Question: ansible-galaxy ignore git-credentials

[SLedunois]

Question

Hello,

I just installed Semaphore and I’m using roles/collections that are hosted on a private GitLab, which therefore requires authentication.
When running a task, ansible-galaxy tries to install the dependencies, but it seems the Git credentials are not taken into account.

After some research, I have:

• Configured my .gitconfig to point to the .git-credentials:

[credential]
    helper = "store --file=<path_to_git_credentials>"

• Created a variable group with the environment variable GIT_CONFIG_GLOBAL pointing to the .gitconfig
• Added this variable group to my Ansible template
• Added this variable group to a Bash template

This works perfectly fine with the following Bash script:

# !/bin/bash

whoami
printenv | more

ansible-galaxy role install -r requirements.yml --force

However, it doesn’t work at all when running an Ansible playbook. I always end up with the following log:

4:39:59 PMStarting galaxy role install process
4:39:59 PM[WARNING]: - <role_name> was NOT installed successfully: - command
4:39:59 PM/usr/bin/git clone https://<git> drupal_install_role failed in directory
4:39:59 PM/appli/semaphore/project_1/.ansible/tmp/ansible-local-114046rvfapy4o/tmpwf2a00zk (rc=128) - Cloning into
4:39:59 PM'<role_name>'... fatal: could not read Username for 'https://<git>': No such device or address
4:39:59 PMERROR! - you can use --ignore-errors to skip failed roles and finish processing the list.

Do you have any idea how to fix this, or is this a bug?

Thanks,

SLedunois

Related to

Ansible (task execution)

[fiftin]

Hi @SLedunois I'm sure it is problem with Semaphore behaviour - Semaphore overrides %HOME% env variable to a project directory.

[SLedunois]

Hello @fiftin ,

I did notice in the Bash template that the HOME variable is overridden by Semaphore.
That’s why I set the Git environment variable GIT_CONFIG_GLOBAL to point to the .gitconfig file, and running ansible-galaxy manually works perfectly fine in the Bash template. However, it doesn’t work in the Ansible template.

[SLedunois]

@fiftin any fix idea ?