diff --git a/core/focal/20211014-securedrop-2.1.0-rc2.log b/core/focal/20211014-securedrop-2.1.0-rc2.log
new file mode 100644
index 00000000..6dd6d48e
--- /dev/null
+++ b/core/focal/20211014-securedrop-2.1.0-rc2.log
@@ -0,0 +1,1159 @@
+[user@fpf-dev-dvm:~] $
+ $ git clone https://github.com/freedomofpress/securedrop
+Cloning into 'securedrop'...
+changing to directory securedrop
+[user@fpf-dev-dvm:~/securedrop] develop 25s ±
+ $ git tag -v 2.1.0-rc2
+object f6945d5e3784a458ba5f01721077ee150447fe3b
+type commit
+tag 2.1.0-rc2
+tagger Conor Schaefer <conor@freedom.press> 1634226880 -0700
+
+SecureDrop 2.1.0-rc2
+gpg: Signature made Thu 14 Oct 2021 08:54:44 AM PDT
+gpg:                using RSA key 0B095DF428491E147B615CD3F08893B959CAB065
+gpg: Good signature from "Conor Schaefer <conor@freedom.press>" [ultimate]
+gpg:                 aka "Conor Schaefer <conor.schaefer@gmail.com>" [ultimate]
+[user@fpf-dev-dvm:~/securedrop] develop 34s ±
+ $ git checkout 2.1.0-rc2
+Note: checking out '2.1.0-rc2'.
+
+You are in 'detached HEAD' state. You can look around, make experimental
+changes and commit them, and you can discard any commits you make in this
+state without impacting any branches by performing another checkout.
+
+If you want to create a new branch to retain commits you create, you may
+do so (now or later) by using -b with the checkout command again. Example:
+
+  git checkout -b <new-branch-name>
+
+HEAD is now at f6945d5e3 SecureDrop 2.1.0-rc2
+[user@fpf-dev-dvm:~/securedrop] f6945d5e3 44s ±
+ $ mkvirtualenv sd -a $PWD -p $(which python3)
+Already using interpreter /usr/bin/python3
+Using base prefix '/usr'
+New python executable in /home/user/.virtualenvs/sd/bin/python3
+Also creating executable in /home/user/.virtualenvs/sd/bin/python
+Installing setuptools, pkg_resources, pip, wheel...done.
+Setting project for sd to /home/user/securedrop
+[user@fpf-dev-dvm:~/securedrop] [sd] f6945d5e3 58s ±
+ $ pip install --require-hashes -r securedrop/requirements/python3/
+develop-requirements.in               docker-requirements.in                securedrop-app-code-requirements.in   setuptools-requirements.in            test-requirements.in                  translation-requirements.in
+develop-requirements.txt              docker-requirements.txt               securedrop-app-code-requirements.txt  setuptools-requirements.txt           test-requirements.txt                 translation-requirements.txt
+[user@fpf-dev-dvm:~/securedrop] [sd] f6945d5e3 58s ±
+ $ pip install --require-hashes -r securedrop/requirements/python3/develop-requirements.txt
+Collecting ansible-lint==4.2.0
+  Downloading ansible_lint-4.2.0-py2.py3-none-any.whl (57 kB)
+     |████████████████████████████████| 57 kB 3.4 MB/s
+Collecting ansible==2.9.26
+  Downloading ansible-2.9.26.tar.gz (14.3 MB)
+     |████████████████████████████████| 14.3 MB 15.2 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting apipkg==1.4
+  Downloading apipkg-1.4-py2.py3-none-any.whl (6.6 kB)
+Collecting argon2-cffi==20.1.0
+  Downloading argon2_cffi-20.1.0-cp35-abi3-manylinux1_x86_64.whl (97 kB)
+     |████████████████████████████████| 97 kB 8.0 MB/s
+Collecting arrow==0.10.0
+  Downloading arrow-0.10.0.tar.gz (86 kB)
+     |████████████████████████████████| 86 kB 5.7 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting aspy.yaml==1.3.0
+  Downloading aspy.yaml-1.3.0-py2.py3-none-any.whl (3.5 kB)
+Collecting astroid==2.5.2
+  Downloading astroid-2.5.2-py3-none-any.whl (222 kB)
+     |████████████████████████████████| 222 kB 32.7 MB/s
+Collecting attrs==20.2.0
+  Downloading attrs-20.2.0-py2.py3-none-any.whl (48 kB)
+     |████████████████████████████████| 48 kB 3.3 MB/s
+Collecting bandit==1.7.0
+  Downloading bandit-1.7.0-py3-none-any.whl (115 kB)
+     |████████████████████████████████| 115 kB 33.9 MB/s
+Collecting bcrypt==3.1.3
+  Downloading bcrypt-3.1.3.tar.gz (40 kB)
+     |████████████████████████████████| 40 kB 10.8 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting binaryornot==0.4.4
+  Downloading binaryornot-0.4.4-py2.py3-none-any.whl (9.0 kB)
+Collecting boto3==1.5.24
+  Downloading boto3-1.5.24-py2.py3-none-any.whl (128 kB)
+     |████████████████████████████████| 128 kB 48.1 MB/s
+Collecting boto==2.48.0
+  Downloading boto-2.48.0-py2.py3-none-any.whl (1.4 MB)
+     |████████████████████████████████| 1.4 MB 56.2 MB/s
+Collecting botocore==1.8.38
+  Downloading botocore-1.8.38-py2.py3-none-any.whl (4.1 MB)
+     |████████████████████████████████| 4.1 MB 104.1 MB/s
+Collecting cerberus==1.3.1
+  Downloading Cerberus-1.3.1.tar.gz (52 kB)
+     |████████████████████████████████| 52 kB 2.0 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting certifi==2017.7.27.1
+  Downloading certifi-2017.7.27.1-py2.py3-none-any.whl (349 kB)
+     |████████████████████████████████| 349 kB 44.2 MB/s
+Collecting cffi==1.14.5
+  Downloading cffi-1.14.5-cp37-cp37m-manylinux1_x86_64.whl (402 kB)
+     |████████████████████████████████| 402 kB 87.4 MB/s
+Collecting cfgv==2.0.1
+  Downloading cfgv-2.0.1-py2.py3-none-any.whl (7.4 kB)
+Collecting chardet==3.0.4
+  Downloading chardet-3.0.4-py2.py3-none-any.whl (133 kB)
+     |████████████████████████████████| 133 kB 34.7 MB/s
+Collecting charset-normalizer==2.0.3
+  Downloading charset_normalizer-2.0.3-py3-none-any.whl (35 kB)
+Collecting click-completion==0.5.2
+  Downloading click-completion-0.5.2.tar.gz (10 kB)
+  Preparing metadata (setup.py) ... done
+Collecting click-help-colors==0.8
+  Downloading click_help_colors-0.8-py3-none-any.whl (6.0 kB)
+Collecting click==7.1.2
+  Downloading click-7.1.2-py2.py3-none-any.whl (82 kB)
+     |████████████████████████████████| 82 kB 2.0 MB/s
+Collecting colorama==0.3.9
+  Downloading colorama-0.3.9-py2.py3-none-any.whl (20 kB)
+Collecting cookiecutter==1.6.0
+  Downloading cookiecutter-1.6.0-py2.py3-none-any.whl (50 kB)
+     |████████████████████████████████| 50 kB 11.8 MB/s
+Collecting cryptography==3.4.7
+  Downloading cryptography-3.4.7-cp36-abi3-manylinux2014_x86_64.whl (3.2 MB)
+     |████████████████████████████████| 3.2 MB 19.5 MB/s
+Collecting distro==1.5.0
+  Downloading distro-1.5.0-py2.py3-none-any.whl (18 kB)
+Collecting dnspython==1.15.0
+  Downloading dnspython-1.15.0-py2.py3-none-any.whl (177 kB)
+     |████████████████████████████████| 177 kB 34.6 MB/s
+Collecting docker==4.4.2
+  Downloading docker-4.4.2-py2.py3-none-any.whl (146 kB)
+     |████████████████████████████████| 146 kB 77.9 MB/s
+Collecting docopt==0.6.2
+  Downloading docopt-0.6.2.tar.gz (25 kB)
+  Preparing metadata (setup.py) ... done
+Collecting docutils==0.14
+  Downloading docutils-0.14-py3-none-any.whl (543 kB)
+     |████████████████████████████████| 543 kB 40.7 MB/s
+Collecting dparse==0.4.1
+  Downloading dparse-0.4.1.tar.gz (31 kB)
+  Preparing metadata (setup.py) ... done
