SSH Error: Permission denied (publickey,password) - DigitalOcean

[fullyint]

Mind running the deploy command one more time with -vvvv and pasting the full output?
ansible-playbook -i hosts/staging deploy.yml --extra-vars "site=bedrock.com" -vvvv

[daniel]

@swalkinshaw

How To Configure SSH Key-Based Authentication on a Linux Server | DigitalOcean

I followed the walkthrough on this site to manually add my ssh key using:

ssh-copy-id web@45.55.241.241

(I had to first reset my password for the web user on the server as I had no idea what this was set to)

That got me passed the SSH Key issue but now I have a new issue

failed: [45.55.241.241] => (item={‘path’: ‘web/app/uploads’, ‘src’: ‘uploads’}) => {“failed”: true, “item”: {“path”: “web/app/uploads”, “src”: “uploads”}, “path”: “/srv/www/bedrock.com/releases/20150423201953/web/app/uploads”, “state”: “absent”}
msg: Error while linking: [Errno 2] No such file or directory

FATAL: all hosts have already failed – aborting

[daniel]

@fullyint - Here’s the full output:

ansible-playbook -i hosts/staging deploy.yml --extra-vars “site=bedrock.com” -vvvv

PLAY [Deploy WP site] *********************************************************

GATHERING FACTS ***************************************************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE setup
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835239.46-169090882513492 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835239.46-169090882513492 && echo $HOME/.ansible/tmp/ansible-tmp-1429835239.46-169090882513492’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpyp4J_m TO /home/web/.ansible/tmp/ansible-tmp-1429835239.46-169090882513492/setup
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835239.46-169090882513492/setup; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835239.46-169090882513492/ >/dev/null 2>&1’
ok: [45.55.241.241]

TASK: [deploy | Initialize] ***************************************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE deploy_helper path=“/srv/www/bedrock.com” state=present
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835244.12-66544580754692 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835244.12-66544580754692 && echo $HOME/.ansible/tmp/ansible-tmp-1429835244.12-66544580754692’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpOn7LyJ TO /home/web/.ansible/tmp/ansible-tmp-1429835244.12-66544580754692/deploy_helper
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835244.12-66544580754692/deploy_helper; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835244.12-66544580754692/ >/dev/null 2>&1’
ok: [45.55.241.241] => {“ansible_facts”: {“deploy_helper”: {“current_path”: “/srv/www/bedrock.com/current”, “new_release”: “20150423202404”, “new_release_path”: “/srv/www/bedrock.com/releases/20150423202404”, “previous_release”: null, “previous_release_path”: null, “project_path”: “/srv/www/bedrock.com”, “releases_path”: “/srv/www/bedrock.com/releases”, “shared_path”: “/srv/www/bedrock.com/shared”, “unfinished_filename”: “DEPLOY_UNFINISHED”}}, “changed”: false, “state”: “present”}

TASK: [deploy | Clone project files] ******************************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE git repo= dest=“/srv/www/bedrock.com/shared/source” version=“master” accept_hostkey=yes
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835245.16-120691099126435 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835245.16-120691099126435 && echo $HOME/.ansible/tmp/ansible-tmp-1429835245.16-120691099126435’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpMTIAwe TO /home/web/.ansible/tmp/ansible-tmp-1429835245.16-120691099126435/git
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835245.16-120691099126435/git; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835245.16-120691099126435/ >/dev/null 2>&1’
ok: [45.55.241.241] => {“after”: “248546384754f1ae13f72f1a1ec243eaf81d0a87”, “before”: “248546384754f1ae13f72f1a1ec243eaf81d0a87”, “changed”: false}

