# Issue with custom apt sources created by deb822\_repository **URL:** \ **Category:** Get Help\ **Created:** [April 3, 2024, 6:34pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707 "2024-04-03T18:34:02Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![dulhaver](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dulhaver/32/1061_2.png) [@dulhaver](https://forum.ansible.com/u/dulhaver)\ **Post date:** [April 3, 2024, 6:34pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/1 "2024-04-03T18:34:02Z")
I try to get a grip on managing debian repositories with Ansible. ### Playbook ```yml --- - name: deploy java-react example hosts: all become: true vars: node_major: '20' java_version: 8 java_type: jdk tasks: - name: install python3-debian ansible.builtin.apt: name: python3-debian state: present update_cache: true become: true become_user: root - name: Add adptium repo using key from URL ansible.builtin.deb822_repository: name: adoptium # types: deb uris: https://packages.adoptium.net/artifactory/deb suites: '{{ ansible_distribution_release }}' components: main architectures: amd64 signed_by: https://packages.adoptium.net/artifactory/api/gpg/key/public - name: Add node repo using key from URL ansible.builtin.deb822_repository: name: node uris: https://deb.nodesource.com/node_{{ node_major }}.x suites: '{{ ansible_distribution_release }}' components: main architectures: amd64 signed_by: https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key - name: Install packages ansible.builtin.apt: # package: name: "{{ item }}" state: present update_cache: true loop: - temurin-{{ java_version }}-{{java_type}} # temurin-8-jdk - nodejs ``` now, the `install packages` TASK fails with updating apt apparently ```auto "msg": "E:Malformed entry 1 in sources file /etc/apt/sources.list.d/node.sources (Suite), E:The list of sources could not be read." ``` the `node.sources` file created looks like this ```auto sysop@nexus:/etc/apt/sources.list.d$ cat node.sources X-Repolib-Name: node URIs: https://deb.nodesource.com/node_20.x Components: main Architectures: amd64 Signed-By: /etc/apt/keyrings/node.asc Types: deb ``` Any idea, what I am doing wrong here? ---
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [April 3, 2024, 7:43pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/2 "2024-04-03T19:43:14Z")
A whitespace issue for the `suites`, try adding one additional spaces to the start of this line? > [@dulhaver](#): > > ```auto > - name: Add node repo using key from URL > ansible.builtin.deb822_repository: > name: node > uris: https://deb.nodesource.com/node_{{ node_major }}.x > suites: '{{ ansible_distribution_release }}' > > ``` [This is what I have for Node.js](https://git.coop/webarch/nodejs/-/blob/master/tasks/apt.yml) and this is the generated `node.sources` file: ```auto Allow-Downgrade-To-Insecure: no Allow-Insecure: no Allow-Weak: no Architectures: amd64 Check-Date: yes Check-Valid-Until: yes Components: main Enabled: yes X-Repolib-Name: node Signed-By: /etc/apt/keyrings/nodejs.gpg Suites: bookworm Types: deb URIs: https://deb.nodesource.com/node_20.x ``` ---
**Author:** ![dulhaver](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dulhaver/32/1061_2.png) [@dulhaver](https://forum.ansible.com/u/dulhaver)\ **Post date:** [April 6, 2024, 7:26pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/3 "2024-04-06T19:26:09Z")
> [@chris](#): > > A whitespace issue for the `suites`, try adding one additional spaces to the start of this line? sorry, my bad. There is I just made an error in the post. The task with such a wrong indentation would also just fail and not produce a keyfile that would not work I guess. Weirdly I can not edit my own post. So this is what it actually is. ```yml - name: Add node repo using key from URL ansible.builtin.deb822_repository: name: node uris: https://deb.nodesource.com/node_{{ node_major }}.x suites: '{{ ansible_distribution_release }}' components: main architectures: amd64 signed_by: https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key ``` thx for that [webarch / nodejs · GitLab](https://git.coop/webarch/nodejs) link though. ---
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [April 6, 2024, 8:03pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/4 "2024-04-06T20:03:19Z")
The issue is that the `Suites` line is missing from your `node.sources`? This is a guess but perhaps `ansible_distribution_release` is not defined and you need to add an explicit gather facts directive somewhere? > [@dulhaver](#): > > thx for that [webarch / nodejs · GitLab](https://git.coop/webarch/nodejs) link though. No problem, I’ve tried to work around the fact that the `deb822_repository` module doesn’t support diff mode and doesn’t have the option to produce backups. Another shortcoming is that it only allows one set of sources per file, which is not the default for the file in Ubuntu 24.04 or Debian Trixie, so separate files have to be generated, eg `ubuntu.sources` and `ubuntu-security.sources` etc. ---
**Author:** ![dulhaver](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dulhaver/32/1061_2.png) [@dulhaver](https://forum.ansible.com/u/dulhaver)\ **Post date:** [April 7, 2024, 9:06am UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/5 "2024-04-07T09:06:04Z")
this is how I figured out to make it work now ```yml - name: Add node repo with key from URL ansible.builtin.deb822_repository: name: node uris: https://deb.nodesource.com/node_{{ node_major }}.x suites: '{{ ansible_distribution_release }}' components: main architectures: amd64 signed_by: https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key trusted: true register: node_repo ``` where … ```yml trusted: true ``` brings the solution. * * * actually as I am writing this I believe there is some sort of mixup `trusted: true` solves an error equivalent to: `""signatures couldn't be verified""` ---
**Author:** ![chris](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/chris/32/293_2.png) [@chris](https://forum.ansible.com/u/chris)\ **Post date:** [April 7, 2024, 10:11am UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/6 "2024-04-07T10:11:52Z")
It’s odd that I don’t need `trusted: true`, the only other difference that perhaps has an effect here is the `signed_by`, I’m using a path to a local file rather than a URL 🤷 . ---
**Author:** ![dulhaver](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dulhaver/32/1061_2.png) [@dulhaver](https://forum.ansible.com/u/dulhaver)\ **Post date:** [April 10, 2024, 8:39pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/7 "2024-04-10T20:39:24Z")
actually I do not see through that role entirely, so it’s difficult to compare. But it would be probably beneficial not to need to use `trusted` I guess. all the Webarchitects stuff looks pretty cool and sophisticated. Probably I goo go-to-place for various stuff ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [May 10, 2024, 8:39pm UTC](https://forum.ansible.com/t/issue-with-custom-apt-sources-created-by-deb822-repository/4707/8 "2024-05-10T20:39:38Z")
Closed on May 10, 2024, 8:39pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.