setup host,yml execution terminates with err

aptget upgrade & content of var-log-xc-cache-prep-commands.log

 apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following package was automatically installed and is no longer required:
  libopts25
Use 'sudo apt autoremove' to remove it.
The following packages will be upgraded:
  python3-update-manager resolvconf update-manager-core
3 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 89.5 kB of archives.
----------------------------------------------
Get:1 http://us.archive.ubuntu.com/ubuntu xenial-updates/main amd64 resolvconf all 1.78ubuntu6 [51.8 kB]
Preconfiguring packages ...
Fetched 51.8 kB in 0s (119 kB/s)
E: Can not write log (Is /dev/pts mounted?) - posix_openpt (2: No such file or directory)
(Reading database ... 13031 files and directories currently installed.)
--------------------------------------
Will mount /dev/pts -o remount,gid=5,mode=620 cmd work?

ply recap

FAILED - RETRYING: Ensure that the LXC cache has been prepared (4 retries left).
FAILED - RETRYING: Ensure that the LXC cache has been prepared (3 retries left).
FAILED - RETRYING: Ensure that the LXC cache has been prepared (2 retries left).
FAILED - RETRYING: Ensure that the LXC cache has been prepared (1 retries left).
fatal: [infra3]: FAILED! => {"ansible_job_id": "484701884593.19267", "attempts": 60, "changed": false, "failed": true, "finished": 0, "started": 1}

NO MORE HOSTS LEFT ***************************************************************************************************

NO MORE HOSTS LEFT ***************************************************************************************************

PLAY RECAP ***********************************************************************************************************
compute1                   : ok=115  changed=2    unreachable=0    failed=0
infra1                     : ok=174  changed=6    unreachable=0    failed=0
infra2                     : ok=173  changed=5    unreachable=0    failed=0
infra3                     : ok=187  changed=11   unreachable=0    failed=1
log1                       : ok=172  changed=5    unreachable=0    failed=0

DEBUG MESSAGE RECAP ************************************************************
DEBUG: [V-71855 - The cryptographic hash of system files and commands must match vendor values (apt)]
The following files have checksums that differ from the checksum provided with their package. Each of these should be verified manually to ensure they have not been modified by an unauthorized user: /usr/share/bash-completion/completions/apt, /usr/share/locale-langpack/en/LC_MESSAGES/libidn.mo, /usr/share/locale-langpack/en@boldquot/LC_MESSAGES/gnupg.mo, /usr/share/locale-langpack/en@boldquot/LC_MESSAGES/libidn.mo, /usr/share/locale-langpack/en@quot/LC_MESSAGES/gnupg.mo, /usr/share/locale-langpack/en@quot/LC_MESSAGES/libidn.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/NetworkManager.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/apparmor-parser.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/bfd.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/binutils.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/bzr.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/command-not-found.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/ecryptfs-utils.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/gas.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/gnupg.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/gold.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/gprof.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/grub.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/gst-plugins-good-1.0.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/kbd.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/keystone.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/language-selector.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/ld.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/libidn.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/libvirt.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/lightdm.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/opcodes.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/oxide-qt.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/p11-kit.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/software-properties.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/sudoers.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/sysstat.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/ubuntu-help.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/update-manager.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/upower.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/webbrowser-app.mo, /usr/share/locale-langpack/en_AU/LC_MESSAGES/xdiagnose.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/NetworkManager.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/apparmor-parser.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/bzr.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/command-not-found.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/ecryptfs-utils.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/grub.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/kdesudo.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/keystone.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/language-selector.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/libvirt.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/lightdm.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/software-properties.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/sysstat.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/ubuntu-help.mo, /usr/share/locale-langpack/en_CA/LC_MESSAGES/update-manager.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/NetworkManager.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/apparmor-parser.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/apt.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/bfd.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/binutils.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/bzr.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/command-not-found.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/devscripts.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/ecryptfs-utils.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/elfutils.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/fwupd.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/gas.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/gnupg.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/gold.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/gprof.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/grub.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/gst-plugins-good-1.0.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/gutenprint.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/kbd.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/keystone.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/language-selector.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/ld.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/libidn.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/libvirt.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/lightdm.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/lxd.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/mcs.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/opcodes.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/oxide-qt.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/p11-kit.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/software-properties.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/sssd.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/subdomain_parser.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/subversion.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/sudoers.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/sysstat.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/systemd.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/ubuntu-help.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/update-manager.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/upower.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/webbrowser-app.mo, /usr/share/locale-langpack/en_GB/LC_MESSAGES/xdiagnose.mo


DEBUG: [Print warning for users with an assigned home directory that does not exist]
These users have a home directory assigned, but the directory does not exist:
lp (/var/spool/lpd does not exist)
news (/var/spool/news does not exist)
uucp (/var/spool/uucp does not exist)
www-data (/var/www does not exist)
list (/var/list does not exist)
irc (/var/run/ircd does not exist)
gnats (/var/lib/gnats does not exist)
nobody (/nonexistent does not exist)
systemd-resolve (/run/systemd/resolve does not exist)
syslog (/home/syslog does not exist)
_apt (/nonexistent does not exist)
ntp (/home/ntp does not exist)


DEBUG: [Check for /home on mounted filesystem] *********************************
The STIG requires that /home is on its own filesystem, but this system
does not appear to be following the requirement.


