Flatcar image build fails on Proxmox VE - missing enable_containerd_audit variable

[LiquidPL]

Environment

• Make target: make build-proxmox-flatcar
• Run using container image? (Y/N): N (it does work on the container however, see below)
• Environment vars:

export PROXMOX_URL="https://<snip>:8006/api2/json"
export PROXMOX_USERNAME="image-builder@pve!image-builder"
export PROXMOX_TOKEN="<snip>"
export PROXMOX_NODE="proxmox"
export PROXMOX_ISO_POOL="local"
export PROXMOX_BRIDGE="vmbr0"
export PROXMOX_STORAGE_POOL="local-zfs"
export PACKER_FLAGS="-var disk_format=raw"

• Vars file:

What steps did you take and what happened?

I tried to build a Flatcar image on my Proxmox cluster using the latest main commit of the repo. The ansible part of the process failed with an error about a broken conditional. I added some ansible.builtin.debugs to the relevant task file, and it turns out that the enable_containerd_audit variable is empty, instead of the intended false default.

proxmox-iso.flatcar-stable-4230.2.1: TASK [node : ansible.builtin.debug] ********************************************
proxmox-iso.flatcar-stable-4230.2.1: ok: [default] => {
proxmox-iso.flatcar-stable-4230.2.1:     "enable_containerd_audit": ""
proxmox-iso.flatcar-stable-4230.2.1: }

What did you expect to happen?

The image to be built sucessfully.

Relevant log output

Log Output

roxmox-iso.flatcar-stable-4230.2.1: output will be in this color.