+Collecting entrypoints==0.3
+  Downloading entrypoints-0.3-py2.py3-none-any.whl (11 kB)
+Collecting execnet==1.4.1
+  Downloading execnet-1.4.1-py2.py3-none-any.whl (40 kB)
+     |████████████████████████████████| 40 kB 7.9 MB/s
+Collecting fasteners==0.14.1
+  Downloading fasteners-0.14.1-py2.py3-none-any.whl (20 kB)
+Collecting flake8==3.7.7
+  Downloading flake8-3.7.7-py2.py3-none-any.whl (68 kB)
+     |████████████████████████████████| 68 kB 11.1 MB/s
+Collecting future==0.16.0
+  Downloading future-0.16.0.tar.gz (824 kB)
+     |████████████████████████████████| 824 kB 57.6 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting git-url-parse==1.0.2
+  Downloading git_url_parse-1.0.2-py3-none-any.whl (5.4 kB)
+Collecting gitdb2==2.0.3
+  Downloading gitdb2-2.0.3-py2.py3-none-any.whl (63 kB)
+     |████████████████████████████████| 63 kB 3.6 MB/s
+Collecting gitpython==2.1.8
+  Downloading GitPython-2.1.8-py2.py3-none-any.whl (448 kB)
+     |████████████████████████████████| 448 kB 27.9 MB/s
+Collecting html-linter==0.4.0
+  Downloading html-linter-0.4.0.tar.gz (19 kB)
+  Preparing metadata (setup.py) ... done
+Collecting identify==1.4.7
+  Downloading identify-1.4.7-py2.py3-none-any.whl (97 kB)
+     |████████████████████████████████| 97 kB 7.2 MB/s
+Collecting idna==2.5
+  Downloading idna-2.5-py2.py3-none-any.whl (55 kB)
+     |████████████████████████████████| 55 kB 1.1 MB/s
+Collecting importlib-metadata==0.23
+  Downloading importlib_metadata-0.23-py2.py3-none-any.whl (28 kB)
+Collecting importlib-resources==1.5.0
+  Downloading importlib_resources-1.5.0-py2.py3-none-any.whl (21 kB)
+Collecting iniconfig==1.0.1
+  Downloading iniconfig-1.0.1-py3-none-any.whl (4.2 kB)
+Collecting isort==5.8.0
+  Downloading isort-5.8.0-py3-none-any.whl (103 kB)
+     |████████████████████████████████| 103 kB 31.1 MB/s
+Collecting jinja2-time==0.2.0
+  Downloading jinja2_time-0.2.0-py2.py3-none-any.whl (6.4 kB)
+Collecting jinja2==2.11.3
+  Downloading Jinja2-2.11.3-py2.py3-none-any.whl (125 kB)
+     |████████████████████████████████| 125 kB 24.2 MB/s
+Collecting jmespath==0.9.3
+  Downloading jmespath-0.9.3-py2.py3-none-any.whl (23 kB)
+Collecting lazy-object-proxy==1.6.0
+  Downloading lazy_object_proxy-1.6.0-cp37-cp37m-manylinux1_x86_64.whl (55 kB)
+     |████████████████████████████████| 55 kB 6.0 MB/s
+Collecting markupsafe==1.1.1
+  Downloading MarkupSafe-1.1.1-cp37-cp37m-manylinux1_x86_64.whl (27 kB)
+Collecting mccabe==0.6.1
+  Downloading mccabe-0.6.1-py2.py3-none-any.whl (8.6 kB)
+Collecting molecule-vagrant==0.3
+  Downloading molecule_vagrant-0.3-py2.py3-none-any.whl (24 kB)
+Collecting molecule==3.0.2.1
+  Downloading molecule-3.0.2.1-py2.py3-none-any.whl (281 kB)
+     |████████████████████████████████| 281 kB 18.3 MB/s
+Collecting monotonic==1.4
+  Downloading monotonic-1.4-py2.py3-none-any.whl (5.3 kB)
+Collecting more-itertools==7.2.0
+  Downloading more_itertools-7.2.0-py3-none-any.whl (57 kB)
+     |████████████████████████████████| 57 kB 3.9 MB/s
+Collecting mypy-extensions==0.4.3
+  Downloading mypy_extensions-0.4.3-py2.py3-none-any.whl (4.5 kB)
+Collecting mypy==0.761
+  Downloading mypy-0.761-cp37-cp37m-manylinux1_x86_64.whl (24.1 MB)
+     |████████████████████████████████| 24.1 MB 13.6 MB/s
+Collecting netaddr==0.7.19
+  Downloading netaddr-0.7.19-py2.py3-none-any.whl (1.6 MB)
+     |████████████████████████████████| 1.6 MB 60.9 MB/s
+Collecting nodeenv==1.3.3
+  Downloading nodeenv-1.3.3.tar.gz (34 kB)
+  Preparing metadata (setup.py) ... done
+Collecting packaging==16.8
+  Downloading packaging-16.8-py2.py3-none-any.whl (23 kB)
+Collecting paramiko==2.6.0
+  Downloading paramiko-2.6.0-py2.py3-none-any.whl (199 kB)
+     |████████████████████████████████| 199 kB 50.5 MB/s
+Collecting pathspec==0.5.5
+  Downloading pathspec-0.5.5.tar.gz (21 kB)
+  Preparing metadata (setup.py) ... done
+Collecting pbr==5.1.1
+  Downloading pbr-5.1.1-py2.py3-none-any.whl (106 kB)
+     |████████████████████████████████| 106 kB 67.3 MB/s
+Collecting pep517==0.10.0
+  Downloading pep517-0.10.0-py2.py3-none-any.whl (19 kB)
+Collecting pexpect==4.6.0
+  Downloading pexpect-4.6.0-py2.py3-none-any.whl (57 kB)
+     |████████████████████████████████| 57 kB 8.3 MB/s
+Collecting pip-tools==6.1.0
+  Downloading pip_tools-6.1.0-py3-none-any.whl (44 kB)
+     |████████████████████████████████| 44 kB 4.3 MB/s
+Collecting pluggy==0.13.1
+  Downloading pluggy-0.13.1-py2.py3-none-any.whl (18 kB)
+Collecting poyo==0.4.1
+  Downloading poyo-0.4.1-py2.py3-none-any.whl (12 kB)
+Collecting pre-commit==1.18.3
+  Downloading pre_commit-1.18.3-py2.py3-none-any.whl (154 kB)
+     |████████████████████████████████| 154 kB 38.6 MB/s
+Collecting prompt_toolkit==2.0.9
+  Downloading prompt_toolkit-2.0.9-py3-none-any.whl (337 kB)
+     |████████████████████████████████| 337 kB 22.6 MB/s
+Collecting psutil==5.7.0
+  Downloading psutil-5.7.0.tar.gz (449 kB)
+     |████████████████████████████████| 449 kB 12.4 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting ptyprocess==0.5.2
+  Downloading ptyprocess-0.5.2-py2.py3-none-any.whl (39 kB)
+Collecting py==1.10.0
+  Downloading py-1.10.0-py2.py3-none-any.whl (97 kB)
+     |████████████████████████████████| 97 kB 13.5 MB/s
+Collecting pycodestyle==2.5.0
+  Downloading pycodestyle-2.5.0-py2.py3-none-any.whl (51 kB)
+     |████████████████████████████████| 51 kB 11.2 MB/s
+Collecting pycparser==2.18
+  Downloading pycparser-2.18.tar.gz (245 kB)
+     |████████████████████████████████| 245 kB 50.5 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting pyenchant==2.0.0
+  Downloading pyenchant-2.0.0.tar.gz (64 kB)
+     |████████████████████████████████| 64 kB 1.9 MB/s
+  Preparing metadata (setup.py) ... done
+Collecting pyflakes==2.1.1
+  Downloading pyflakes-2.1.1-py2.py3-none-any.whl (59 kB)
+     |████████████████████████████████| 59 kB 9.8 MB/s
+Collecting pylint==2.7.4
+  Downloading pylint-2.7.4-py3-none-any.whl (346 kB)
+     |████████████████████████████████| 346 kB 38.2 MB/s
+Collecting pynacl==1.4.0
+  Downloading PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl (961 kB)
+     |████████████████████████████████| 961 kB 58.8 MB/s
+Collecting pyparsing==2.2.0
+  Downloading pyparsing-2.2.0-py2.py3-none-any.whl (56 kB)
+     |████████████████████████████████| 56 kB 7.6 MB/s
+Collecting pytest-forked==1.3.0
+  Downloading pytest_forked-1.3.0-py2.py3-none-any.whl (4.7 kB)
+Collecting pytest-xdist==2.1.0
+  Downloading pytest_xdist-2.1.0-py3-none-any.whl (36 kB)
+Collecting pytest==6.1.1
+  Downloading pytest-6.1.1-py3-none-any.whl (272 kB)
+     |████████████████████████████████| 272 kB 44.0 MB/s
+Collecting python-dateutil==2.6.1
+  Downloading python_dateutil-2.6.1-py2.py3-none-any.whl (194 kB)
+     |████████████████████████████████| 194 kB 36.1 MB/s
+Collecting python-gilt==1.2.1
+  Downloading python_gilt-1.2.1-py3-none-any.whl (13 kB)
+Collecting python-vagrant==0.5.15
+  Downloading python-vagrant-0.5.15.tar.gz (29 kB)
+  Preparing metadata (setup.py) ... done
+Collecting pyyaml==5.4.1
+  Downloading PyYAML-5.4.1-cp37-cp37m-manylinux1_x86_64.whl (636 kB)
+     |████████████████████████████████| 636 kB 50.5 MB/s
+Collecting requests==2.26.0
+  Downloading requests-2.26.0-py2.py3-none-any.whl (62 kB)
+     |████████████████████████████████| 62 kB 1.5 MB/s
+Collecting ruamel.yaml.clib==0.2.0
+  Downloading ruamel.yaml.clib-0.2.0-cp37-cp37m-manylinux1_x86_64.whl (547 kB)
+     |████████████████████████████████| 547 kB 60.3 MB/s
+Collecting ruamel.yaml==0.16.10
+  Downloading ruamel.yaml-0.16.10-py2.py3-none-any.whl (111 kB)
+     |████████████████████████████████| 111 kB 75.4 MB/s
+Collecting s3transfer==0.1.12
+  Downloading s3transfer-0.1.12-py2.py3-none-any.whl (59 kB)
+     |████████████████████████████████| 59 kB 12.3 MB/s
+Collecting safety==1.8.7
+  Downloading safety-1.8.7-py2.py3-none-any.whl (14 kB)
+Collecting selinux==0.2.1
+  Downloading selinux-0.2.1-py2.py3-none-any.whl (4.3 kB)
+Collecting sh==1.12.14
+  Downloading sh-1.12.14-py2.py3-none-any.whl (38 kB)
+Collecting shellingham==1.3.2
+  Downloading shellingham-1.3.2-py2.py3-none-any.whl (11 kB)
+Collecting six==1.15.0
+  Downloading six-1.15.0-py2.py3-none-any.whl (10 kB)
+Collecting smmap2==2.0.3
+  Downloading smmap2-2.0.3-py2.py3-none-any.whl (27 kB)
+Collecting sqlalchemy-stubs==0.3
+  Downloading sqlalchemy_stubs-0.3-py3-none-any.whl (115 kB)
+     |████████████████████████████████| 115 kB 76.7 MB/s
+Collecting stevedore==1.28.0
+  Downloading stevedore-1.28.0-py2.py3-none-any.whl (39 kB)
+Collecting tabulate==0.8.7
+  Downloading tabulate-0.8.7-py3-none-any.whl (24 kB)
+Collecting template-remover==0.1.9
+  Downloading template-remover-0.1.9.tar.gz (7.1 kB)
+  Preparing metadata (setup.py) ... done
+Collecting testinfra==5.3.1
+  Downloading testinfra-5.3.1-py3-none-any.whl (69 kB)
+     |████████████████████████████████| 69 kB 12.9 MB/s
+Collecting toml==0.10.0
+  Downloading toml-0.10.0-py2.py3-none-any.whl (25 kB)
+Collecting tree-format==0.1.2
+  Downloading tree-format-0.1.2.tar.gz (4.0 kB)
+  Preparing metadata (setup.py) ... done
+Collecting typed-ast==1.4.1
+  Downloading typed_ast-1.4.1-cp37-cp37m-manylinux1_x86_64.whl (737 kB)
+     |████████████████████████████████| 737 kB 53.4 MB/s
+Collecting typing-extensions==3.7.4.1
+  Downloading typing_extensions-3.7.4.1-py3-none-any.whl (20 kB)
+Collecting urllib3==1.26.6
+  Downloading urllib3-1.26.6-py2.py3-none-any.whl (138 kB)
+     |████████████████████████████████| 138 kB 102.0 MB/s
+Collecting virtualenv==16.7.5
+  Downloading virtualenv-16.7.5-py2.py3-none-any.whl (3.3 MB)
+     |████████████████████████████████| 3.3 MB 13.1 MB/s
+Collecting wcwidth==0.1.7
+  Downloading wcwidth-0.1.7-py2.py3-none-any.whl (21 kB)
+Collecting websocket-client==0.44.0
+  Downloading websocket_client-0.44.0-py2.py3-none-any.whl (199 kB)
+     |████████████████████████████████| 199 kB 59.7 MB/s
+Collecting whichcraft==0.4.1
+  Downloading whichcraft-0.4.1-py2.py3-none-any.whl (5.1 kB)
+Collecting wrapt==1.12.1
+  Downloading wrapt-1.12.1.tar.gz (27 kB)
+  Preparing metadata (setup.py) ... done
+Collecting yamllint==1.17.0
+  Downloading yamllint-1.17.0-py2.py3-none-any.whl (57 kB)
+     |████████████████████████████████| 57 kB 8.2 MB/s
+Collecting zipp==0.6.0
+  Downloading zipp-0.6.0-py2.py3-none-any.whl (4.1 kB)
+Requirement already satisfied: pip==21.3 in /home/user/.virtualenvs/sd/lib/python3.7/site-packages (from -r securedrop/requirements/python3/develop-requirements.txt (line 839)) (21.3)
+Collecting setuptools==56.0.0
+  Downloading setuptools-56.0.0-py3-none-any.whl (784 kB)
+     |████████████████████████████████| 784 kB 40.7 MB/s
+Building wheels for collected packages: ansible, arrow, bcrypt, cerberus, click-completion, docopt, dparse, future, html-linter, nodeenv, pathspec, psutil, pycparser, pyenchant, python-vagrant, template-remover, tree-format, wrapt
+  Building wheel for ansible (setup.py) ... done
+  Created wheel for ansible: filename=ansible-2.9.26-py3-none-any.whl size=16206008 sha256=66d6a49129f6bf10e70942dd01f56bf2ee4446f98f7ff817d8f8bcf452a8f79d
+  Stored in directory: /home/user/.cache/pip/wheels/b1/a0/2b/e12e1655d6d3cbd8b9a8a8729eddaf1de2d1384db19a55198b
+  Building wheel for arrow (setup.py) ... done
+  Created wheel for arrow: filename=arrow-0.10.0-py2.py3-none-any.whl size=32869 sha256=f8434f802639ddfffcc06ae0899be8497949864de3134b30c38fc98b5b148b30
+  Stored in directory: /home/user/.cache/pip/wheels/08/04/41/fc01ef75aa14872805f2283ef01954a539700a7a6435cf52f1
+  Building wheel for bcrypt (setup.py) ... done
+  Created wheel for bcrypt: filename=bcrypt-3.1.3-cp37-cp37m-linux_x86_64.whl size=62563 sha256=7805ad4526c1a4055d3abcb23a4f1618e949046518e815b4dca60f6e4ea4a35a
+  Stored in directory: /home/user/.cache/pip/wheels/af/05/db/ec8bfecf1b99a175e62e918d2f891a5f9b1132d12ad2b32e6e
+  Building wheel for cerberus (setup.py) ... done
+  Created wheel for cerberus: filename=Cerberus-1.3.1-py3-none-any.whl size=54148 sha256=f70d69169430a492f626fd08ad750ee006c34d3f1e7e10e52786938d176784fc
+  Stored in directory: /home/user/.cache/pip/wheels/c6/d3/b0/ff1650a3cb6b6f19ea314ec517a17d88a1a4a1181b5a209836
+  Building wheel for click-completion (setup.py) ... done
+  Created wheel for click-completion: filename=click_completion-0.5.2-py3-none-any.whl size=11202 sha256=9574d8b91aa02584394ad80278c270187c9c104b6d4f8424dd6a978032aabc2a
+  Stored in directory: /home/user/.cache/pip/wheels/31/f0/f2/9a6863c99cbafd28edbad2f52336fa296e267a83378d57babd
+  Building wheel for docopt (setup.py) ... done
+  Created wheel for docopt: filename=docopt-0.6.2-py2.py3-none-any.whl size=13724 sha256=d8e9a2371bfb6f596e82cc7da429b74a4a3964b8f08495bbb8a1f77c9b52ec8a
+  Stored in directory: /home/user/.cache/pip/wheels/72/b0/3f/1d95f96ff986c7dfffe46ce2be4062f38ebd04b506c77c81b9
+  Building wheel for dparse (setup.py) ... done
+  Created wheel for dparse: filename=dparse-0.4.1-py3-none-any.whl size=19529 sha256=2dc56a30034f7628f10b104a48a0fc8fad167f192d7baee4262939bb6304c3fd
+  Stored in directory: /home/user/.cache/pip/wheels/71/4d/89/faf1d72f447af4ba171beff9447a110e24e28c530fba45d3da
+  Building wheel for future (setup.py) ... done
+  Created wheel for future: filename=future-0.16.0-py3-none-any.whl size=487809 sha256=c6de72b12719c88c60f1a561d6e2464596941e9eb56f60cb83f2b88573b9891e
+  Stored in directory: /home/user/.cache/pip/wheels/7c/09/6f/dfd31fb2ebe951aefbee461a0dfce1bdc2e4b2c1016e85d233
+  Building wheel for html-linter (setup.py) ... done
+  Created wheel for html-linter: filename=html_linter-0.4.0-py3-none-any.whl size=14337 sha256=c433ade6265e88b46f1b86ffda94539e9393d8882c09383194b5bd5be5e191d4
+  Stored in directory: /home/user/.cache/pip/wheels/2e/50/9f/73a163b49962de66a9bcc0707dbb1519f553371422ed91c200
+  Building wheel for nodeenv (setup.py) ... done
+  Created wheel for nodeenv: filename=nodeenv-1.3.3-py3-none-any.whl size=21369 sha256=79cf98080b429b4224585dff60b0013d840891e051d1ce7e204e2d771b277022
+  Stored in directory: /home/user/.cache/pip/wheels/13/d3/6f/0e01c0c62414f74a97916cc97047c088f6acc8ce617d1b37ff
+  Building wheel for pathspec (setup.py) ... done
+  Created wheel for pathspec: filename=pathspec-0.5.5-py3-none-any.whl size=24233 sha256=4ffcb99fb907b2f6d0ff752c5e035b7ecb025ca074ccf047a31801ac744c9855
+  Stored in directory: /home/user/.cache/pip/wheels/09/97/ce/98234adaab0cf5b2c3a1b6610ada24e6f7ab3675fff4e0b8b2
+  Building wheel for psutil (setup.py) ... done
+  Created wheel for psutil: filename=psutil-5.7.0-cp37-cp37m-linux_x86_64.whl size=282526 sha256=59c642de0850fac802dbfcd8e3884e670c4ae1bda01e23219e41ca3aa5fa250e
+  Stored in directory: /home/user/.cache/pip/wheels/b6/e7/50/aee9cc966163d74430f13f208171dee22f11efa4a4a826661c
+  Building wheel for pycparser (setup.py) ... done
+  Created wheel for pycparser: filename=pycparser-2.18-py2.py3-none-any.whl size=205753 sha256=fe9a8523a71f5acd80beac8d86a50ac1dc5f2679b99a9ebbfcbd4a1ee4724c1a
+  Stored in directory: /home/user/.cache/pip/wheels/5d/c6/29/87a8bb797e60b55a91bd0a1e8455365c5f5dff9fc45c05f3e4
+  Building wheel for pyenchant (setup.py) ... done
+  Created wheel for pyenchant: filename=pyenchant-2.0.0-py2.py3.cp27.cp32.cp33.cp34.cp35.cp36.pp27.pp33.pp35-none-any.whl size=71165 sha256=2a362afa7e3ebcd2cbf809aab74ddff134ed3936376f27afb9ba0c5d7bd86d60
+  Stored in directory: /home/user/.cache/pip/wheels/b3/a1/1f/9f401bb462dc2815fad237aa51b7fc9c6ea68760a468a5113f
+  Building wheel for python-vagrant (setup.py) ... done
+  Created wheel for python-vagrant: filename=python_vagrant-0.5.15-py3-none-any.whl size=18448 sha256=84663e11f578e1ef18637b3b202104f88d3cb4483255928a8082f899aa9ff578
+  Stored in directory: /home/user/.cache/pip/wheels/a1/9e/8f/6d84a01c39978f584d03e873cbd99d2c41415695a0fa5c1f5c
+  Building wheel for template-remover (setup.py) ... done
+  Created wheel for template-remover: filename=template_remover-0.1.9-py3-none-any.whl size=7048 sha256=b9ccb68ac80cbbb9db71c453be25d6e88cdb8d7fadc954832c170e82a24421ac
+  Stored in directory: /home/user/.cache/pip/wheels/18/3f/f0/67e5e9e4ed02275ac31bf76b2fca329ae79687eaf5913ee8f3
+  Building wheel for tree-format (setup.py) ... done
+  Created wheel for tree-format: filename=tree_format-0.1.2-py3-none-any.whl size=5412 sha256=5849e74f7bc4dafb37ed976bf820624d1d708f92ce0cf4de27f56214d6bf36c5
+  Stored in directory: /home/user/.cache/pip/wheels/dd/b2/d1/6ac00b8fe427c28f3f3a39563977cd0667296720b3d9c19f6a
+  Building wheel for wrapt (setup.py) ... done
+  Created wheel for wrapt: filename=wrapt-1.12.1-cp37-cp37m-linux_x86_64.whl size=73469 sha256=eb9b314ca41c1c42f704534769da1d93fd0c065529c8c4431f6bb6a41de5f82b
+  Stored in directory: /home/user/.cache/pip/wheels/62/76/4c/aa25851149f3f6d9785f6c869387ad82b3fd37582fa8147ac6
+Successfully built ansible arrow bcrypt cerberus click-completion docopt dparse future html-linter nodeenv pathspec psutil pycparser pyenchant python-vagrant template-remover tree-format wrapt
+Installing collected packages: six, more-itertools, zipp, python-dateutil, pycparser, markupsafe, urllib3, pyyaml, pyparsing, pbr, monotonic, jinja2, importlib-metadata, idna, click, charset-normalizer, chardet, cffi, certifi, arrow, whichcraft, virtualenv, toml, smmap2, shellingham, sh, requests, pynacl, py, ptyprocess, poyo, pluggy, pathspec, packaging, nodeenv, jmespath, jinja2-time, iniconfig, identify, git-url-parse, future, fasteners, docutils, cryptography, colorama, cfgv, binaryornot, bcrypt, attrs, aspy.yaml, yamllint, wrapt, typing-extensions, typed-ast, tree-format, tabulate, setuptools, ruamel.yaml.clib, python-gilt, pytest, pre-commit, pexpect, paramiko, mypy-extensions, lazy-object-proxy, gitdb2, docopt, distro, cookiecutter, click-help-colors, click-completion, cerberus, botocore, apipkg, ansible, websocket-client, wcwidth, template-remover, stevedore, selinux, s3transfer, ruamel.yaml, python-vagrant, pytest-forked, pyflakes, pycodestyle, pep517, mypy, molecule, mccabe, isort, gitpython, execnet, entrypoints, dparse, astroid, testinfra, sqlalchemy-stubs, safety, pytest-xdist, pylint, pyenchant, psutil, prompt-toolkit, pip-tools, netaddr, molecule-vagrant, importlib-resources, html-linter, flake8, docker, dnspython, boto3, boto, bandit, argon2-cffi, ansible-lint
+  Attempting uninstall: setuptools
+    Found existing installation: setuptools 58.2.0
+    Uninstalling setuptools-58.2.0:
+      Successfully uninstalled setuptools-58.2.0
+Successfully installed ansible-2.9.26 ansible-lint-4.2.0 apipkg-1.4 argon2-cffi-20.1.0 arrow-0.10.0 aspy.yaml-1.3.0 astroid-2.5.2 attrs-20.2.0 bandit-1.7.0 bcrypt-3.1.3 binaryornot-0.4.4 boto-2.48.0 boto3-1.5.24 botocore-1.8.38 cerberus-1.3.1 certifi-2017.7.27.1 cffi-1.14.5 cfgv-2.0.1 chardet-3.0.4 charset-normalizer-2.0.3 click-7.1.2 click-completion-0.5.2 click-help-colors-0.8 colorama-0.3.9 cookiecutter-1.6.0 cryptography-3.4.7 distro-1.5.0 dnspython-1.15.0 docker-4.4.2 docopt-0.6.2 docutils-0.14 dparse-0.4.1 entrypoints-0.3 execnet-1.4.1 fasteners-0.14.1 flake8-3.7.7 future-0.16.0 git-url-parse-1.0.2 gitdb2-2.0.3 gitpython-2.1.8 html-linter-0.4.0 identify-1.4.7 idna-2.5 importlib-metadata-0.23 importlib-resources-1.5.0 iniconfig-1.0.1 isort-5.8.0 jinja2-2.11.3 jinja2-time-0.2.0 jmespath-0.9.3 lazy-object-proxy-1.6.0 markupsafe-1.1.1 mccabe-0.6.1 molecule-3.0.2.1 molecule-vagrant-0.3 monotonic-1.4 more-itertools-7.2.0 mypy-0.761 mypy-extensions-0.4.3 netaddr-0.7.19 nodeenv-1.3.3 packaging-16.8 paramiko-2.6.0 pathspec-0.5.5 pbr-5.1.1 pep517-0.10.0 pexpect-4.6.0 pip-tools-6.1.0 pluggy-0.13.1 poyo-0.4.1 pre-commit-1.18.3 prompt-toolkit-2.0.9 psutil-5.7.0 ptyprocess-0.5.2 py-1.10.0 pycodestyle-2.5.0 pycparser-2.18 pyenchant-2.0.0 pyflakes-2.1.1 pylint-2.7.4 pynacl-1.4.0 pyparsing-2.2.0 pytest-6.1.1 pytest-forked-1.3.0 pytest-xdist-2.1.0 python-dateutil-2.6.1 python-gilt-1.2.1 python-vagrant-0.5.15 pyyaml-5.4.1 requests-2.26.0 ruamel.yaml-0.16.10 ruamel.yaml.clib-0.2.0 s3transfer-0.1.12 safety-1.8.7 selinux-0.2.1 setuptools-56.0.0 sh-1.12.14 shellingham-1.3.2 six-1.15.0 smmap2-2.0.3 sqlalchemy-stubs-0.3 stevedore-1.28.0 tabulate-0.8.7 template-remover-0.1.9 testinfra-5.3.1 toml-0.10.0 tree-format-0.1.2 typed-ast-1.4.1 typing-extensions-3.7.4.1 urllib3-1.26.6 virtualenv-16.7.5 wcwidth-0.1.7 websocket-client-0.44.0 whichcraft-0.4.1 wrapt-1.12.1 yamllint-1.17.0 zipp-0.6.0
+[user@fpf-dev-dvm:~/securedrop] [sd] f6945d5e3 2m9s ±
+ $ make build-debs
+Building SecureDrop Debian packages for Focal...