TASK: [deploy | write unfinished file] ****************************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE file path=“/srv/www/bedrock.com/shared/source/DEPLOY_UNFINISHED” state=touch
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835251.95-128102627804567 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835251.95-128102627804567 && echo $HOME/.ansible/tmp/ansible-tmp-1429835251.95-128102627804567’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpx9VJ3h TO /home/web/.ansible/tmp/ansible-tmp-1429835251.95-128102627804567/file
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835251.95-128102627804567/file; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835251.95-128102627804567/ >/dev/null 2>&1’
changed: [45.55.241.241] => {“changed”: true, “dest”: “/srv/www/bedrock.com/shared/source/DEPLOY_UNFINISHED”, “gid”: 33, “group”: “www-data”, “mode”: “0644”, “owner”: “web”, “size”: 0, “state”: “file”, “uid”: 1000}

TASK: [deploy | Copy files to new build dir] **********************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE command cp -pr /srv/www/bedrock.com/shared/source /srv/www/bedrock.com/releases/20150423202404
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835253.01-187975690550935 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835253.01-187975690550935 && echo $HOME/.ansible/tmp/ansible-tmp-1429835253.01-187975690550935’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpkBRrW2 TO /home/web/.ansible/tmp/ansible-tmp-1429835253.01-187975690550935/command
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835253.01-187975690550935/command; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835253.01-187975690550935/ >/dev/null 2>&1’
changed: [45.55.241.241] => {“changed”: true, “cmd”: [“cp”, “-pr”, “/srv/www/bedrock.com/shared/source”, “/srv/www/bedrock.com/releases/20150423202404”], “delta”: “0:00:00.020942”, “end”: “2015-04-23 20:24:13.824129”, “rc”: 0, “start”: “2015-04-23 20:24:13.803187”, “stderr”: “”, “stdout”: “”, “warnings”: }

TASK: [deploy | Move project subtree into root folder] ************************
skipping: [45.55.241.241]

TASK: [deploy | Remove unwanted files/folders from new release] ***************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE file path=“/srv/www/bedrock.com/releases/20150423202404/.git” state=absent
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835254.09-133873997428035 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835254.09-133873997428035 && echo $HOME/.ansible/tmp/ansible-tmp-1429835254.09-133873997428035’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpaLXVw0 TO /home/web/.ansible/tmp/ansible-tmp-1429835254.09-133873997428035/file
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835254.09-133873997428035/file; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835254.09-133873997428035/ >/dev/null 2>&1’
changed: [45.55.241.241] => (item=.git) => {“changed”: true, “item”: “.git”, “path”: “/srv/www/bedrock.com/releases/20150423202404/.git”, “state”: “absent”}

TASK: [deploy | Run pre_build_commands_local on Ansible host] *****************
skipping: [45.55.241.241]

TASK: [deploy | Copy project local files] *************************************
skipping: [45.55.241.241]

TASK: [deploy | Copy project templates] ***************************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835255.09-529137414642 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835255.09-529137414642 && echo $HOME/.ansible/tmp/ansible-tmp-1429835255.09-529137414642’
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘rc=flag; [ -r /srv/www/bedrock.com/releases/20150423202404/.env ] || rc=2; [ -f /srv/www/bedrock.com/releases/20150423202404/.env ] || rc=1; [ -d /srv/www/bedrock.com/releases/20150423202404/.env ] && rc=3; python -V 2>/dev/null || rc=4; [ x"$rc" != “xflag” ] && echo "${rc} “/srv/www/bedrock.com/releases/20150423202404/.env && exit 0; (python -c '”’“'import hashlib; BLOCKSIZE = 65536; hasher = hashlib.sha1(); afile = open(”‘"’“‘/srv/www/bedrock.com/releases/20150423202404/.env’”‘"’“, “rb”) buf = afile.read(BLOCKSIZE) while len(buf) > 0: hasher.update(buf) buf = afile.read(BLOCKSIZE) afile.close() print(hasher.hexdigest())'”‘"’ 2>/dev/null) || (python -c ‘"’“'import sha; BLOCKSIZE = 65536; hasher = sha.sha(); afile = open(”‘"’“‘/srv/www/bedrock.com/releases/20150423202404/.env’”‘"’“, “rb”) buf = afile.read(BLOCKSIZE) while len(buf) > 0: hasher.update(buf) buf = afile.read(BLOCKSIZE) afile.close() print(hasher.hexdigest())'”‘"’ 2>/dev/null) || (echo ‘"’“'0 '”‘"’/srv/www/bedrock.com/releases/20150423202404/.env)’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpUMJrOe TO /home/web/.ansible/tmp/ansible-tmp-1429835255.09-529137414642/source
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpbLrlUm TO /home/web/.ansible/tmp/ansible-tmp-1429835255.09-529137414642/copy
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835255.09-529137414642/copy; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835255.09-529137414642/ >/dev/null 2>&1’
changed: [45.55.241.241] => (item={‘dest’: ‘.env’, ‘src’: ‘roles/deploy/templates/env.j2’, ‘name’: ‘.env config’}) => {“changed”: true, “checksum”: “4ec357d01f1c372b44fb51d9071708ff628c2cf9”, “dest”: “/srv/www/bedrock.com/releases/20150423202404/.env”, “gid”: 33, “group”: “www-data”, “item”: {“dest”: “.env”, “name”: “.env config”, “src”: “roles/deploy/templates/env.j2”}, “md5sum”: “1f3c5af870c3fdb143511dbe15cd4e45”, “mode”: “0644”, “owner”: “web”, “size”: 347, “src”: “/home/web/.ansible/tmp/ansible-tmp-1429835255.09-529137414642/source”, “state”: “file”, “uid”: 1000}

