Bug 1152734
Summary: | Update subman ostree content plugin to use ostree cli for manipulating 'remote' configs | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | John Sefler <jsefler> |
Component: | subscription-manager | Assignee: | candlepin-bugs |
Status: | CLOSED ERRATA | QA Contact: | John Sefler <jsefler> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 7.1 | CC: | alikins, bkearney, walters, wpoteat |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-03-05 13:15:40 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1005618 |
Description
John Sefler
2014-10-14 20:00:20 UTC
NEEDINFO from someone on the ostree team who can determine the severity of this behavior. I actually should have pointed out that both the "other" remote as well as the original "rhel-atomic-host" remote was deleted by the subscription-manager-plugin-ostree. I don't know enough about ostree to know if this is desired. It seems to me that after removing the entitlement, the system admin would still want to regain access to the original non-subscription-manager-entitled remote ostree configurations. True, but a mitigating factor here is that newer versions of "ostree remote add" (as an admin might invoke manually) will write to /etc/ostree/remotes.d, which won't be overwritten. It would be good though if subman was updated to use that. (In reply to Colin Walters from comment #3) > True, but a mitigating factor here is that newer versions of "ostree remote > add" (as an admin might invoke manually) will write to > /etc/ostree/remotes.d, which won't be overwritten. > > It would be good though if subman was updated to use that. That seems like the right approach. Going to change bug info to make this more of a RFE about updating subman plugin (though a blocking RFE) Still not using cli for adding repos, but did move to using /etc/ostree/repos.d/redhat.conf for our info. commit 11b377f78dcb06d8dbff5645750791b729e20a0e Author: Adrian Likins <alikins> Date: Thu Nov 20 15:55:09 2014 -0500 Move ostree config to /etc/ostree/remotes.d/redhat.conf Split up the OstreeConfig usage, so we can track what info came from the old location and clean it up. If we see an old style config with remotes in it, we delete them. And then write the remote config to the new file. Also clean up some heavy logging. Verifying atomic compose http://download.eng.bos.redhat.com/rel-eng/Atomic/7/trees/GA.brew/images/20150114.1/ After installing this compose 20150114.1, it includes subscription-manager version... -bash-4.2# rpm -q subscription-manager subscription-manager-plugin-ostree subscription-manager-1.13.12-1.el7.x86_64 subscription-manager-plugin-ostree-1.13.12-1.el7.x86_64 With the new implementation from comment 5, the original problem report from comment 0 is no longer an issue. -bash-4.2# cat /ostree/repo/config [core] repo_version=1 mode=bare -bash-4.2# -bash-4.2# cat /etc/ostree/remotes.d/redhat.conf -bash-4.2# -bash-4.2# subscription-manager register --serverurl=subscription.rhn.stage.redhat.com --username stage_auto_testuser --baseurl=https://cdn.qa.redhat.com --autosubscribe Password: The system has been registered with ID: 549611d3-8dd6-4eb1-9979-36c819218be5 Installed Product Current Status: Product Name: Red Hat Enterprise Linux Server Status: Subscribed Product Name: Red Hat Enterprise Linux Atomic Host Beta Status: Subscribed -bash-4.2# -bash-4.2# cat /ostree/repo/config [core] repo_version=1 mode=bare -bash-4.2# -bash-4.2# cat /etc/ostree/remotes.d/redhat.conf [remote "rhel-atomic-host-beta-ostree"] url = https://cdn.qa.redhat.com/content/beta/rhel/atomic/7/x86_64/ostree/repo gpg-verify = false tls-client-cert-path = /etc/pki/entitlement/7782055078065006424.pem tls-client-key-path = /etc/pki/entitlement/7782055078065006424-key.pem tls-ca-path = /etc/rhsm/ca/redhat-uep.pem -bash-4.2# VERIFIED: subscription-manager no longer configures ostree via the /ostree/repo/config file with entitled remotes. subscription-manager now configures remotes via /etc/ostree/remotes.d/redhat.conf file which is not shared with any other tooling. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-0502.html |