Project

General

Profile

Actions

action #164329

closed

[qem][qe-core]test fails in update_install, need to fix the conflict issue for installing "patterns-base-fips-certified"

Added by rfan1 4 months ago. Updated 4 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Bugs in existing tests
Target version:
Start date:
2024-07-23
Due date:
% Done:

100%

Estimated time:
Difficulty:

Description

Observation

openQA test in scenario sle-15-SP4-Server-DVD-Incidents-Install-TERADATA-x86_64-qam-incidentinstall@64bit fails in
update_install

Test suite description

Testsuite maintained at https://gitlab.suse.de/qa-maintenance/qam-openqa-yml. Incident Installation TEST
MAX_JOB_TIME=9000 due to long texlive update

Reproducible

Fails since (at least) Build :34851:patterns-base (current job)

Expected result

Last good: :34832:fence-agents (or more recent)

Further details

Always latest result in this scenario: latest

Actions #1

Updated by rfan1 4 months ago

From spec file, https://build.suse.de/projects/SUSE:Maintenance:34851/packages/patterns-base.SUSE_SLE-15-SP4_Update/files/patterns-base.spec?expand=1

We can say the error is expected, but seems it conflicts with some dedicated versions. we may need to handle it.

Is there any existing parameter/setting to control it?

%package fips-certified
%pattern_primaryfunctions
Summary:        FIPS 140-3 certified packages
Group:          Metapackages
Provides:       pattern() = fips-certified
Provides:       pattern-icon() = pattern-generic
Provides:       pattern-order() = 3010
Provides:       pattern-visible()
Requires:       patterns-base-fips = %{version}
# libgcrypt
Conflicts:  libgcrypt20 < 1.9.4-150400.6.8.1
Conflicts:  libgcrypt20 > 1.9.4-150400.6.8.1
Conflicts:  libgcrypt20-hmac < 1.9.4-150400.6.8.1
Conflicts:  libgcrypt20-hmac > 1.9.4-150400.6.8.1
# openssl 1.1.1
Conflicts:  libopenssl1_1 < 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1 > 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1-hmac < 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1-hmac > 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1-32bit < 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1-32bit > 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1-hmac-32bit < 1.1.1l-150400.7.28.1
Conflicts:  libopenssl1_1-hmac-32bit > 1.1.1l-150400.7.28.1
# kernel
Conflicts:  dracut-fips < 055+suse.252.g4988b0bf-150400.1.8
Conflicts:  dracut-fips > 055+suse.252.g4988b0bf-150400.1.8
Conflicts:  kernel-default < 5.14.21-150400.24.46.1
Conflicts:  kernel-default > 5.14.21-150400.24.46.1
Conflicts:  kernel-rt < 5.14.21-150400.15.11.1
Conflicts:  kernel-rt > 5.14.21-150400.15.11.1
Conflicts:  libkcapi-tools < 0.13.0-1.114
Conflicts:  libkcapi-tools > 0.13.0-1.114
Actions #2

Updated by rfan1 4 months ago

  • Subject changed from [qem][qe-core]test fails in update_install, need to fix the conflict issue for installing "certified" to [qem][qe-core]test fails in update_install, need to fix the conflict issue for installing "patterns-base-fips-certified"
Actions #3

Updated by dvenkatachala 4 months ago

  • Assignee set to dvenkatachala
Actions #4

Updated by szarate 4 months ago

Dee, Richard, Confirm with the qe-security guys I think there are variables to also handle those cases.

Actions #5

Updated by dvenkatachala 4 months ago

  • Assignee deleted (dvenkatachala)
Actions #6

Updated by dzedro 4 months ago

  • Status changed from New to In Progress
  • Assignee set to dzedro

The pattern patterns-base-fips-certified does uninstall kernel, nothing to boot. ;)
https://suse.slack.com/archives/C02D16TCP99/p1721981976242979

Actions #9

Updated by dzedro 4 months ago

  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 100

Tests passed, s390x had to be workaround due to the bug, but it's unlikely related to the pattern update.

Actions

Also available in: Atom PDF