+Using active Python 3 virtualenv in /home/user/.virtualenvs/sd
+--> Test matrix
+
+└── builder-focal
+    ├── destroy
+    ├── create
+    ├── converge
+    ├── verify
+    └── destroy
+
+--> Inventory /home/user/securedrop/molecule/builder-focal/../../install_files/ansible-base/group_vars linked to /home/user/.cache/molecule/securedrop/builder-focal/inventory/group_vars
+--> Scenario: 'builder-focal'
+--> Action: 'destroy'
+--> Sanity checks: 'docker'
+
+    PLAY [Destroy] *****************************************************************
+
+    TASK [Destroy molecule instance(s)] ********************************************
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-app'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-agent'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-server'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-agent2'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-server2'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-grsec'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-config'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-keyring'})
+    ok: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-sec-update'})
+    ok: [localhost] => (item={'groups': ['testers'], 'name': 'focal-sd-dpkg-verification'})
+
+    PLAY RECAP *********************************************************************
+    localhost                  : ok=1    changed=0    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
+
+--> Inventory /home/user/securedrop/molecule/builder-focal/../../install_files/ansible-base/group_vars linked to /home/user/.cache/molecule/securedrop/builder-focal/inventory/group_vars
+--> Scenario: 'builder-focal'
+--> Action: 'create'
+
+    PLAY [Create] ******************************************************************
+
+    TASK [debug] *******************************************************************
+    ok: [localhost] => {
+        "msg": "Building with Docker image quay.io/freedomofpress/sd-docker-builder-focal@sha256:c7a7af66cb509f1096aa9123eb27f83dd504effce8b9fdf0269b9432ee84a707"
+    }
+
+    TASK [Create builders] *********************************************************
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-app'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-agent'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-server'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-agent2'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-server2'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-grsec'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-config'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-keyring'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-sec-update'})
+    changed: [localhost] => (item={'groups': ['testers'], 'name': 'focal-sd-dpkg-verification'})
+
+    PLAY RECAP *********************************************************************
+    localhost                  : ok=2    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
+
+--> Inventory /home/user/securedrop/molecule/builder-focal/../../install_files/ansible-base/group_vars linked to /home/user/.cache/molecule/securedrop/builder-focal/inventory/group_vars
+--> Scenario: 'builder-focal'
+--> Action: 'converge'
+
+    PLAY [Build SecureDrop application Debian package from local repository.] ******
+
+    TASK [Gathering Facts] *********************************************************
+    ok: [focal-sd-generic-ossec-agent2]
+    ok: [focal-sd-sec-update]
+    ok: [focal-sd-keyring]
+    ok: [focal-sd-generic-ossec-agent]
+    ok: [focal-sd-generic-ossec-server]
+    ok: [focal-sd-grsec]
+    ok: [focal-sd-config]
+    ok: [focal-sd-generic-ossec-server2]
+    ok: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy install_files/securedrop-app-code to prep directory] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy app code to prep directory under var/www/securedrop] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy setup.py to prep directory] *****
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy MANIFEST.in to prep directory] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy translation-requirements.txt to prep directory] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy requirements.txt to prep directory] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Control the version of setuptools used in the default construction of virtual environments] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Install sass Ruby gem] ***************
+    changed: [focal-sd-app]
+
+    TASK [build-ossec-deb-pkg : Create src path folder] ****************************
+    changed: [focal-sd-generic-ossec-server] => (item=/tmp/build/ossec-server)
+    ok: [focal-sd-generic-ossec-server] => (item=/tmp/build)
+
+    TASK [build-securedrop-app-code-deb-pkg : Create static asset directories.] ****
+    changed: [focal-sd-app] => (item=/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64-prep/var/www/securedrop/static/css)
+    changed: [focal-sd-app] => (item=/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64-prep/var/www/securedrop/static/gen)
+    changed: [focal-sd-app] => (item=/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64-prep/var/www/securedrop/static/.webassets-cache)
+
+    TASK [build-securedrop-app-code-deb-pkg : Compile SASS to CSS.] ****************
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Remove temporary SASS directory from package build directory.] ***
+    changed: [focal-sd-app] => (item=sass)
+    changed: [focal-sd-app] => (item=.sass-cache)
+
+    TASK [build-ossec-deb-pkg : Install python-requests for URL fetching] **********
+    ok: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Copy over current directory for repo build] ********
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-securedrop-app-code-deb-pkg : Create virtualenv for translation work] ***
+    changed: [focal-sd-app]
+
+    TASK [build-ossec-deb-pkg : Include OSSEC download URLs.] **********************
+    ok: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Download OSSEC tarball.] ***************************
+    changed: [focal-sd-generic-ossec-server]
+[WARNING]: Module remote_tmp /root/.ansible/tmp did not exist and was created
+with a mode of 0700, this may cause issues when running as another user. To
+avoid this, create the remote_tmp dir with the correct permissions manually
+
+    TASK [build-ossec-deb-pkg : Download OSSEC signature.] *************************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC archive GPG key.] ***********************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Import OSSEC archive GPG key.] *********************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Verify signature of OSSEC tarball.] ****************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Create src path folder] ****************************
+    changed: [focal-sd-generic-ossec-agent] => (item=/tmp/build/ossec-agent)
+    ok: [focal-sd-generic-ossec-agent] => (item=/tmp/build)
+
+    TASK [build-ossec-deb-pkg : Install apt dependencies for building OSSEC packages.] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Install python-requests for URL fetching] **********
+    ok: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Extract OSSEC source tarball.] *********************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Create /etc directory within source directory.] ****
+    ok: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Copy over current directory for repo build] ********
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Include OSSEC download URLs.] **********************
+    ok: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC preloaded vars template.] ***************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Download OSSEC tarball.] ***************************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Disable JIT in OSSEC Makefile] *********************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Download OSSEC signature.] *************************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC archive GPG key.] ***********************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Import OSSEC archive GPG key.] *********************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Verify signature of OSSEC tarball.] ****************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Ensure package name is set] **************************
+    ok: [focal-sd-generic-ossec-server2] => {
+        "changed": false,
+        "msg": "All assertions passed"
+    }
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-sec-update -> localhost]
+    ok: [focal-sd-config -> localhost]
+
+    TASK [build-generic-pkg : Ensure build directory in-place] *********************
+    ok: [focal-sd-generic-ossec-server2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent2 -> localhost]
+    ok: [focal-sd-grsec -> localhost]
+    ok: [focal-sd-keyring -> localhost]
+
+    TASK [build-generic-pkg : Copy app code to build directory.] *******************
+    changed: [focal-sd-generic-ossec-server2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server2 -> localhost]
+
+    TASK [build-generic-pkg : Create any necessary parent directories for jinja files] ***
+    ok: [focal-sd-generic-ossec-server2] => (item={'path': '/home/user/securedrop/install_files/securedrop-ossec-server/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 911, 'inode': 131959, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Ensure package name is set] **************************
+    ok: [focal-sd-generic-ossec-agent2] => {
+        "changed": false,
+        "msg": "All assertions passed"
+    }
+
+    TASK [build-generic-pkg : Ensure build directory in-place] *********************
+    ok: [focal-sd-generic-ossec-agent2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-sec-update -> localhost]
+    ok: [focal-sd-config -> localhost]
+
+    TASK [build-generic-pkg : Template out any jinja files found and copy over] ****
+    changed: [focal-sd-generic-ossec-server2] => (item={'path': '/home/user/securedrop/install_files/securedrop-ossec-server/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 911, 'inode': 131959, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Install apt dependencies for building OSSEC packages.] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-grsec -> localhost]
+
+    TASK [build-generic-pkg : Copy app code to build directory.] *******************
+    changed: [focal-sd-generic-ossec-agent2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-keyring -> localhost]
+
+    TASK [build-generic-pkg : run bash script to build generic packages] ***********
+    changed: [focal-sd-generic-ossec-server2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent2 -> localhost]
+
+    TASK [build-generic-pkg : Track down package] **********************************
+    ok: [focal-sd-generic-ossec-server2]
+
+    TASK [build-generic-pkg : Create any necessary parent directories for jinja files] ***
+    ok: [focal-sd-generic-ossec-agent2] => (item={'path': '/home/user/securedrop/install_files/securedrop-ossec-agent/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 721, 'inode': 131937, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Extract OSSEC source tarball.] *********************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Fetch back package] **********************************
+    changed: [focal-sd-generic-ossec-server2] => (item={'path': '/tmp/securedrop-ossec-server-3.6.0+2.1.0~rc2+focal-amd64.deb', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 8632, 'inode': 590035, 'dev': 91, 'nlink': 1, 'atime': 1634229723.444, 'mtime': 1634229723.444, 'ctime': 1634229723.444, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Create /etc directory within source directory.] ****
+    ok: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Ensure package name is set] **************************
+    ok: [focal-sd-keyring] => {
+        "changed": false,
+        "msg": "All assertions passed"
+    }
+
+    TASK [build-generic-pkg : Template out any jinja files found and copy over] ****
+    changed: [focal-sd-generic-ossec-agent2] => (item={'path': '/home/user/securedrop/install_files/securedrop-ossec-agent/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 721, 'inode': 131937, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-sec-update -> localhost]
+
+    TASK [build-generic-pkg : Ensure build directory in-place] *********************
+    ok: [focal-sd-keyring]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-config -> localhost]
+
+    TASK [build-ossec-deb-pkg : Run OSSEC installer script on extracted source.] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC preloaded vars template.] ***************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-grsec -> localhost]
+
+    TASK [build-generic-pkg : run bash script to build generic packages] ***********
+    changed: [focal-sd-generic-ossec-agent2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server2 -> localhost]
+
+    TASK [build-generic-pkg : Copy app code to build directory.] *******************
+    changed: [focal-sd-keyring]
+
+    TASK [build-ossec-deb-pkg : Create OSSEC build directory.] *********************
+    changed: [focal-sd-generic-ossec-server] => (item=/tmp/build/ossec-server-3.6.0+focal-amd64)
+
+    TASK [build-ossec-deb-pkg : Disable JIT in OSSEC Makefile] *********************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Create OSSEC build directory.] *********************
+    changed: [focal-sd-generic-ossec-server] => (item=/tmp/build/ossec-server-3.6.0+focal-amd64/var)
+
+    TASK [build-generic-pkg : Track down package] **********************************
+    ok: [focal-sd-generic-ossec-agent2]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-keyring -> localhost]
+
+    TASK [build-ossec-deb-pkg : Remove client.keys to avoid overwriting existing client.keys] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Fetch back package] **********************************
+    changed: [focal-sd-generic-ossec-agent2] => (item={'path': '/tmp/securedrop-ossec-agent-3.6.0+2.1.0~rc2+focal-amd64.deb', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 4664, 'inode': 591841, 'dev': 81, 'nlink': 1, 'atime': 1634229745.188, 'mtime': 1634229745.188, 'ctime': 1634229745.188, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Create any necessary parent directories for jinja files] ***
+    ok: [focal-sd-keyring] => (item={'path': '/home/user/securedrop/install_files/securedrop-keyring/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 428, 'inode': 131929, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Copy /var/ossec/ to OSSEC build directory.] ********
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Ensure package name is set] **************************
+    ok: [focal-sd-grsec] => {
+        "changed": false,
+        "msg": "All assertions passed"
+    }
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC DEBIAN package scripts to build directory.] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Template out any jinja files found and copy over] ****
+    changed: [focal-sd-keyring] => (item={'path': '/home/user/securedrop/install_files/securedrop-keyring/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 428, 'inode': 131929, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-sec-update -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent2 -> localhost]
+
+    TASK [build-generic-pkg : Ensure build directory in-place] *********************
+    ok: [focal-sd-grsec]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-config -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server2 -> localhost]
+
+    TASK [build-generic-pkg : run bash script to build generic packages] ***********
+    changed: [focal-sd-keyring]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC DEBIAN/control template to build directory.] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Copy app code to build directory.] *******************
+    changed: [focal-sd-grsec]
+
+    TASK [build-generic-pkg : Track down package] **********************************
+    ok: [focal-sd-keyring]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC /usr and /etc directories to build directory.] ***
+    changed: [focal-sd-generic-ossec-server] => (item=etc)
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-grsec -> localhost]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC /usr and /etc directories to build directory.] ***
+    changed: [focal-sd-generic-ossec-server] => (item=usr)
+
+    TASK [build-generic-pkg : Fetch back package] **********************************
+    changed: [focal-sd-keyring] => (item={'path': '/tmp/securedrop-keyring-0.1.5+2.1.0~rc2+focal-amd64.deb', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 3748, 'inode': 588278, 'dev': 121, 'nlink': 1, 'atime': 1634229773.552, 'mtime': 1634229773.552, 'ctime': 1634229773.552, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Create any necessary parent directories for jinja files] ***
+    ok: [focal-sd-grsec] => (item={'path': '/home/user/securedrop/install_files/securedrop-grsec-focal/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 558, 'inode': 131916, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Delete the old service file] ***********************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Create any necessary parent directories for jinja files] ***
+    ok: [focal-sd-grsec] => (item={'path': '/home/user/securedrop/install_files/securedrop-grsec-focal/DEBIAN/postinst.j2', 'mode': '0755', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 2086, 'inode': 131917, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': True, 'wgrp': False, 'rgrp': True, 'xgrp': True, 'woth': False, 'roth': True, 'xoth': True, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Ensure package name is set] **************************
+    ok: [focal-sd-config] => {
+        "changed": false,
+        "msg": "All assertions passed"
+    }
+
+    TASK [build-ossec-deb-pkg : Create directory for our systemd based service file] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Ensure build directory in-place] *********************
+    ok: [focal-sd-config]
+
+    TASK [build-ossec-deb-pkg : Run OSSEC installer script on extracted source.] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent2 -> localhost]
+    ok: [focal-sd-keyring -> localhost]
+
+    TASK [build-generic-pkg : Template out any jinja files found and copy over] ****
+    changed: [focal-sd-grsec] => (item={'path': '/home/user/securedrop/install_files/securedrop-grsec-focal/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 558, 'inode': 131916, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-sec-update -> localhost]
+
+    TASK [build-generic-pkg : Copy app code to build directory.] *******************
+    changed: [focal-sd-config]
+
+    TASK [build-ossec-deb-pkg : Create OSSEC build directory.] *********************
+    changed: [focal-sd-generic-ossec-agent] => (item=/tmp/build/ossec-agent-3.6.0+focal-amd64)
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server2 -> localhost]
+
+    TASK [build-ossec-deb-pkg : Copy our systemd based service file for ossec-server] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-ossec-deb-pkg : Create OSSEC build directory.] *********************
+    changed: [focal-sd-generic-ossec-agent] => (item=/tmp/build/ossec-agent-3.6.0+focal-amd64/var)
+
+    TASK [build-generic-pkg : Template out any jinja files found and copy over] ****
+    changed: [focal-sd-grsec] => (item={'path': '/home/user/securedrop/install_files/securedrop-grsec-focal/DEBIAN/postinst.j2', 'mode': '0755', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 2086, 'inode': 131917, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': True, 'wgrp': False, 'rgrp': True, 'xgrp': True, 'woth': False, 'roth': True, 'xoth': True, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-config -> localhost]
+
+    TASK [build-ossec-deb-pkg : Remove client.keys to avoid overwriting existing client.keys] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Create any necessary parent directories for jinja files] ***
+    ok: [focal-sd-config] => (item={'path': '/home/user/securedrop/install_files/securedrop-config-focal/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 414, 'inode': 131904, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : run bash script to build generic packages] ***********
+    changed: [focal-sd-grsec]
+
+    TASK [build-ossec-deb-pkg : Copy /var/ossec/ to OSSEC build directory.] ********
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Track down package] **********************************
+    ok: [focal-sd-grsec]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC DEBIAN package scripts to build directory.] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Fetch back package] **********************************
+    changed: [focal-sd-grsec] => (item={'path': '/tmp/securedrop-grsec-5.4.136+focal-amd64.deb', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 3000, 'inode': 588477, 'dev': 101, 'nlink': 1, 'atime': 1634229802.944, 'mtime': 1634229802.944, 'ctime': 1634229802.944, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Template out any jinja files found and copy over] ****
+    changed: [focal-sd-config] => (item={'path': '/home/user/securedrop/install_files/securedrop-config-focal/DEBIAN/control.j2', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 414, 'inode': 131904, 'dev': 51728, 'nlink': 1, 'atime': 1634229342.496, 'mtime': 1634229342.408, 'ctime': 1634229342.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Build SecureDrop OSSEC deb package.] ***************
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-keyring -> localhost]
+    ok: [focal-sd-generic-ossec-agent2 -> localhost]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC DEBIAN/control template to build directory.] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server2 -> localhost]
+
+    TASK [build-ossec-deb-pkg : Delete OSSEC build directories and config files.] ***
+    changed: [focal-sd-generic-ossec-server] => (item=/etc/init.d/ossec)
+
+    TASK [build-generic-pkg : run bash script to build generic packages] ***********
+    changed: [focal-sd-config]
+
+    TASK [build-ossec-deb-pkg : Delete OSSEC build directories and config files.] ***
+    changed: [focal-sd-generic-ossec-server] => (item=/etc/ossec-init.conf)
+    changed: [focal-sd-generic-ossec-server] => (item=/var/ossec)
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC /usr and /etc directories to build directory.] ***
+    changed: [focal-sd-generic-ossec-agent] => (item=etc)
+
+    TASK [build-ossec-deb-pkg : Delete OSSEC build directories and config files.] ***
+    changed: [focal-sd-generic-ossec-server] => (item=/tmp/OSSEC-ARCHIVE-KEY.asc)
+
+    TASK [build-generic-pkg : Track down package] **********************************
+    ok: [focal-sd-config]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-grsec -> localhost]
+
+    TASK [build-ossec-deb-pkg : Copy OSSEC /usr and /etc directories to build directory.] ***
+    changed: [focal-sd-generic-ossec-agent] => (item=usr)
+
+    TASK [Update apt-cache for our security checker] *******************************
+    changed: [focal-sd-sec-update]
+
+    TASK [build-ossec-deb-pkg : Fetch newly built Debian packages back to localhost.] ***
+    changed: [focal-sd-generic-ossec-server]
+
+    TASK [build-generic-pkg : Fetch back package] **********************************
+    changed: [focal-sd-config] => (item={'path': '/tmp/securedrop-config-0.1.4+2.1.0~rc2+focal-amd64.deb', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 3064, 'inode': 588606, 'dev': 111, 'nlink': 1, 'atime': 1634229817.864, 'mtime': 1634229817.864, 'ctime': 1634229817.864, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-ossec-deb-pkg : Delete the old service file] ***********************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Create directory for our systemd based service file] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Copy our systemd based service file for ossec-agent] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Build SecureDrop OSSEC deb package.] ***************
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-ossec-deb-pkg : Delete OSSEC build directories and config files.] ***
+    changed: [focal-sd-generic-ossec-agent] => (item=/etc/init.d/ossec)
+    changed: [focal-sd-generic-ossec-agent] => (item=/etc/ossec-init.conf)
+    changed: [focal-sd-generic-ossec-agent] => (item=/var/ossec)
+    changed: [focal-sd-generic-ossec-agent] => (item=/tmp/OSSEC-ARCHIVE-KEY.asc)
+
+    TASK [build-ossec-deb-pkg : Fetch newly built Debian packages back to localhost.] ***
+    changed: [focal-sd-generic-ossec-agent]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server -> localhost]
+    ok: [focal-sd-generic-ossec-agent -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-server -> localhost]
+    ok: [focal-sd-generic-ossec-agent -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent -> localhost]
+    ok: [focal-sd-generic-ossec-server -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent -> localhost]
+    ok: [focal-sd-generic-ossec-server -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-generic-ossec-agent -> localhost]
+    ok: [focal-sd-generic-ossec-server -> localhost]
+
+    TASK [build-securedrop-app-code-deb-pkg : Install SecureDrop Python requirements in virtualenv for translation work] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Compile PO to MO.] *******************
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Create apparmor.d directory in prep directory] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy AppArmor profiles to prep path] ***
+    changed: [focal-sd-app] => (item=usr.sbin.tor)
+    changed: [focal-sd-app] => (item=usr.sbin.apache2)
+
+    TASK [build-securedrop-app-code-deb-pkg : Replace placeholder changelog to dist-specific changelog] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Replace the files required for focal package] ***
+    changed: [focal-sd-app] => (item={'src': 'securedrop-app-code.triggers-focal', 'dest': '/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64-prep/debian/securedrop-app-code.triggers'})
+
+    TASK [build-securedrop-app-code-deb-pkg : Create the control file based on distribution] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Create lib/systemd/services directory in prep directory] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Copy systemd service configurations to prep path] ***
+    changed: [focal-sd-app] => (item=securedrop_rqrequeue.service)
+    changed: [focal-sd-app] => (item=securedrop_rqworker.service)
+    changed: [focal-sd-app] => (item=securedrop_shredder.service)
+    changed: [focal-sd-app] => (item=securedrop_source_deleter.service)
+
+    TASK [build-securedrop-app-code-deb-pkg : Create sdist in prep dir] ************
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Create build dir] ********************
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Extract sdist to build dir] **********
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Create empty static asset directories in build dir] ***
+    changed: [focal-sd-app] => (item=/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64/var/www/securedrop/static/gen)
+    changed: [focal-sd-app] => (item=/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64/var/www/securedrop/static/.webassets-cache)
+    changed: [focal-sd-app] => (item=/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64/var/www/securedrop/.well-known/pki-validation)
+
+    TASK [build-securedrop-app-code-deb-pkg : Build securedrop-app-code Debian package] ***
+    changed: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Find newly built Debian package] *****
+    ok: [focal-sd-app]
+
+    TASK [build-securedrop-app-code-deb-pkg : Fetch newly built Debian packages back to localhost] ***
+    changed: [focal-sd-app] => (item={'path': '/tmp/securedrop-app-code_2.1.0~rc2+focal.tar.gz', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 2091899, 'inode': 580974, 'dev': 46, 'nlink': 1, 'atime': 1634230120.1, 'mtime': 1634230120.088, 'ctime': 1634230120.092, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-app] => (item={'path': '/tmp/securedrop-app-code_2.1.0~rc2+focal_amd64.deb', 'mode': '0644', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 0, 'gid': 0, 'size': 13684476, 'inode': 581718, 'dev': 46, 'nlink': 1, 'atime': 1634230523.296, 'mtime': 1634230522.976, 'ctime': 1634230522.976, 'gr_name': 'root', 'pw_name': 'root', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': True, 'xgrp': False, 'woth': False, 'roth': True, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-app -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-app -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-app -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-app -> localhost]
+
+    TASK [build-generic-pkg : Find any jinja templates] ****************************
+    ok: [focal-sd-app -> localhost]
+
+    PLAY [Give dpkg verify container access to debs] *******************************
+
+    TASK [Discover local debian build files] ***************************************
+    ok: [focal-sd-dpkg-verification -> localhost]
+
+    TASK [Create build dir] ********************************************************
+    ok: [focal-sd-dpkg-verification]
+
