mirror of
https://github.com/trailofbits/algo.git
synced 2026-08-17 21:25:50 +02:00
de11b86060
Add pre-flight check in main.yml that catches missing cryptography/SECP384R1
before deployment starts, replacing the cryptic error from community.crypto
internals with an actionable message pointing users to run ./algo or uv sync.
Root cause of the CI ipsec/both test failures: cryptography 46.0.5 wraps
the ec module with _ModuleWithDeprecations (for SECT curve deprecation),
which breaks community.crypto's ec.__dict__.get("SECP384R1") lookup.
The fix in community.crypto 3.1.1 uses getattr() instead.
Changes:
- Add SECP384R1 pre-flight check to main.yml (conditional on ipsec_enabled)
- Add cryptography>=42.0.0 as explicit dependency in pyproject.toml
- Upgrade community.crypto to >=3.1.1 (fixes __dict__ vs getattr bug)
- Add ansible-galaxy collection install step to CI
- Use venv Python interpreter for local deployments in add_host tasks
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
19 lines
418 B
YAML
19 lines
418 B
YAML
---
|
|
collections:
|
|
- name: ansible.posix
|
|
version: "==2.1.0"
|
|
- name: ansible.utils
|
|
version: ">=4.0.0"
|
|
- name: community.general
|
|
version: "==11.1.0"
|
|
- name: community.crypto
|
|
version: ">=3.1.1"
|
|
- name: openstack.cloud
|
|
version: "==2.4.1"
|
|
- name: linode.cloud
|
|
version: ">=0.41.0"
|
|
- name: community.digitalocean
|
|
version: ">=1.26.0"
|
|
- name: azure.azcollection
|
|
version: ">=3.0.0"
|