Bug 1295424

Summary: build task fails with: "cannot open Packages index using db5 - Permission denied"
Product: [Fedora] Fedora Reporter: Petr Vobornik <pvoborni>
Component: distributionAssignee: Václav Pavlín <vpavlin>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: dennis, kevin
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-01-04 19:25:50 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Petr Vobornik 2016-01-04 12:57:00 UTC 
User-Agent:       Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:43.0) Gecko/20100101 Firefox/43.0
Build Identifier: 

While building FreeIPA for rawhide which adds new python3-ipa* packages. The build in koji ends with the error in summary.

It look like an infrastructure issue rather then a issue in packaging. Was tried 3 times.

Task: http://koji.fedoraproject.org/koji/taskinfo?taskID=12400560

Build output:

$ fedpkg build
Building freeipa-4.3.0-1.fc24 for rawhide
Created task: 12284450
Task info: http://koji.fedoraproject.org/koji/taskinfo?taskID=12284450
Watching tasks (this may be safely interrupted)...
12284450 build (rawhide, /freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e): free
12284450 build (rawhide, /freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e): free -> open (buildppcle-07.phx2.fedoraproject.org)
  12284454 buildSRPMFromSCM (/freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e): free
  12284454 buildSRPMFromSCM (/freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e): free -> open (buildhw-08.phx2.fedoraproject.org)
  12284454 buildSRPMFromSCM (/freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e): open (buildhw-08.phx2.fedoraproject.org) -> closed
  0 free  1 open  1 done  0 failed
  12284512 buildArch (freeipa-4.3.0-1.fc24.src.rpm, armv7hl): free
  12284514 buildArch (freeipa-4.3.0-1.fc24.src.rpm, i686): free
  12284513 buildArch (freeipa-4.3.0-1.fc24.src.rpm, x86_64): open (buildhw-05.phx2.fedoraproject.org)
  12284514 buildArch (freeipa-4.3.0-1.fc24.src.rpm, i686): free -> open (buildvm-26.phx2.fedoraproject.org)
  12284512 buildArch (freeipa-4.3.0-1.fc24.src.rpm, armv7hl): free -> open (arm04-builder19.arm.fedoraproject.org)
  12284514 buildArch (freeipa-4.3.0-1.fc24.src.rpm, i686): open (buildvm-26.phx2.fedoraproject.org) -> closed
  0 free  3 open  2 done  0 failed
  12284513 buildArch (freeipa-4.3.0-1.fc24.src.rpm, x86_64): open (buildhw-05.phx2.fedoraproject.org) -> closed
  0 free  2 open  3 done  0 failed
  12284512 buildArch (freeipa-4.3.0-1.fc24.src.rpm, armv7hl): open (arm04-builder19.arm.fedoraproject.org) -> closed
  0 free  1 open  4 done  0 failed
12284450 build (rawhide, /freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e): open (buildppcle-07.phx2.fedoraproject.org) -> FAILED: BuildError: mismatch when analyzing python3-ipatests-4.3.0-1.fc24.noarch.rpm, rpmdiff output was:
error: cannot open Packages index using db5 - Permission denied (13)
error: cannot open Packages database in /var/lib/rpm
error: cannot open Packages database in /var/lib/rpm
removed     REQUIRES python3-ipalib(armv7hl-32) = 4.3.0-1.fc24
added       REQUIRES python3-ipalib(x86-64) = 4.3.0-1.fc24
  0 free  0 open  4 done  1 failed

12284450 build (rawhide, /freeipa:b2442d51ba3f2a5f907f72e9bd90c5889bd89c0e) failed 

As a temporary workaround, with_python3 could be probably set to 0 to skip building python3 packages but it will be needed for F24 final release.




Reproducible: Always

Steps to Reproduce:
1. checkout freeipa fedora git repo
2. fedpkg build
Actual Results:  
Build fails.

