Bug 1273097

Summary: Upgrade from F22 to F23 fails because F23 version is older
Product: [Fedora] Fedora Reporter: Stephen Gallagher <sgallagh>
Component: pki-coreAssignee: Matthew Harmsen <mharmsen>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 23CC: alee, awilliam, edewata, kwright, mharmsen, sgallagh
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: RejectedFreezeException
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-12-02 18:03:41 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Stephen Gallagher 2015-10-19 14:56:07 UTC
Description of problem:
The version of pki-core in Fedora 23's stable repositories (pki-core-10.2.6-7.fc23) is older than the version in the Fedora 22 stable repositories (pki-core-10.2.6-9.fc22). Because of this, when upgrading, DNF skips this package and it causes other packages (like FreeIPA) to fail to upgrade as well.

Version-Release number of selected component (if applicable):
pki-core-10.2.6-7.fc23

How reproducible:
Every time


Steps to Reproduce:
1. Install Fedora 22 Server. Deploy FreeIPA on it.
2. Install dnf-plugin-system-upgrade
3. Run `dnf system-upgrade download --releasever=23`

Actual results:
Skipping packages with broken dependencies:
 freeipa-admintools                           x86_64            4.2.2-1.fc23                                  fedora             55 k
 freeipa-client                               x86_64            4.2.2-1.fc23                                  fedora            193 k
 freeipa-python                               x86_64            4.2.2-1.fc23                                  fedora            1.3 M
 freeipa-server                               x86_64            4.2.2-1.fc23                                  fedora            1.3 M
 freeipa-server-trust-ad                      x86_64            4.2.2-1.fc23                                  fedora            130 k
 tomcat                                       noarch            1:8.0.26-1.fc23                               fedora             91 k
 tomcat-lib                                   noarch            1:8.0.26-1.fc23                               fedora            4.1 M



Expected results:
Packages should upgrade successfully.

Additional info:
This may become less of an issue once 'dnf system-upgrade' starts doing distro-sync instead of upgrade, but right now it's causing breakage.

Comment 1 Fedora Blocker Bugs Application 2015-10-19 14:57:34 UTC
Proposed as a Freeze Exception for 23-final by Fedora user sgallagh using the blocker tracking app because:

 Currently, upgrades of systems running FreeIPA will be broken unless they use --enablerepo=updates-testing or --distro-sync to upgrade.

Comment 2 Adam Williamson 2015-10-19 20:07:37 UTC
Discussed at 2015-10-19 freeze exception review meeting: https://meetbot.fedoraproject.org/fedora-blocker-review/2015-10-19/f23-blocker-review.2015-10-19-16.00.html . Rejected as a freeze exception issue: firstly the use of `--distro-sync` mode by default for upgrades (which is already required, as a release blocking issue, in #1263677) should address this, and in any case, it can be sufficiently addressed with an update, as upgrades will almost always use the 'updates' repository.

Comment 3 Matthew Harmsen 2015-10-20 00:31:26 UTC
(In reply to Stephen Gallagher from comment #0)
> Description of problem:
> The version of pki-core in Fedora 23's stable repositories
> (pki-core-10.2.6-7.fc23) is older than the version in the Fedora 22 stable
> repositories (pki-core-10.2.6-9.fc22). Because of this, when upgrading, DNF
> skips this package and it causes other packages (like FreeIPA) to fail to
> upgrade as well.
> 
> Version-Release number of selected component (if applicable):
> pki-core-10.2.6-7.fc23
> 
> How reproducible:
> Every time
> 
> 
> Steps to Reproduce:
> 1. Install Fedora 22 Server. Deploy FreeIPA on it.
> 2. Install dnf-plugin-system-upgrade
> 3. Run `dnf system-upgrade download --releasever=23`
> 
> Actual results:
> Skipping packages with broken dependencies:
>  freeipa-admintools                           x86_64            4.2.2-1.fc23
> fedora             55 k
>  freeipa-client                               x86_64            4.2.2-1.fc23
> fedora            193 k
>  freeipa-python                               x86_64            4.2.2-1.fc23
> fedora            1.3 M
>  freeipa-server                               x86_64            4.2.2-1.fc23
> fedora            1.3 M
>  freeipa-server-trust-ad                      x86_64            4.2.2-1.fc23
> fedora            130 k
>  tomcat                                       noarch           
> 1:8.0.26-1.fc23                               fedora             91 k
>  tomcat-lib                                   noarch           
> 1:8.0.26-1.fc23                               fedora            4.1 M
> 
> 
> 
> Expected results:
> Packages should upgrade successfully.
> 
> Additional info:
> This may become less of an issue once 'dnf system-upgrade' starts doing
> distro-sync instead of upgrade, but right now it's causing breakage.

Not sure that I understand what is going on since the latest stable version of pki-core for Fedora 23 is 'fedora-10.2.6-10.fc23' -- see https://bodhi.fedoraproject.org/updates/FEDORA-2015-cea85c052a.

Maybe the Fedora 23 repo freeze happened before Bodhi pushed 'pki-core-10.2.6-10.fc23' to stable?

Comment 4 Adam Williamson 2015-10-20 15:25:05 UTC
Yes. This is in fact shown in Bodhi, though it's not obvious if you don't know how things work: the update's 'Status' is still listed as 'testing' (not stable), and there is a message "submitted for stable" but not a message "pushed to stable". Only updates that get a message "pushed to stable" and their status changed to 'stable' have actually been released as stable.

What will happen next, since we didn't grant this a freeze exception, is that the update will be pushed to stable soon after we sign off on F23 Final (and before it actually gets released). It will go to the 'updates' repository, making it a part of the '0-day updates' set - the set of updates that is pushed stable between sign-off and release and thus is available immediately upon release (0-day).