From fe9a9105cb91de1c92f1d0b361b1111b055a7118 Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Wed, 21 Aug 2024 14:00:06 +0900 Subject: [PATCH] Drop usage of 'update-ca-trust force-enable' ... because the subcommand does not exist actually. The command fails with the following error in recent CentOS Stream 9. ``` Error: Unknown command: force-enable Usage: /usr/bin/update-ca-trust [extract] [-o DIR|--output=DIR] Update the system trust store in /etc/pki/ca-trust/extracted. COMMANDS (absent/empty command): Same as the extract command described below. extract: Instruct update-ca-trust to scan the source configuration in /usr/share/pki/ca-trust-source and /etc/pki/ca-trust/source and produce updated versions of the consolidated configuration files stored below the /etc/pki/ca-trust/extracted directory hierarchy. EXTRACT OPTIONS -o DIR, --output=DIR: Write the extracted trust store into the given directory instead of updating /etc/pki/ca-trust/extracted. ``` Change-Id: I38bbfc08a73823d2fd6e00974e277130cbff7e12 --- manifests/params.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifests/params.pp b/manifests/params.pp index ab5af4766..4f8c1d7cf 100644 --- a/manifests/params.pp +++ b/manifests/params.pp @@ -4,7 +4,7 @@ class openstack_integration::params { 'RedHat': { $ca_bundle_cert_path = '/etc/ssl/certs/ca-bundle.crt' $cert_path = '/etc/pki/ca-trust/source/anchors/puppet_openstack.pem' - $update_ca_certs_cmd = '/usr/bin/update-ca-trust force-enable && /usr/bin/update-ca-trust extract' + $update_ca_certs_cmd = '/usr/bin/update-ca-trust extract' $mysql_charset = 'utf8' $mysql_collate = 'utf8_general_ci' $mysql_conf_dir = '/etc/my.cnf.d'