MediaSetAccess.cc(provide):266 CAUGHT:   File '/repodata/repomd.xml.key' not found on medium 'https://packages.cisofy.com/community/lynis/rpm/'
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 Fetcher.cc(provideToDest):556 RETHROW:  Signature verification failed for repomd.xml
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166 History:
2020-09-22 15:20:53 <5> 75efa8649c15(3199) [zypp] Exception.cc(log):166  - Can't provide /repodata/repomd.xml

Thank you!

Also it could be nice to have some news... or any kind of answers.

Nicolas Rodriguez

@n-rodriguez
Copy link

@mboelen what do you think?

@mcalmer
Copy link
Contributor

mcalmer commented Jun 23, 2022

Current zypper support also gpgkey option in the repository configuration.
At least with Leap 15.3 it works.
When using mod_repo with gpgautoimport: True, a refresh is called using --auto-import-gpg-keys, but it was not possible when you just want to call refresh_db() call.
My PR add this option now. I think with this everything here in this issue should work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug broken, incorrect, or confusing behavior severity-medium 3rd level, incorrect or bad functionality, confusing and lacks a work around State-Module
Projects
None yet
Development

Successfully merging a pull request may close this issue.

7 participants