==> proxmox-iso.flatcar-stable-4230.2.1: Retrieving ISO
==> proxmox-iso.flatcar-stable-4230.2.1: Trying https://stable.release.flatcar-linux.net/amd64-usr/4230.2.1/flatcar_production_iso_image.iso
==> proxmox-iso.flatcar-stable-4230.2.1: Trying https://stable.release.flatcar-linux.net/amd64-usr/4230.2.1/flatcar_production_iso_image.iso?checksum=md5%3A1f190e5e574e94e354a281656c4153e6
==> proxmox-iso.flatcar-stable-4230.2.1: https://stable.release.flatcar-linux.net/amd64-usr/4230.2.1/flatcar_production_iso_image.iso?checksum=md5%3A1f190e5e574e94e354a281656c4153e6 => downloaded_iso_path/14eefc5f44cb606f333065279ab9f52f282549e3.iso
==> proxmox-iso.flatcar-stable-4230.2.1: Uploaded ISO to local:iso/14eefc5f44cb606f333065279ab9f52f282549e3.iso
==> proxmox-iso.flatcar-stable-4230.2.1: Creating VM
==> proxmox-iso.flatcar-stable-4230.2.1: No VM ID given, getting next free from Proxmox
==> proxmox-iso.flatcar-stable-4230.2.1: Starting VM
==> proxmox-iso.flatcar-stable-4230.2.1: Starting HTTP server on port 8192
==> proxmox-iso.flatcar-stable-4230.2.1: Waiting 3m0s for boot
==> proxmox-iso.flatcar-stable-4230.2.1: Typing the boot command
==> proxmox-iso.flatcar-stable-4230.2.1: Using SSH communicator to connect: 10.10.0.198
==> proxmox-iso.flatcar-stable-4230.2.1: Waiting for SSH to become available...
==> proxmox-iso.flatcar-stable-4230.2.1: Connected to SSH!
==> proxmox-iso.flatcar-stable-4230.2.1: Provisioning with shell script: /tmp/packer-shell4272311892
==> proxmox-iso.flatcar-stable-4230.2.1: Provisioning with shell script: ./packer/files/flatcar/scripts/bootstrap-flatcar.sh
==> proxmox-iso.flatcar-stable-4230.2.1: + mkdir -p /opt/bin
==> proxmox-iso.flatcar-stable-4230.2.1: + cd /opt/bin
==> proxmox-iso.flatcar-stable-4230.2.1: + [[ -e /opt/bin/.bootstrapped ]]
==> proxmox-iso.flatcar-stable-4230.2.1: + PYPY_HTTP_SOURCE=https://downloads.python.org/pypy
==> proxmox-iso.flatcar-stable-4230.2.1: + PYPY_VERSION=v7.3.11
==> proxmox-iso.flatcar-stable-4230.2.1: + PYTHON3_VERSION=3.9
==> proxmox-iso.flatcar-stable-4230.2.1: + PYTHON2_VERSION=2.7
==> proxmox-iso.flatcar-stable-4230.2.1: ++ uname -m
==> proxmox-iso.flatcar-stable-4230.2.1: + [[ x86_64 == \a\a\r\c\h\6\4 ]]
==> proxmox-iso.flatcar-stable-4230.2.1: + PYPY_ARCH=linux64
==> proxmox-iso.flatcar-stable-4230.2.1: + curl -sfL https://downloads.python.org/pypy/pypy2.7-v7.3.11-linux64.tar.bz2
==> proxmox-iso.flatcar-stable-4230.2.1: + tar -xjf -
==> proxmox-iso.flatcar-stable-4230.2.1: + mv -n pypy2.7-v7.3.11-linux64 pypy2
==> proxmox-iso.flatcar-stable-4230.2.1: + ln -s ./pypy2/bin/pypy python2
==> proxmox-iso.flatcar-stable-4230.2.1: + /opt/bin/python2 -m ensurepip
==> proxmox-iso.flatcar-stable-4230.2.1: DEPRECATION: A future version of pip will drop support for Python 2.7. More details about Python 2 support in pip, can be found at https://pip.pypa.io/en/latest/development/release-process/#python-2-support
==> proxmox-iso.flatcar-stable-4230.2.1: WARNING: The directory '/home/builder/.cache/pip' or its parent directory is not owned or is not writable by the current user. The cache has been disabled. Check the permissions and owner of that directory. If executing pip with sudo, you may want sudo's -H flag.
==> proxmox-iso.flatcar-stable-4230.2.1: Looking in links: /tmp/tmpPCOaJk
==> proxmox-iso.flatcar-stable-4230.2.1: Processing /tmp/tmpPCOaJk/setuptools-44.0.0-py2.py3-none-any.whl
==> proxmox-iso.flatcar-stable-4230.2.1: Processing /tmp/tmpPCOaJk/pip-20.0.2-py2.py3-none-any.whl
==> proxmox-iso.flatcar-stable-4230.2.1: Installing collected packages: setuptools, pip
==> proxmox-iso.flatcar-stable-4230.2.1: Successfully installed pip-20.0.2 setuptools-44.0.0
==> proxmox-iso.flatcar-stable-4230.2.1: + curl -sfL https://downloads.python.org/pypy/pypy3.9-v7.3.11-linux64.tar.bz2
==> proxmox-iso.flatcar-stable-4230.2.1: + tar -xjf -
==> proxmox-iso.flatcar-stable-4230.2.1: + mv -n pypy3.9-v7.3.11-linux64 pypy3
==> proxmox-iso.flatcar-stable-4230.2.1: + ln -s ./pypy3/bin/pypy3 python3
==> proxmox-iso.flatcar-stable-4230.2.1: + ln -s ./pypy3/bin/pypy3 python
==> proxmox-iso.flatcar-stable-4230.2.1: + /opt/bin/python --version
==> proxmox-iso.flatcar-stable-4230.2.1: Python 3.9.16 (feeb267ead3e6771d3f2f49b83e1894839f64fb7, Dec 29 2022, 14:23:21)
