Problem in create new algo instance, missing openssl

[aavbsouza]

Describe the bug

Installation fails with a missin openssl message

A clear and concise description of what the bug is.

Trying to create a new instance using digital ocean

TASK [strongswan : Build the CA pair] *********************************************************************************************************************************************************************************************************************************************************************************************************************
fatal: [000.00.000.00 -> localhost]: FAILED! => {"changed": true, "cmd": "umask 077; openssl ecparam -name secp384r1 -out ecparams/secp384r1.pem && openssl req -utf8 -new -newkey ec:ecparams/secp384r1.pem -config <(cat openssl.cnf <(printf \"[basic_exts]\\nsubjectAltName=IP:000.00.000.00,IP:0000:0000:0:00::0000:0000\")) -keyout private/cakey.pem -out cacert.pem -x509 -days 3650 -batch -passout pass:\"XM_gLy9@QEcmqi5g\" && touch 000.00.000.00_ca_generated\n", "delta": "0:00:00.001885", "end": "2023-08-10 09:28:23.223664", "msg": "non-zero return code", "rc": 127, "start": "2023-08-10 09:28:23.221779", "stderr": "bash: line 1: openssl: command not found", "stderr_lines": ["bash: line 1: openssl: command not found"], "stdout": "", "stdout_lines": []}

To Reproduce

Perform a standard installation, as per the documentation

Expected behavior

No error installation

Additional context

Using latest commit

Full log

PLAY [localhost] ******************************************************************************************************************************************************************************************************************************************************************************************************************************************

TASK [Gathering Facts] ************************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

TASK [Playbook dir stat] **********************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

TASK [Ensure Ansible is not being run in a world writable directory] **************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost] => {
    "changed": false,
    "msg": "All assertions passed"
}
[DEPRECATION WARNING]: Use 'ansible.utils.ipaddr' module instead. This feature will be removed from ansible.netcommon in a release after 2024-01-01. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.
[WARNING]: The value '' is not a valid IP address or network, passing this value to ipaddr filter might result in breaking change in future.

TASK [Ensure the requirements installed] ******************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

TASK [Set required ansible version as a fact] *************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost] => (item=ansible==6.1.0)

TASK [Just get the list from default pip] *****************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

TASK [Verify Python meets Algo VPN requirements] **********************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost] => {
    "changed": false,
    "msg": "All assertions passed"
}

TASK [Verify Ansible meets Algo VPN requirements] *********************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost] => {
    "changed": false,
    "msg": "All assertions passed"
}
[WARNING]: Found variable using reserved name: no_log

PLAY [Ask user for the input] *****************************************************************************************************************************************************************************************************************************************************************************************************************************

TASK [Gathering Facts] ************************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[Cloud prompt]
What provider would you like to use?
    1. DigitalOcean
    2. Amazon Lightsail
    3. Amazon EC2
    4. Microsoft Azure
    5. Google Compute Engine
    6. Hetzner Cloud
    7. Vultr
    8. Scaleway
    9. OpenStack (DreamCompute optimised)
    10. CloudStack (Exoscale optimised)
    11. Linode
    12. Install to existing Ubuntu latest LTS server (for more advanced users)
  
Enter the number of your desired provider
:
1^M
TASK [Cloud prompt] ***************************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

TASK [Set facts based on the input] ***********************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[VPN server name prompt]
Name the vpn server
[algo]
:
^M
TASK [VPN server name prompt] *****************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[Cellular On Demand prompt]
Do you want macOS/iOS clients to enable "Connect On Demand" when connected to cellular networks?
[y/N]
:
^M
TASK [Cellular On Demand prompt] **************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[Wi-Fi On Demand prompt]
Do you want macOS/iOS clients to enable "Connect On Demand" when connected to Wi-Fi?
[y/N]
:
^M
TASK [Wi-Fi On Demand prompt] *****************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[Retain the PKI prompt]
Do you want to retain the keys (PKI)? (required to add users in the future, but less secure)
[y/N]
:
^M
TASK [Retain the PKI prompt] ******************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[DNS adblocking prompt]
Do you want to enable DNS ad blocking on this VPN server?
[y/N]
:
y^M
TASK [DNS adblocking prompt] ******************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]
[SSH tunneling prompt]
Do you want each user to have their own account for SSH tunneling?
[y/N]
:
^M
TASK [SSH tunneling prompt] *******************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

TASK [Set facts based on the input] ***********************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

PLAY [Provision the server] *******************************************************************************************************************************************************************************************************************************************************************************************************************************

TASK [Gathering Facts] ************************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [localhost]

--> Please include the following block of text when reporting issues:

Algo running on: Fedora Linux 38 (Workstation Edition)
Created from git clone. Last commit: 1cf3d8d Add CODEOWNERS file (#14599)
Python 3.11.4
Runtime variables:
    algo_provider "digitalocean"
    algo_ondemand_cellular "False"
    algo_ondemand_wifi "False"
    algo_ondemand_wifi_exclude "X251bGw="
    algo_dns_adblocking "True"
    algo_ssh_tunneling "False"
    wireguard_enabled "True"
    dns_encryption "True"



TASK [strongswan : Ensure the files exist] ****************************************************************************************************************************************************************************************************************************************************************************************************************
changed: [000.00.000.00 -> localhost] => (item=.rnd)
changed: [000.00.000.00 -> localhost] => (item=private/.rnd)
changed: [000.00.000.00 -> localhost] => (item=index.txt)
changed: [000.00.000.00 -> localhost] => (item=index.txt.attr)
changed: [000.00.000.00 -> localhost] => (item=serial)

TASK [strongswan : Generate the openssl server configs] ***************************************************************************************************************************************************************************************************************************************************************************************************
changed: [000.00.000.00 -> localhost]

TASK [strongswan : Build the CA pair] *********************************************************************************************************************************************************************************************************************************************************************************************************************
fatal: [000.00.000.00 -> localhost]: FAILED! => {"changed": true, "cmd": "umask 077; openssl ecparam -name secp384r1 -out ecparams/secp384r1.pem && openssl req -utf8 -new -newkey ec:ecparams/secp384r1.pem -config <(cat openssl.cnf <(printf \"[basic_exts]\\nsubjectAltName=IP:000.00.000.00,IP:0000:0000:0:00::0000:0000\")) -keyout private/cakey.pem -out cacert.pem -x509 -days 3650 -batch -passout pass:\"XM_gLy9@QEcmqi5g\" && touch 000.00.000.00_ca_generated\n", "delta": "0:00:00.001885", "end": "2023-08-10 09:28:23.223664", "msg": "non-zero return code", "rc": 127, "start": "2023-08-10 09:28:23.221779", "stderr": "bash: line 1: openssl: command not found", "stderr_lines": ["bash: line 1: openssl: command not found"], "stdout": "", "stdout_lines": []}

TASK [include_tasks] **************************************************************************************************************************************************************************************************************************************************************************************************************************************
included: /home/me/Downloads/algo/playbooks/rescue.yml for 000.00.000.00

TASK [debug] **********************************************************************************************************************************************************************************************************************************************************************************************************************************************
ok: [000.00.000.00] => {
    "fail_hint": [
        "Sorry, but something went wrong!",
        "Please check the troubleshooting guide.",
        "https://trailofbits.github.io/algo/troubleshooting.html"
    ]
}

TASK [Fail the installation] ******************************************************************************************************************************************************************************************************************************************************************************************************************************
fatal: [000.00.000.00]: FAILED! => {"changed": false, "msg": "Failed as requested from task"}

PLAY RECAP ************************************************************************************************************************************************************************************************************************************************************************************************************************************************
000.00.000.00              : ok=89   changed=52   unreachable=0    failed=1    skipped=12   rescued=1    ignored=0   
localhost                  : ok=44   changed=10   unreachable=0    failed=0    skipped=5    rescued=0    ignored=0