TASK: [deploy | Run pre_build_commands in the new_release_path] ***************
skipping: [45.55.241.241]

TASK: [deploy | Check if project folders exist] *******************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE stat path=“/srv/www/bedrock.com/current/vendor”
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835256.76-125569270747672 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835256.76-125569270747672 && echo $HOME/.ansible/tmp/ansible-tmp-1429835256.76-125569270747672’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpOOiDvK TO /home/web/.ansible/tmp/ansible-tmp-1429835256.76-125569270747672/stat
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835256.76-125569270747672/stat; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835256.76-125569270747672/ >/dev/null 2>&1’
ok: [45.55.241.241] => (item=vendor) => {“changed”: false, “item”: “vendor”, “stat”: {“exists”: false}}

TASK: [deploy | Copy project folders] *****************************************
skipping: [45.55.241.241] => (item={‘invocation’: {‘module_name’: u’stat’, ‘module_args’: u’path=“/srv/www/bedrock.com/current/vendor”‘}, ‘item’: ‘vendor’, u’stat’: {u’exists’: False}, u’changed’: False})

TASK: [deploy | Ensure shared sources are present] ****************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE file path=“/srv/www/bedrock.com/shared/uploads” state=“directory”
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835257.72-183071889507253 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835257.72-183071889507253 && echo $HOME/.ansible/tmp/ansible-tmp-1429835257.72-183071889507253’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpWpeu6y TO /home/web/.ansible/tmp/ansible-tmp-1429835257.72-183071889507253/file
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835257.72-183071889507253/file; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835257.72-183071889507253/ >/dev/null 2>&1’
ok: [45.55.241.241] => (item={‘path’: ‘web/app/uploads’, ‘src’: ‘uploads’}) => {“changed”: false, “gid”: 33, “group”: “www-data”, “item”: {“path”: “web/app/uploads”, “src”: “uploads”}, “mode”: “0755”, “owner”: “web”, “path”: “/srv/www/bedrock.com/shared/uploads”, “size”: 4096, “state”: “directory”, “uid”: 1000}

TASK: [deploy | Ensure shared paths are absent] *******************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE file path=“/srv/www/bedrock.com/releases/20150423202404/web/app/uploads” state=absent
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835258.76-200400019701731 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835258.76-200400019701731 && echo $HOME/.ansible/tmp/ansible-tmp-1429835258.76-200400019701731’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmp5u0uyr TO /home/web/.ansible/tmp/ansible-tmp-1429835258.76-200400019701731/file
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835258.76-200400019701731/file; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835258.76-200400019701731/ >/dev/null 2>&1’
ok: [45.55.241.241] => (item={‘path’: ‘web/app/uploads’, ‘src’: ‘uploads’}) => {“changed”: false, “item”: {“path”: “web/app/uploads”, “src”: “uploads”}, “path”: “/srv/www/bedrock.com/releases/20150423202404/web/app/uploads”, “state”: “absent”}