==> proxmox-iso.flatcar-stable-4230.2.1: [PyPy 7.3.11 with GCC 10.2.1 20210130 (Red Hat 10.2.1-11)]
==> proxmox-iso.flatcar-stable-4230.2.1: + /opt/bin/python3 -m ensurepip
==> proxmox-iso.flatcar-stable-4230.2.1: Looking in links: /tmp/tmpea8lwv58
==> proxmox-iso.flatcar-stable-4230.2.1: Processing /tmp/tmpea8lwv58/setuptools-58.1.0-py3-none-any.whl
==> proxmox-iso.flatcar-stable-4230.2.1: Processing /tmp/tmpea8lwv58/pip-22.0.4-py3-none-any.whl
==> proxmox-iso.flatcar-stable-4230.2.1: Installing collected packages: setuptools, pip
==> proxmox-iso.flatcar-stable-4230.2.1:   WARNING: The scripts pip3 and pip3.9 are installed in '/opt/bin/pypy3/bin' which is not on PATH.
==> proxmox-iso.flatcar-stable-4230.2.1:   Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
==> proxmox-iso.flatcar-stable-4230.2.1: Successfully installed pip-22.0.4 setuptools-58.1.0
==> proxmox-iso.flatcar-stable-4230.2.1: WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv
==> proxmox-iso.flatcar-stable-4230.2.1: + ./pypy3/bin/pip3 install virtualenv
==> proxmox-iso.flatcar-stable-4230.2.1: WARNING: The directory '/home/builder/.cache/pip' or its parent directory is not owned or is not writable by the current user. The cache has been disabled. Check the permissions and owner of that directory. If executing pip with sudo, you should use sudo's -H flag.
==> proxmox-iso.flatcar-stable-4230.2.1: Collecting virtualenv
==> proxmox-iso.flatcar-stable-4230.2.1:   Downloading virtualenv-20.33.1-py3-none-any.whl (6.1 MB)
==> proxmox-iso.flatcar-stable-4230.2.1:      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 6.1/6.1 MB 25.0 MB/s eta 0:00:00
==> proxmox-iso.flatcar-stable-4230.2.1: Collecting distlib<1,>=0.3.7
==> proxmox-iso.flatcar-stable-4230.2.1:   Downloading distlib-0.4.0-py2.py3-none-any.whl (469 kB)
==> proxmox-iso.flatcar-stable-4230.2.1:      ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 469.0/469.0 KB 14.7 MB/s eta 0:00:00
==> proxmox-iso.flatcar-stable-4230.2.1: Collecting filelock<4,>=3.12.2
==> proxmox-iso.flatcar-stable-4230.2.1:   Downloading filelock-3.18.0-py3-none-any.whl (16 kB)
==> proxmox-iso.flatcar-stable-4230.2.1: Collecting platformdirs<5,>=3.9.1
==> proxmox-iso.flatcar-stable-4230.2.1:   Downloading platformdirs-4.3.8-py3-none-any.whl (18 kB)
==> proxmox-iso.flatcar-stable-4230.2.1: Installing collected packages: distlib, platformdirs, filelock, virtualenv
==> proxmox-iso.flatcar-stable-4230.2.1:   WARNING: The script virtualenv is installed in '/opt/bin/pypy3/bin' which is not on PATH.
==> proxmox-iso.flatcar-stable-4230.2.1:   Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
==> proxmox-iso.flatcar-stable-4230.2.1: Successfully installed distlib-0.4.0 filelock-3.18.0 platformdirs-4.3.8 virtualenv-20.33.1
==> proxmox-iso.flatcar-stable-4230.2.1: WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv
==> proxmox-iso.flatcar-stable-4230.2.1: WARNING: You are using pip version 22.0.4; however, version 25.2 is available.
==> proxmox-iso.flatcar-stable-4230.2.1: You should consider upgrading via the '/opt/bin/python3 -m pip install --upgrade pip' command.
==> proxmox-iso.flatcar-stable-4230.2.1: + /opt/bin/pypy3/bin/virtualenv /opt/bin/builder-env
==> proxmox-iso.flatcar-stable-4230.2.1: created virtual environment PyPy3.9.16.final.0-64 in 672ms
==> proxmox-iso.flatcar-stable-4230.2.1:   creator PyPy3Posix(dest=/opt/bin/builder-env, clear=False, no_vcs_ignore=False, global=False)
==> proxmox-iso.flatcar-stable-4230.2.1:   seeder FromAppData(download=False, pip=bundle, setuptools=bundle, via=copy, app_data_dir=/home/builder/.local/share/virtualenv)
==> proxmox-iso.flatcar-stable-4230.2.1:     added seed packages: pip==25.1.1, setuptools==80.9.0
==> proxmox-iso.flatcar-stable-4230.2.1:   activators BashActivator,CShellActivator,FishActivator,NushellActivator,PowerShellActivator,PythonActivator
==> proxmox-iso.flatcar-stable-4230.2.1: + chown -R core /opt/bin/builder-env
==> proxmox-iso.flatcar-stable-4230.2.1: + ln -s builder-env/bin/pip /opt/bin/pip
==> proxmox-iso.flatcar-stable-4230.2.1: + ln -s builder-env/bin/pip /opt/bin/pip3
==> proxmox-iso.flatcar-stable-4230.2.1: + touch /opt/bin/.bootstrapped