Expected Results:  
The build is successful. Or, if it is an error in packaging, a better error message would be helpful.


Parts of freeipa.spec:

%if 0%{?with_python3}

%package -n python3-ipalib
Summary: Python3 libraries used by IPA
Group: System Environment/Libraries
%{?python_provide:%python_provide python3-ipalib}
%{?python_provide:%{?_isa:%python_provide python3-ipalib%{_isa}}}
Provides: python3-ipapython = %{version}-%{release}
%{?python_provide:%python_provide python3-ipapython}
Provides: python3-ipaplatform = %{version}-%{release}
%{?python_provide:%python_provide python3-ipaplatform}
Requires: %{name}-common = %{version}-%{release}
Requires: python3-gssapi >= 1.1.2
Requires: gnupg
Requires: iproute
Requires: keyutils
Requires: python3-pyOpenSSL
Requires: python3-nss >= 0.16
Requires: python3-cryptography
Requires: python3-lxml
Requires: python3-netaddr
Requires: python3-libipa_hbac
Requires: python3-qrcode-core >= 5.0.0
Requires: python3-pyasn1
Requires: python3-dateutil
Requires: python3-yubico >= 1.2.3
Requires: python3-sss-murmur
Requires: curl
Requires: python3-dbus
Requires: python3-setuptools
Requires: python3-six
Requires: python3-jwcrypto

%description -n python3-ipalib
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
If you are using IPA with Python 3, you need to install this package.

%endif # with_python3

%if 0%{?with_python3}

%package -n python3-ipatests
Summary: IPA tests and test tools
BuildArch: noarch
%{?python_provide:%python_provide python3-ipatests}
Requires: %{name}-client-common = %{version}-%{release}
Requires: python3-ipalib%{?_isa} = %{version}-%{release}
Requires: tar
Requires: xz
Requires: python3-nose
Requires: python3-pytest >= 2.6
Requires: python3-coverage
Requires: python3-polib
Requires: python3-pytest-multihost >= 0.5
Requires: python3-pytest-sourceorder

%description -n python3-ipatests
IPA is an integrated solution to provide centrally managed Identity (users,
hosts, services), Authentication (SSO, 2FA), and Authorization
(host access control, SELinux user roles, services). The solution provides
features for further integration with Linux based clients (SUDO, automount)
and integration with Active Directory based infrastructures (Trusts).
This package contains tests that verify IPA functionality under Python 3.

%endif # with_python3
Comment 1 Kevin Fenzi 2016-01-04 15:19:11 UTC 
The problem here seems to me to be that the *ipatests subpackages cannot be noarch. They depend on 
Requires: python3-ipalib%{?_isa} = %{version}-%{release}
which is archful, so they have to be too. 

When koji does noarch subpackages it produces them on all arches and then checks to see that they are the same, but in this case they are not, so it fails the build.
Comment 2 Petr Vobornik 2016-01-04 17:39:24 UTC 
Thanks Kevin, if it makes sense - the output package should not differ. I'll update the spec.

Maybe it would be good to improve the error message.

This part is very misleading:
   error: cannot open Packages index using db5 - Permission denied (13)
   error: cannot open Packages database in /var/lib/rpm
   error: cannot open Packages database in /var/lib/rpm

Here it could say "noarch package should be the same on all arches" or something like that.
  BuildError: mismatch when analyzing python3-ipatests-4.3.0-1.fc24.noarch.rpm, rpmdiff output was:
  removed     REQUIRES python3-ipalib(armv7hl-32) = 4.3.0-1.fc24
  added       REQUIRES python3-ipalib(x86-64) = 4.3.0-1.fc24
Comment 3 Kevin Fenzi 2016-01-04 17:50:16 UTC 
Feel free to file a RFE for koji on that. ;) 

Shall we close this out now? or want to keep it open until things are fully working?
Comment 4 Petr Vobornik 2016-01-04 19:25:50 UTC 
It can be closed.