TASK: [deploy | Create shared symlinks] ***************************************
<45.55.241.241> ESTABLISH CONNECTION FOR USER: web
<45.55.241.241> REMOTE_MODULE file path=“/srv/www/bedrock.com/releases/20150423202404/web/app/uploads” src=“/srv/www/bedrock.com/shared/uploads” state=link
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘mkdir -p $HOME/.ansible/tmp/ansible-tmp-1429835259.8-233836316771629 && chmod a+rx $HOME/.ansible/tmp/ansible-tmp-1429835259.8-233836316771629 && echo $HOME/.ansible/tmp/ansible-tmp-1429835259.8-233836316771629’
<45.55.241.241> PUT /var/folders/xy/1kc57lfs7rn18nrjdpypxmxh0000gn/T/tmpxkJXPk TO /home/web/.ansible/tmp/ansible-tmp-1429835259.8-233836316771629/file
<45.55.241.241> EXEC ssh -C -tt -vvv -o ForwardAgent=yes -o ControlMaster=auto -o ControlPersist=60s -o ControlPath=“/Users/danielbell/.ansible/cp/ansible-ssh-%h-%p-%r” -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=web -o ConnectTimeout=10 45.55.241.241 /bin/sh -c ‘LANG=en_US.UTF-8 LC_CTYPE=en_US.UTF-8 /usr/bin/python /home/web/.ansible/tmp/ansible-tmp-1429835259.8-233836316771629/file; rm -rf /home/web/.ansible/tmp/ansible-tmp-1429835259.8-233836316771629/ >/dev/null 2>&1’
failed: [45.55.241.241] => (item={‘path’: ‘web/app/uploads’, ‘src’: ‘uploads’}) => {“failed”: true, “item”: {“path”: “web/app/uploads”, “src”: “uploads”}, “path”: “/srv/www/bedrock.com/releases/20150423202404/web/app/uploads”, “state”: “absent”}
msg: Error while linking: [Errno 2] No such file or directory

FATAL: all hosts have already failed – aborting

PLAY RECAP ********************************************************************
to retry, use: --limit @/Users/danielbell/deploy.retry

45.55.241.241 : ok=11 changed=4 unreachable=0 failed=1

[daniel]

Going to open up a new topic with this new issue. I guess I’ll consider this solved for now even though I foresee this becoming a hassle. I’ll see if the rest of the team runs into the same issue before I worry about it too much.

Thanks again for all your help!

[swalkinshaw]

What’s your folder structure of the repository you deployed like? Is Bedrock the root folder? Or a sub-folder like we have here: https://github.com/roots/roots-example-project.com

If so, you need to set subtree like here

[daniel]

Ok, that deffinetly sounds like it could be part of the issue. However when I add that like so:

local_path: ‘…/bedrock’ # path targeting local Bedrock project directory (relative to Ansible root)
repo: git@bitbucket.org:newbird/bedrock.git
subtree: bedrock
multisite:
enabled: false
subdomains: false

and then try to deploy again, I get this:

TASK: [deploy | Move project subtree into root folder] ************************
fatal: [45.55.241.241] => error while evaluating conditional: bedrock

[swalkinshaw]

What version of Ansible are you running?

[timichango]

Stupid question (just because I’m on the cusp of jumping into the same challenge getting this configured as well, and I’m watching with great interest), but… why is the github_ssh_keys list thusly named?

How does github factor into the deployment at all if my/whomever’s project isn’t hosted on github?

And doesn’t the bedrock-ansible deployment use the local dev files to produce and transmit the deployment to staging/prod (or if I don’t even have a github account)?

How can we simply reference an ssh key that exists on our local machine to authenticate the deployment?