==> proxmox-iso.flatcar-stable-4230.2.1: Provisioning with Ansible...
==> proxmox-iso.flatcar-stable-4230.2.1: Setting up proxy adapter for Ansible....
==> proxmox-iso.flatcar-stable-4230.2.1: Executing Ansible: ansible-playbook -e packer_build_name="flatcar-stable-4230.2.1" -e packer_builder_type=proxmox-iso -e packer_http_addr=10.10.0.100:8192 --ssh-extra-args '-o IdentitiesOnly=yes' --extra-vars containerd_gvisor_runtime=false containerd_gvisor_version=latest containerd_url=https://github.com/containerd/containerd/releases/download/v1.7.20/cri-containerd-cni-1.7.20-linux-amd64.tar.gz containerd_sha256=https://github.com/containerd/containerd/releases/download/v1.7.20/cri-containerd-cni-1.7.20-linux-amd64.tar.gz.sha256sum pause_image=registry.k8s.io/pause:3.10 containerd_additional_settings= containerd_cri_socket=/var/run/containerd/containerd.sock containerd_version=1.7.20 containerd_wasm_shims_url=https://github.com/deislabs/containerd-wasm-shims/releases/download/v0.11.1/containerd-wasm-shims-<RTVERSION>-<SHIM>-linux-x86_64.tar.gz containerd_wasm_shims_version=v0.11.1 containerd_wasm_shims_sha256={"lunatic":"7054bc882db755ce5f3ded46d114bfd4e0a318e437fa18a2601295d20b616b32","slight":"a6ea87d965037933a7d9edb5e20cfc175265c8e1ca92a16535f1f3c3f376f5b0","spin":"dcffedb8e4d2f585a851b3de489fa1e8a0054ec0ad72cf111c623623919245d0","wws":"e917f90692d798d80873aa0f37990c7d652f2846129d64fecbfd41ffa77799b8"} containerd_wasm_shims_runtimes="" containerd_wasm_shims_runtime_versions="{"lunatic":"v1","slight":"v1","spin":"v2","wws":"v1"}" crictl_url=https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.32.0/crictl-v1.32.0-linux-amd64.tar.gz crictl_sha256=https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.32.0/crictl-v1.32.0-linux-amd64.tar.gz.sha256 crictl_source_type=http custom_role_names="" firstboot_custom_roles_pre="" firstboot_custom_roles_post="" node_custom_roles_pre="" node_custom_roles_post="" node_custom_roles_post_sysprep="" disable_public_repos=false extra_debs="" extra_repos="" extra_rpms="" http_proxy= https_proxy= kubeadm_template=etc/kubeadm.yml kubernetes_apiserver_port=6443 kubernetes_cni_http_source=https://github.com/containernetworking/plugins/releases/download kubernetes_cni_http_checksum=sha256:https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz.sha256 kubernetes_goarch=amd64 kubernetes_http_source=https://dl.k8s.io/release kubernetes_container_registry=registry.k8s.io kubernetes_rpm_repo=https://pkgs.k8s.io/core:/stable:/v1.32/rpm/ kubernetes_rpm_gpg_key=https://pkgs.k8s.io/core:/stable:/v1.32/rpm/repodata/repomd.xml.key kubernetes_rpm_gpg_check=True kubernetes_deb_repo=https://pkgs.k8s.io/core:/stable:/v1.32/deb/ kubernetes_deb_gpg_key=https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key kubernetes_cni_deb_version= kubernetes_cni_rpm_version= kubernetes_cni_semver=v1.2.0 kubernetes_cni_source_type=http kubernetes_semver=v1.32.4 kubernetes_source_type=http kubernetes_load_additional_imgs=false kubernetes_deb_version=1.32.4-1.1 kubernetes_rpm_version=1.32.4 no_proxy= pip_conf_file= python_path=/opt/bin/builder-env/site-packages redhat_epel_rpm=https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm epel_rpm_gpg_key= reenable_public_repos=true remove_extra_repos=false systemd_prefix=/etc/systemd sysusr_prefix=/opt sysusrlocal_prefix=/opt load_additional_components=false additional_registry_images=false additional_registry_images_list= ecr_credential_provider=false additional_url_images=false additional_url_images_list= additional_executables=false additional_executables_list= additional_executables_destination_path= additional_s3=false build_target=virt amazon_ssm_agent_rpm= enable_containerd_audit= kubernetes_enable_automatic_resource_sizing= debug_tools=false ubuntu_repo=http://us.archive.ubuntu.com/ubuntu ubuntu_security_repo=http://security.ubuntu.com/ubuntu gpu_block_nouveau_loading= netplan_removal_excludes="" --extra-vars ansible_python_interpreter=/opt/bin/python oem_id=proxmoxve --extra-vars  --scp-extra-args "-O" -e ansible_ssh_private_key_file=/tmp/ansible-key3014454904 -i /tmp/packer-provisioner-ansible4041918025 /home/liquid/Documents/projects/other/infra/image-builder/images/capi/ansible/firstboot.yml
