Skip to content

can't pull keys over IPv6 #862

@ganey

Description

@ganey

Hi, i've been using the datadog agent module for a while and it's been struggling to pull the keys.

When i ping keys.datadoghq.com i get ipv6 addresses by default.

When puppet module tries to pull the keys, it errors (because i imagine it's defaulting to ipv6)

DATADOG_APT_KEY_CURRENT.public is imported in APT keyring]/returns: change from 'notrun' to ['0'] failed: '/bin/cat /tmp/DATADOG_APT_KEY_CURRENT.public | gpg --import --batch --no-default-keyring --keyring /usr/share/keyrings/datadog-archive-keyring.gpg' returned 2 instead of one of [0] (corrective)
Notice: /Stage[main]/Datadog_agent::Ubuntu/Exec[ensure key 5F1E256061D813B125E156E8E6266D4AC0962C7D is imported in APT keyring]/returns: /bin/cat: /tmp/5F1E256061D813B125E156E8E6266D4AC0962C7D: No such file or directory
...

if i add an ipv4 address i get from ping -4 keys.datadoghq.com to /etc/hosts it works fine.

I've tried addingaddress_family = inet to puppet [main] try and force ipv4 but this also didn't work.

I verified the ipv6 issue with curl -6 https://keys.datadoghq.com/DATADOG_APT_KEY_CURRENT.public

Is there a reason you don't make the files available through cloudfront on ipv6?

If i need to report this somewhere else, where would the best place be?

Thanks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions