GPG Error installing amplify in Ubuntu Focal (20lts)

[ChrisMcKee]

• Ubuntu 20.04lts (focal)

During packer creation the amplify step fails

    amazon-ebs.nginx-ami: TASK [nginxinc.nginx : Debug NGINX output] *************************************
    amazon-ebs.nginx-ami: skipping: [127.0.0.1]
    amazon-ebs.nginx-ami:
    amazon-ebs.nginx-ami: TASK [nginxinc.nginx : Configure logrotate for NGINX] **************************
    amazon-ebs.nginx-ami: skipping: [127.0.0.1]
    amazon-ebs.nginx-ami:
    amazon-ebs.nginx-ami: TASK [nginxinc.nginx : Install NGINX Amplify] **********************************
    amazon-ebs.nginx-ami: included: /tmp/packer-provisioner-ansible-local/620679bd-4084-fd12-1773-88a5b7506141/roles/nginxinc.nginx/tasks/amplify/install-amplify.yml for 127.0.0.1
    amazon-ebs.nginx-ami:
    amazon-ebs.nginx-ami: TASK [nginxinc.nginx : Configure NGINX Amplify agent repository] ***************
    amazon-ebs.nginx-ami: included: /tmp/packer-provisioner-ansible-local/620679bd-4084-fd12-1773-88a5b7506141/roles/nginxinc.nginx/tasks/amplify/setup-debian.yml for 127.0.0.1
    amazon-ebs.nginx-ami:
    amazon-ebs.nginx-ami: TASK [nginxinc.nginx : (Debian/Ubuntu) Add NGINX Amplify agent repository] *****
    amazon-ebs.nginx-ami: skipping: [127.0.0.1]
    amazon-ebs.nginx-ami:
    amazon-ebs.nginx-ami: TASK [nginxinc.nginx : (Ubuntu 20.04) Add NGINX Amplify agent repository] ******
    amazon-ebs.nginx-ami: fatal: [127.0.0.1]: FAILED! => {"changed": false, "msg": "Failed to update apt cache: W:GPG error: https://packages.amplify.nginx.com/py3/ubuntu focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ABF5BD827BD9BF62, E:The repository 'https://packages.amplify.nginx.com/py3/ubuntu focal InRelease' is not signed."}

[ChrisMcKee]

The centos/amz install task seem to setup the gpg the debian one doesnt (unless theres a default i'm missing)
The install script at https://raw.githubusercontent.com/nginxinc/nginx-amplify-agent/master/packages/install.sh adds the key

# Add public key for package verification (Ubuntu/Debian)
add_public_key_deb() {
    printf "\033[32m ${step}. Adding public key ...\033[0m"

    check_downloader && \
    ${downloader} ${downloader_opts} ${public_key_url} | \
    ${sudo_cmd} apt-key add - > /dev/null 2>&1

    if [ $? -ne 0 ]; then
        printf "\033[31m failed.\033[0m\n\n"
        exit 1
    else
        printf "\033[32m done.\033[0m\n"
    fi
}

[alessfg]

So as it turns out the issue was a bit deeper than what you initially suspected -- if you are interested I would recommend checking out #492 😄

[ChrisMcKee]

Ah; the original fix made it work for our packer release on 20.04; I didnt see the /py3/ in the install script so thats a new one. Good catch 👍