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: PLAY [Bootstrap Python] ********************************************************
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [Check if Python is installed] ********************************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: PLAY [all] *********************************************************************
==> proxmox-iso.flatcar-stable-4230.2.1: [WARNING]: sftp transfer mechanism failed on [127.0.0.1]. Use ANSIBLE_DEBUG=1 to see detailed information
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [Gathering Facts] *********************************************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [ansible.builtin.include_role : firstboot] ********************************
==> proxmox-iso.flatcar-stable-4230.2.1: included: firstboot for default
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: PLAY RECAP *********************************************************************
==> proxmox-iso.flatcar-stable-4230.2.1: default                    : ok=3    changed=0    unreachable=0    failed=0    skipped=105  rescued=0    ignored=0
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: Provisioning with shell script: /tmp/packer-shell274926572
==> proxmox-iso.flatcar-stable-4230.2.1: Pausing 10s before the next provisioner...
==> proxmox-iso.flatcar-stable-4230.2.1: Provisioning with Ansible...
==> proxmox-iso.flatcar-stable-4230.2.1: Setting up proxy adapter for Ansible....
==> proxmox-iso.flatcar-stable-4230.2.1: Executing Ansible: ansible-playbook -e packer_build_name="flatcar-stable-4230.2.1" -e packer_builder_type=proxmox-iso -e packer_http_addr=10.10.0.100:8192 --ssh-extra-args '-o IdentitiesOnly=yes' --extra-vars containerd_gvisor_runtime=false containerd_gvisor_version=latest containerd_url=https://github.com/containerd/containerd/releases/download/v1.7.20/cri-containerd-cni-1.7.20-linux-amd64.tar.gz containerd_sha256=https://github.com/containerd/containerd/releases/download/v1.7.20/cri-containerd-cni-1.7.20-linux-amd64.tar.gz.sha256sum pause_image=registry.k8s.io/pause:3.10 containerd_additional_settings= containerd_cri_socket=/var/run/containerd/containerd.sock containerd_version=1.7.20 containerd_wasm_shims_url=https://github.com/deislabs/containerd-wasm-shims/releases/download/v0.11.1/containerd-wasm-shims-<RTVERSION>-<SHIM>-linux-x86_64.tar.gz containerd_wasm_shims_version=v0.11.1 containerd_wasm_shims_sha256={"lunatic":"7054bc882db755ce5f3ded46d114bfd4e0a318e437fa18a2601295d20b616b32","slight":"a6ea87d965037933a7d9edb5e20cfc175265c8e1ca92a16535f1f3c3f376f5b0","spin":"dcffedb8e4d2f585a851b3de489fa1e8a0054ec0ad72cf111c623623919245d0","wws":"e917f90692d798d80873aa0f37990c7d652f2846129d64fecbfd41ffa77799b8"} containerd_wasm_shims_runtimes="" containerd_wasm_shims_runtime_versions="{"lunatic":"v1","slight":"v1","spin":"v2","wws":"v1"}" crictl_url=https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.32.0/crictl-v1.32.0-linux-amd64.tar.gz crictl_sha256=https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.32.0/crictl-v1.32.0-linux-amd64.tar.gz.sha256 crictl_source_type=http custom_role_names="" firstboot_custom_roles_pre="" firstboot_custom_roles_post="" node_custom_roles_pre="" node_custom_roles_post="" node_custom_roles_post_sysprep="" disable_public_repos=false extra_debs="" extra_repos="" extra_rpms="" http_proxy= https_proxy= kubeadm_template=etc/kubeadm.yml kubernetes_apiserver_port=6443 kubernetes_cni_http_source=https://github.com/containernetworking/plugins/releases/download kubernetes_cni_http_checksum=sha256:https://storage.googleapis.com/k8s-artifacts-cni/release/v1.2.0/cni-plugins-linux-amd64-v1.2.0.tgz.sha256 kubernetes_goarch=amd64 kubernetes_http_source=https://dl.k8s.io/release kubernetes_container_registry=registry.k8s.io kubernetes_rpm_repo=https://pkgs.k8s.io/core:/stable:/v1.32/rpm/ kubernetes_rpm_gpg_key=https://pkgs.k8s.io/core:/stable:/v1.32/rpm/repodata/repomd.xml.key kubernetes_rpm_gpg_check=True kubernetes_deb_repo=https://pkgs.k8s.io/core:/stable:/v1.32/deb/ kubernetes_deb_gpg_key=https://pkgs.k8s.io/core:/stable:/v1.32/deb/Release.key kubernetes_cni_deb_version= kubernetes_cni_rpm_version= kubernetes_cni_semver=v1.2.0 