./lib/pki-authority: line 77: declare: -g: invalid option about ansible-pki HOT 9 CLOSED

This error means that your Ansible Controller host has too old bash. The pki-authority scriipt executed on Ansible Controller requires at least bash 4.3. You either should upgrade the bash on your system, or create a VM that will be used as Ansible Controller with required bash version. For example, using Debian Jessie should be sufficient.

from ansible-pki.

Thanks. It could be. I'm using bash 3.2.57 under MacOSX

➜  openzero-debops git:(master) bash --version
GNU bash, version 3.2.57(1)-release (x86_64-apple-darwin15)
Copyright (C) 2007 Free Software Foundation, Inc.

from ansible-pki.

@zhang-yujun Where you able to identify the problem?

from ansible-pki.

@ypid Not understanding your question. I'm using ansible-pki in MacOSX. The default bash version is 3.2.57

from ansible-pki.

You opened this issue describing a problem you had/have? with this role. Some time has past now and I would like to know if it really was your old version of bash causing the problems and if you could resolve this. In case it is your bash version, a assertion in the role might be a good idea to catch such problems early and give better hints.

from ansible-pki.

@ypid I see. Thanks for getting back to me.

Sorry, but I don't have the environment for verify this issue for now. I'll let you know once I confirm it.

from ansible-pki.

I'm afraid that this issue will persist on MacOS X due to use of ancient bash as the default on this platform. I suppose that this warrants the rewrite of at least pki-authority script to Python, however my concerns with this is amount of shell-outs to the OpenSSL/GnuTLS utilities that would be needed. Or maybe the script could just use Python libraries for these operations? I don't use MacOS X, so I'm not sure about the different versions of the librariies that are available, and judging by bash that might be important as well.

from ansible-pki.

@drybjed What do you think about an assert at the top of the role to check if bash is recent enough.

from ansible-pki.

Sounds good to me. debops.dhparam role has something similar.

from ansible-pki.