[daniel]

I believe I have the most recent version considering I just installed this 3 days ago. But, just in case, how do I check which version I am currently using?

[darjanpanic]

@timichango I think github ssh is used so the production server can clone the github repo etc. It’s like a 3 way communication, between

local <-> production server <-> github repo (and github <-> local of course)

So in a way all 3 need to be connected with ssh keys. For some of the above errors, i had to login to the DO droplet (after provision) as “web” user and create a SSH key for him and add it to github. And then try the deploy.

Although i get he same error: error while evaluating conditional at end.

[fullyint]

Here’s my understanding. Corrections welcome.

Q. How does ‘root’ connect to remote (e.g., to run server.yml playbook)?
A. ‘root’ uses pub key you added when initially spinning up DO droplet

Q. How does ‘web’ user connect to remote (e.g., to run deploy.yml playbook)?
A. ‘web’ user uses pub key added to remote for ‘web’ user.

Q. Wait, how was a pub key added to remote for ‘web’ user?
A. If you defined the github_ssh_keys dictionary, the server.yml playbook used that info to retrieve the public key from github and load it on your remote for ‘web’ to use.

Q. Why not just have bedrock-ansible copy up my pub key instead going to github to get it?
A. It’s a mere convenience, but also, what if you want to add a pub key for ‘randomguy’ user so he can deploy too, but you don’t have that key on your local machine? Just add randomguy’s github username to the github_ssh_keys list and bedrock-ansible will get it for you (courtesy of the exceptionally intelligent @austinpray here).

Q. Err… but if I don’t have my pub key on github and don’t want to add it… how do I get a pub key on remote server for ‘web’ user to use?
A. Manually load up your pub key on the remote for ‘web’ user (e.g., after running server.yml. Lots of searchable info out there on how.

Q. How does my remote server make the connection to a private repo (github or other) to clone/install?
A. github_ssh_keys actually doesn’t have anything to do with this. You should have SSH Forwarding set up, which allows the remote server to use your local machine’s credentials to connect to the private repo.

Q. So, what’s with the name github_ssh_keys again?
A. It’s not that you use these keys to connect to a github repo (deploy.yml will use ssh forwarding to connect to private repo). Rather, bedrock-ansible will conveniently fetch any pub ssh keys from github that you specify, then load them on the server for users to use (like for ‘web’ user).

Q. I want more of this ssh stuff. MORE!
A. see the SSH Keys wiki

Q. So, how do I get some files on the server if I don’t want to have the server clone them from a repo?
A. Check out how bedrock-ansible makes it possible to sync files from your local machine upon each deployment.

Q. How do I check my Ansible version?
A. Lots of searchable info on this out there.

@darjanpanic Regarding “error while evaluating conditional”, I suspect your group_vars/<environment> files may be missing the ssl enabled false info like this, but not sure without more details. If the problem persists, you could start a new thread.

Let’s put any new specific and focused questions in new threads.

[swalkinshaw]

Added these to our Wiki page: https://github.com/roots/bedrock-ansible/wiki/SSH-Keys

[fullyint]

@timichango

How can we simply reference an ssh key that exists on our local machine to authenticate the deployment?

@timichango I’d recommend adding your key to github and using bedrock-ansible’s defaults for loading up your key. That way you wouldn’t have to maintain an alteration to bedrock-ansible’s roles.

But Ansible’s authorized_key module makes it easy to load a key from your local machine to the server. If I were doing it, I’d add a task at the end of roles/users/tasks/main.yml:

- name: Add SSH key for web user
  authorized_key: user="{{ web_user }}" key="{{ lookup('file', '/local/path/to/public/key/id_rsa.pub') }}"

(wish those lines weren’t wrapping)

[evanfuture]

I’m having the same issue. The problem I’ve noticed is with the port :22. I’ve created the secure admin sudo user and password and can login to the droplet just fine with an ssh command. But if I try to ssh into the server:22, it tells me “Could not resolve hostname ...*:22: nodename nor servname provided, or not known”

Could this have to do with it?