kubernetes_cni_source_type=http kubernetes_semver=v1.32.4 kubernetes_source_type=http kubernetes_load_additional_imgs=false kubernetes_deb_version=1.32.4-1.1 kubernetes_rpm_version=1.32.4 no_proxy= pip_conf_file= python_path=/opt/bin/builder-env/site-packages redhat_epel_rpm=https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm epel_rpm_gpg_key= reenable_public_repos=true remove_extra_repos=false systemd_prefix=/etc/systemd sysusr_prefix=/opt sysusrlocal_prefix=/opt load_additional_components=false additional_registry_images=false additional_registry_images_list= ecr_credential_provider=false additional_url_images=false additional_url_images_list= additional_executables=false additional_executables_list= additional_executables_destination_path= additional_s3=false build_target=virt amazon_ssm_agent_rpm= enable_containerd_audit= kubernetes_enable_automatic_resource_sizing= debug_tools=false ubuntu_repo=http://us.archive.ubuntu.com/ubuntu ubuntu_security_repo=http://security.ubuntu.com/ubuntu gpu_block_nouveau_loading= netplan_removal_excludes="" --extra-vars ansible_python_interpreter=/opt/bin/python oem_id=proxmoxve --extra-vars  --scp-extra-args "-O" -e ansible_ssh_private_key_file=/tmp/ansible-key1305232458 -i /tmp/packer-provisioner-ansible2020543605 /home/liquid/Documents/projects/other/infra/image-builder/images/capi/ansible/node.yml
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: PLAY [all] *********************************************************************
==> proxmox-iso.flatcar-stable-4230.2.1: [WARNING]: sftp transfer mechanism failed on [127.0.0.1]. Use ANSIBLE_DEBUG=1 to see detailed information
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [Gathering Facts] *********************************************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [ansible.builtin.include_role : node] *************************************
==> proxmox-iso.flatcar-stable-4230.2.1: included: node for default
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : ansible.builtin.include_tasks] ***********************************
==> proxmox-iso.flatcar-stable-4230.2.1: included: /home/liquid/Documents/projects/other/infra/image-builder/images/capi/ansible/roles/setup/tasks/bootstrap-flatcar.yml for default
==> proxmox-iso.flatcar-stable-4230.2.1: [WARNING]: raw module does not support the environment keyword
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : Check if bootstrap is needed] ************************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : Set the ansible_python_interpreter fact] *************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : Create system-environment-generators directory] ******************
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : Add env generator that includes system PATH on service path] *****
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : Enable systemd-timesyncd unit] ***********************************
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [setup : Start service systemd-timesyncd, if not started] *****************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [node : Ensure overlay module is present] *********************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [node : Ensure br_netfilter module is present] ****************************
==> proxmox-iso.flatcar-stable-4230.2.1: ok: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [node : Persist required kernel modules] **********************************
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [node : Set and persist kernel params] ************************************
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'net.bridge.bridge-nf-call-iptables', 'val': 1})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'net.bridge.bridge-nf-call-ip6tables', 'val': 1})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'net.ipv4.ip_forward', 'val': 1})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'net.ipv6.conf.all.forwarding', 'val': 1})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'net.ipv6.conf.all.disable_ipv6', 'val': 0})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'net.ipv4.tcp_congestion_control', 'val': 'bbr'})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'vm.overcommit_memory', 'val': 1})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'kernel.panic', 'val': 10})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'kernel.panic_on_oops', 'val': 1})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'fs.inotify.max_user_instances', 'val': 8192})
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default] => (item={'param': 'fs.inotify.max_user_watches', 'val': 524288})
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [node : Ensure auditd is running and comes on at reboot] ******************
==> proxmox-iso.flatcar-stable-4230.2.1: changed: [default]
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: TASK [node : Configure auditd rules for containerd (Flatcar)] ******************
==> proxmox-iso.flatcar-stable-4230.2.1: [ERROR]: Task failed: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: Task failed.
==> proxmox-iso.flatcar-stable-4230.2.1: Origin: /home/liquid/Documents/projects/other/infra/image-builder/images/capi/ansible/roles/node/tasks/main.yml:99:3
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: 97   when: ansible_os_family != "Flatcar" and enable_containerd_audit
==> proxmox-iso.flatcar-stable-4230.2.1: 98
==> proxmox-iso.flatcar-stable-4230.2.1: 99 - name: Configure auditd rules for containerd (Flatcar)
==> proxmox-iso.flatcar-stable-4230.2.1:      ^ column 3
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: <<< caused by >>>
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result.
==> proxmox-iso.flatcar-stable-4230.2.1: Origin: /home/liquid/Documents/projects/other/infra/image-builder/images/capi/ansible/roles/node/tasks/main.yml:106:9
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: 104     group: root
==> proxmox-iso.flatcar-stable-4230.2.1: 105     mode: "0644"
==> proxmox-iso.flatcar-stable-4230.2.1: 106   when: ansible_os_family == "Flatcar" and enable_containerd_audit
==> proxmox-iso.flatcar-stable-4230.2.1:             ^ column 9
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: Broken conditionals can be temporarily allowed with the `ALLOW_BROKEN_CONDITIONALS` configuration option.
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: fatal: [default]: FAILED! => {"changed": false, "msg": "Task failed: Conditional result was '' of type 'str', which evaluates to False. Conditionals must have a boolean result."}
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: PLAY RECAP *********************************************************************
==> proxmox-iso.flatcar-stable-4230.2.1: default                    : ok=14   changed=6    unreachable=0    failed=1    skipped=310  rescued=0    ignored=0
==> proxmox-iso.flatcar-stable-4230.2.1:
==> proxmox-iso.flatcar-stable-4230.2.1: Provisioning step had errors: Running the cleanup provisioner, if present...
==> proxmox-iso.flatcar-stable-4230.2.1: Stopping VM
==> proxmox-iso.flatcar-stable-4230.2.1: Deleting VM
Build 'proxmox-iso.flatcar-stable-4230.2.1' errored after 5 minutes 36 seconds: Error executing Ansible: Non-zero exit status: exit status 2

Anything else you would like to add?

I figure this might be an issue with a newer version of Ansible, since the build completed successfully using the container - the container appears to use version 2.15.1, whereas my local workstation has 2.19.0.

$ make build-proxmox-flatcar 
hack/ensure-python.sh
Checking if python is available
Python 3.13.5
hack/ensure-ansible.sh
ansible [core 2.19.0]
Starting galaxy collection install process
Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`.
hack/ensure-packer.sh
Packer is already installed, checking version...
existing packer version: 1.14.0
unsupported packer version (1.14.0) found
current packer version: 1.14.0 is not supported
Downgrading packer to 1.9.5
Installing packer v1.9.5 in .local/bin
packer_1.9.5_linux_amd64.zip: OK
Archive:  packer_1.9.5_linux_amd64.zip
  inflating: packer                  
'packer' has been installed to /home/liquid/Documents/projects/other/infra/image-builder/images/capi/.local/bin, make sure this directory is in your $PATH

---

/kind bug

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale