Bug 1024009

Summary: nss-softokn-freebl-fips-3.14.3-9 missing on in the EC2 RHUI environment
Product: Red Hat Update Infrastructure for Cloud Providers Reporter: Brenton Leanhardt <bleanhar>
Component: CDSAssignee: dgao
Status: CLOSED NOTABUG QA Contact: mkovacik
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 2.1.2CC: ipanova, jmatthew
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-10-29 12:34:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Brenton Leanhardt 2013-10-28 14:56:37 UTC
Description of problem:

I launched an instance of RHEL-6.5-Beta-x86_64-2-Access2 (ami-09430860) and was not able to run 'yum update'.  The error message I recieved was:

---------------------
Error:  Multilib version problems found. This often means that the root
       cause is something else and multilib version checking is just
       pointing out that there is a problem. Eg.:
       
         1. You have an upgrade for nss-softokn-freebl which is missing some
            dependency that another package requires. Yum is trying to
            solve this by installing an older version of nss-softokn-freebl of the
            different architecture. If you exclude the bad architecture
            yum will tell you what the root cause is (which package
            requires what). You can try redoing the upgrade with
            --exclude nss-softokn-freebl.otherarch ... this should give you an error
            message showing the root cause of the problem.
       
         2. You have multiple architectures of nss-softokn-freebl installed, but
            yum can only see an upgrade for one of those arcitectures.
            If you don't want/need both architectures anymore then you
            can remove the one with the missing update and everything
            will work.
       
         3. You have duplicate versions of nss-softokn-freebl installed already.
            You can use "yum check" to get yum show these errors.
       
       ...you can also use --setopt=protected_multilib=false to remove
       this checking, however this is almost never the correct thing to
       do as something else is very likely to go wrong (often causing
       much more problems).
       
       Protected multilib versions: nss-softokn-freebl-3.14.3-9.el6.x86_64 != nss-softokn-freebl-3.14.3-8.el6.i686
Error: Protected multilib versions: nss-softokn-3.14.3-8.el6.i686 != nss-softokn-3.14.3-9.el6.x86_64
------------------------


You can see the problem more clearly here:

yumdownloader --urls nss-softokn-freebl nss-softokn-freebl-fips
Loaded plugins: amazon-id, rhui-lb
https://rhui2-cds02.us-east-1.aws.ce.redhat.com/pulp/repos//content/beta/rhel/rhui/server/6/6Server/x86_64/os//Packages/nss-softokn-freebl-3.14.3-9.el6.i686.rpm
https://rhui2-cds02.us-east-1.aws.ce.redhat.com/pulp/repos//content/beta/rhel/rhui/server/6/6Server/x86_64/os//Packages/nss-softokn-freebl-3.14.3-9.el6.x86_64.rpm
https://rhui2-cds02.us-east-1.aws.ce.redhat.com/pulp/repos//content/beta/rhel/rhui/server/6/6Server/x86_64/optional/os//Packages/nss-softokn-freebl-fips-3.14.3-8.el6.x86_64.rpm


nss-softokn-freebl has an explicit dependency on nss-softokn-freebl-fips.  However you can see the only packages available are:

nss-softokn-freebl-3.14.3-9.el6.i686.rpm
nss-softokn-freebl-3.14.3-9.el6.x86_64.rpm
nss-softokn-freebl-fips-3.14.3-8.el6.x86_64.rpm

Having nss-softokn-freebl-fips-3.14.3-9.el6.x86_64.rpm and nss-softokn-freebl-fips-3.14.3-9.el6.i686.rpm on in the RHUI environment would solve the problem.

Comment 1 Brenton Leanhardt 2013-10-28 15:08:46 UTC
Looking in Brew it seems like the nss-softokn-freebl-fips package has been removed.  Compare the following:

http://download.eng.bos.redhat.com/brewroot/packages/nss-softokn/3.14.3/6.el6/x86_64/

http://download.eng.bos.redhat.com/brewroot/packages/nss-softokn/3.14.3/9.el6/x86_64/

Comment 2 Brenton Leanhardt 2013-10-28 15:10:35 UTC
Workaround: 

first updating nss to 0:3.15.1-13.el6 will allow users to remove the problematic builds of nss-softokn-freebl-fips and nss-softokn-fips.

Comment 3 Brenton Leanhardt 2013-10-29 12:34:33 UTC
I looks like the problem is solved as of RHEL-6.5-Beta-x86_64-2-Access4 (ami-2b2f7942) so I'm going to close this as NOTABUG.