+    TASK [Drop debian files into container] ****************************************
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/ossec-server-3.6.0+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 735672, 'inode': 142219, 'dev': 51728, 'nlink': 1, 'atime': 1634229826.936, 'mtime': 1634229826.876, 'ctime': 1634229826.876, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/securedrop-grsec-5.4.136+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 3000, 'inode': 142127, 'dev': 51728, 'nlink': 1, 'atime': 1634229811.48, 'mtime': 1634229811.48, 'ctime': 1634229811.48, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/ossec-agent-3.6.0+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 288908, 'inode': 142129, 'dev': 51728, 'nlink': 1, 'atime': 1634229846.424, 'mtime': 1634229846.408, 'ctime': 1634229846.408, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/securedrop-keyring-0.1.5+2.1.0~rc2+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 3748, 'inode': 142126, 'dev': 51728, 'nlink': 1, 'atime': 1634229782.004, 'mtime': 1634229782.004, 'ctime': 1634229782.004, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/securedrop-ossec-server-3.6.0+2.1.0~rc2+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 8632, 'inode': 137541, 'dev': 51728, 'nlink': 1, 'atime': 1634229733.52, 'mtime': 1634229733.52, 'ctime': 1634229733.52, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/securedrop-config-0.1.4+2.1.0~rc2+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 3064, 'inode': 142232, 'dev': 51728, 'nlink': 1, 'atime': 1634229827.664, 'mtime': 1634229827.664, 'ctime': 1634229827.664, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/securedrop-ossec-agent-3.6.0+2.1.0~rc2+focal-amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 4664, 'inode': 142124, 'dev': 51728, 'nlink': 1, 'atime': 1634229754.92, 'mtime': 1634229754.92, 'ctime': 1634229754.92, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+    changed: [focal-sd-dpkg-verification] => (item={'path': '/home/user/securedrop/build/focal/securedrop-app-code_2.1.0~rc2+focal_amd64.deb', 'mode': '0600', 'isdir': False, 'ischr': False, 'isblk': False, 'isreg': True, 'isfifo': False, 'islnk': False, 'issock': False, 'uid': 1000, 'gid': 1000, 'size': 13684476, 'inode': 142262, 'dev': 51728, 'nlink': 1, 'atime': 1634230527.588, 'mtime': 1634230527.576, 'ctime': 1634230527.576, 'gr_name': 'user', 'pw_name': 'user', 'wusr': True, 'rusr': True, 'xusr': False, 'wgrp': False, 'rgrp': False, 'xgrp': False, 'woth': False, 'roth': False, 'xoth': False, 'isuid': False, 'isgid': False})
+
+    PLAY RECAP *********************************************************************
+    focal-sd-app               : ok=34   changed=27   unreachable=0    failed=0    skipped=97   rescued=0    ignored=0
+    focal-sd-config            : ok=14   changed=4    unreachable=0    failed=0    skipped=117  rescued=0    ignored=0
+    focal-sd-dpkg-verification : ok=3    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
+    focal-sd-generic-ossec-agent : ok=33   changed=24   unreachable=0    failed=0    skipped=98   rescued=0    ignored=0
+    focal-sd-generic-ossec-agent2 : ok=14   changed=4    unreachable=0    failed=0    skipped=117  rescued=0    ignored=0
+    focal-sd-generic-ossec-server : ok=33   changed=24   unreachable=0    failed=0    skipped=98   rescued=0    ignored=0
+    focal-sd-generic-ossec-server2 : ok=14   changed=4    unreachable=0    failed=0    skipped=117  rescued=0    ignored=0
+    focal-sd-grsec             : ok=14   changed=4    unreachable=0    failed=0    skipped=117  rescued=0    ignored=0
+    focal-sd-keyring           : ok=14   changed=4    unreachable=0    failed=0    skipped=117  rescued=0    ignored=0
+    focal-sd-sec-update        : ok=7    changed=1    unreachable=0    failed=0    skipped=124  rescued=0    ignored=0
+
+--> Inventory /home/user/securedrop/molecule/builder-focal/../../install_files/ansible-base/group_vars linked to /home/user/.cache/molecule/securedrop/builder-focal/inventory/group_vars
+--> Scenario: 'builder-focal'
+--> Action: 'verify'
+--> Executing Testinfra tests found in /home/user/securedrop/molecule/builder-focal/tests/...
+    ============================= test session starts ==============================
+    platform linux -- Python 3.7.3, pytest-6.1.1, py-1.10.0, pluggy-0.13.1
+    rootdir: /home/user/securedrop/molecule, configfile: pytest.ini
+    plugins: xdist-2.1.0, testinfra-5.3.1, forked-1.3.0
+gw0 [146] / gw1 [146]
+    ....................................................................F... [ 49%]
+    ...........................................................x............ [ 98%]
+    ..                                                                       [100%]
+    =================================== FAILURES ===================================
+    __________ test_ensure_no_updates_avail[docker://focal-sd-sec-update] __________
+    [gw0] linux -- Python 3.7.3 /home/user/.virtualenvs/sd/bin/python3
+
+    host = <testinfra.host.Host docker://focal-sd-sec-update>
+
+        @pytest.mark.skipif(not test_should_run(), reason="Only tested for RCs and builder updates")
+        def test_ensure_no_updates_avail(host):
+            """
+                Test to make sure that there are no security-updates in the
+                base builder container.
+            """
+            # Filter out all the security repos to their own file
+            # without this change all the package updates appeared as if they were
+            # coming from normal ubuntu update channel (since they get posted to both)
+            host.run('egrep "^deb.*security" /etc/apt/sources.list > /tmp/sec.list')
+
+            dist_upgrade_simulate = host.run('apt-get -s dist-upgrade '
+                                             '-oDir::Etc::Sourcelist=/tmp/sec.list '
+                                             '|grep "^Inst" |grep -i security')
+
+            # If the grep was successful that means security package updates found
+            # otherwise we get a non-zero exit code so no updates needed.
+    >       assert dist_upgrade_simulate.rc != 0
+    E       assert 0 != 0
+    E        +  where 0 = CommandResult(command=b'apt-get -s dist-upgrade -oDir::Etc::Sourcelist=/tmp/sec.list |grep "^Inst" |grep -i security',...ty [all])\nInst tzdata [2021a-0ubuntu0.20.04] (2021a-2ubuntu0.20.04 Ubuntu:20.04/focal-security [all])\n', stderr=None).rc
+
+    tests/test_security_updates.py:43: AssertionError
+    =========================== short test summary info ============================
+    FAILED tests/test_security_updates.py::test_ensure_no_updates_avail[docker:/focal-sd-sec-update]
+    ============= 1 failed, 144 passed, 1 xfailed in 78.24s (0:01:18) ==============
+An error occurred during the test sequence action: 'verify'. Cleaning up.
+--> Inventory /home/user/securedrop/molecule/builder-focal/../../install_files/ansible-base/group_vars linked to /home/user/.cache/molecule/securedrop/builder-focal/inventory/group_vars
+--> Scenario: 'builder-focal'
+--> Action: 'cleanup'
+Skipping, cleanup playbook not configured.
+--> Inventory /home/user/securedrop/molecule/builder-focal/../../install_files/ansible-base/group_vars linked to /home/user/.cache/molecule/securedrop/builder-focal/inventory/group_vars
+--> Scenario: 'builder-focal'
+--> Action: 'destroy'
+
+    PLAY [Destroy] *****************************************************************
+
+    TASK [Destroy molecule instance(s)] ********************************************
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-app'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-agent'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-server'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-agent2'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-generic-ossec-server2'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-grsec'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-config'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-keyring'})
+    changed: [localhost] => (item={'groups': ['builders'], 'name': 'focal-sd-sec-update'})
+    changed: [localhost] => (item={'groups': ['testers'], 'name': 'focal-sd-dpkg-verification'})
+
+    PLAY RECAP *********************************************************************
+    localhost                  : ok=1    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0
+
+--> Pruning extra files from scenario ephemeral directory
+make: *** [Makefile:300: build-debs] Error 1
+[user@fpf-dev-dvm:~/securedrop] [sd] f6945d5e3 22m40s 2 ±
+ $ # test failure is ok, we'll update builder again
+[user@fpf-dev-dvm:~/securedrop] [sd] f6945d5e3 24m20s 2 ±
+ $ sha256sum build/focal/*
+6c87f76e460cc445c4dcc451211e3b7c64645c67f740c9d2d2322a0d8dd93353  build/focal/ossec-agent-3.6.0+focal-amd64.deb
+3bed6150f154223189166b28d1e8d6d5c8e463ddaf53ce6b177d701a2c26fad8  build/focal/ossec-server-3.6.0+focal-amd64.deb
+40ec5664a36218004ffc00a3d2d860c3c3789fb14e3cc2fc4f2766bf72874793  build/focal/securedrop-app-code_2.1.0~rc2+focal_amd64.deb
+d5ee1f6007f3c8c99fd23bf38ceca674dddfe174684d90204640edfbf73418b1  build/focal/securedrop-app-code_2.1.0~rc2+focal.tar.gz
+424412d413b9ff806d3a26ae6058983aae8bcc59de284758c05da4612483d6df  build/focal/securedrop-config-0.1.4+2.1.0~rc2+focal-amd64.deb
+193e956b13ea4b7e09493d2e0fb569f1a41e6e65cb970abbbc4cbb7be2471af7  build/focal/securedrop-grsec-5.4.136+focal-amd64.deb
+1fa9d8099555f157ad00f055cc860a147e723c3cb66ec135e6434ef713ff8444  build/focal/securedrop-keyring-0.1.5+2.1.0~rc2+focal-amd64.deb
+92fe690bd5dd8ddb2e98a6eb17e16498dd3c90b459fcef97a8300c1fc70f7fd4  build/focal/securedrop-ossec-agent-3.6.0+2.1.0~rc2+focal-amd64.deb
+0e1f7cd12c8c3c2cab6c2a40b77c3887d6c1e3b73ea947e93e8c5dfa86e1203d  build/focal/securedrop-ossec-server-3.6.0+2.1.0~rc2+focal-amd64.deb
+[user@fpf-dev-dvm:~/securedrop] [sd] f6945d5e3 24m25s ±
+ $
+