DEBUG: [Check for /var on mounted filesystem] **********************************
The STIG requires that /var is on its own filesystem, but this system
does not appear to be following the requirement.


DEBUG: [Check for /var/log/audit on mounted filesystem] ************************
The STIG requires that /var/log/audit is on its own filesystem, but this system
does not appear to be following the requirement.


DEBUG: [Check for /tmp on mounted filesystem] **********************************
The STIG requires that /tmp is on its own filesystem, but this system
does not appear to be following the requirement.


DEBUG: [V-72209 - The system must send rsyslog output to a log aggregation server.]
Output from syslog must be sent to another server.

Monday 12 February 2018  06:09:12 -0800 (0:10:11.076)       0:16:25.380 *******
===============================================================================
lxc_hosts : Ensure that the LXC cache has been prepared --------------- 611.08s
openstack_hosts : Drop hosts file entries script locally --------------- 38.98s
lxc_hosts : Retrieve base image ---------------------------------------- 22.14s
ansible-hardening : Gather debsums report ------------------------------ 15.76s
openstack_hosts : Install distro packages ------------------------------- 9.35s
ansible-hardening : Check each user to see if its home directory exists on the filesystem --- 9.10s
openstack_hosts : Ensure kernel module(s) ------------------------------- 7.28s
openstack_hosts : Adding new system tuning ------------------------------ 6.86s
Test internal repo URL for the current upper constraints file ----------- 6.24s
lxc_hosts : Drop base config file(s) ------------------------------------ 4.51s
pip_install : Install PIP ----------------------------------------------- 4.50s
Test internal repo URL for the current get-pip.py script ---------------- 4.18s
lxc_hosts : Create base directories ------------------------------------- 3.64s
ansible-hardening : include --------------------------------------------- 3.58s
Gathering Facts --------------------------------------------------------- 3.30s
pip_install : Install pip packages -------------------------------------- 3.18s
lxc_hosts : Install pip packages ---------------------------------------- 3.08s
ansible-hardening : include --------------------------------------------- 3.04s
ansible-hardening : Set sysctl configurations --------------------------- 2.67s
lxc_hosts : Pre-stage the LXC image on the system ----------------------- 2.58s

EXIT NOTICE [Playbook execution failure] **************************************
===============================================================================

reexecution of setuphost.yml

TASK [lxc_hosts : Retrieve base image] *******************************************************************************
Monday 12 February 2018  06:56:38 -0800 (0:00:11.834)       0:04:13.382 *******
FAILED - RETRYING: Retrieve base image (3 retries left).
FAILED - RETRYING: Retrieve base image (2 retries left).
FAILED - RETRYING: Retrieve base image (1 retries left).
failed: [infra3] (item=ubuntu;xenial;amd64;default;20180212_03:49;/images/ubuntu/xenial/amd64/default/20180212_03:49/) => {"attempts": 3, "changed": false, "cmd": ["machinectl", "--verify=no", "import-tar", "/tmp/rootfs.tar.xz", "ubuntu-xenial-amd64"], "delta": "0:00:00.117706", "end": "2018-02-12 06:56:43.777341", "failed": true, "failed_when_result": true, "item": "ubuntu;xenial;amd64;default;20180212_03:49;/images/ubuntu/xenial/amd64/default/20180212_03:49/", "rc": 1, "start": "2018-02-12 06:56:43.659635", "stderr": "Enqueued transfer job 4. Press C-c to continue download in background.\nImporting '/tmp/rootfs.tar.xz', saving as 'ubuntu-xenial-amd64'.\nFailed to create subvolume /var/lib/machines/.#ubuntu-xenial-amd64ff1eeede44bf1edc: Disk quota exceeded\nExiting.", "stderr_lines": ["Enqueued transfer job 4. Press C-c to continue download in background.", "Importing '/tmp/rootfs.tar.xz', saving as 'ubuntu-xenial-amd64'.", "Failed to create subvolume
/var/lib/machines/.#ubuntu-xenial-amd64ff1eeede44bf1edc: Disk quota exceeded", "Exiting."], "stdout": "", "stdout_lines": []}

root@infra3:/home/osadmin# systemctl status var-lib-machines.mount
● var-lib-machines.mount - Virtual Machine and Container Storage
Loaded: loaded (/lib/systemd/system/var-lib-machines.mount; static; vendor preset: enabled)
Active: active (mounted) since Mon 2018-02-12 08:09:06 PST; 32min ago
Condition: start condition failed at Mon 2018-02-12 07:22:37 PST; 1h 18min ago
ConditionPathExists=/var/lib/machines.raw was not met
Where: /var/lib/machines
What: /dev/loop0
Tasks: 0 (limit: 8192)
Memory: 0B
CPU: 0
root@infra3:/home/osadmin# machinectl list-images
NAME TYPE RO USAGE CREATED MODIFIED
ubuntu-xenial-amd64 subvolume no 747.1M Mon 2018-02-12 08:09:08 PST n/a

1 images listed.