apt_key: key does not seem to have been added. While the ID looks correct.

[dj-wasabi]

ISSUE TYPE

• Bug Report

COMPONENT NAME

apt_key

ANSIBLE VERSION

ansible 2.1.2.0
  config file = /git/ansible/vagrant/ansible.cfg
  configured module search path = Default w/o overrides

CONFIGURATION

OS / ENVIRONMENT

Executing Ansible on CentOS, running playbook against Debian.

SUMMARY

STEPS TO REPRODUCE

- name: "Debian | Install gpg key"
  apt_key: id=E709712C
           url=http://repo.zabbix.com/zabbix-official-repo.key
           state=present

EXPECTED RESULTS

Key is added.

ACTUAL RESULTS

fatal: [ansible]: FAILED! => {"changed": false, "failed": true, "id": "E709712C", "invocation": {"module_args": {"data": null, "file": null, "id": "E709712C", "key": null, "keyring": null, "keyserver": null, "state": "present", "url": "http://repo.zabbix.com/zabbix-official-repo.key", "validate_certs": true}, "module_name": "apt_key"}, "msg": "key does not seem to have been added"}

Strange thing, when using the id 79EA5ED4 it works?
(Or am I missing something?)

[ansibot]

@jvantuyl ping, this issue is waiting for your response.
click here for bot help

[ansibot]

@jvantuyl, ping. This issue is still waiting on your response.
click here for bot help

[jvantuyl]

needs_contributor

[abadger]

reproduced with Ubuntu14.04

With #5353 applied, this seems to work. However, I do notice that even with that PR applied removing a key does not work. Trying apt-key at the command line, it appears that apt-key doesn't understand how to delete with subkeys. apt-key also doesn't return an error in that case.

[abadger]

I can't fix the deletion problem without reimplementing /usr/bin/apt-key in our module but I've added better documentation and explicitly check that the key is deleted (and raise an error if it hasn't).

I pushed the fix into #5353 because the fix there fixes half of this one and these are both security related fixes that are likely to be backported.