Bug 1489431

Summary:	[downstream clone - 4.1.6] Rpm verify fails for newly installed libvirt-daemon-config-nwfilter package .
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	rhev-integ
Component:	ovirt-node-ng	Assignee:	Douglas Schilling Landgraf <dougsland>
Status:	CLOSED ERRATA	QA Contact:	cshao <cshao>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	3.6.9	CC:	dfediuck, dougsland, lsurette, pstehlik, rabraham, rbalakri, srevivo, ycui, ykaul
Target Milestone:	ovirt-4.1.6	Keywords:	Unconfirmed, ZStream
Target Release:	---	Flags:	lsvaty: testing_plan_complete-
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1436519	Environment:
Last Closed:	2017-09-19 07:20:24 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Node	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1436519
Bug Blocks:

Description rhev-integ 2017-09-07 12:41:37 UTC

+++ This bug is a downstream clone. The original bug is: +++
+++   bug 1436519 +++
======================================================================

Description of problem:

libvirt-daemon-config-nwfilter package always returns inconsistencies for rpm verify   run against it . This issue is seen only on RHV hypervisor hosts and not on regular RHEL based host servers. An entry for uuid gets added into all the files under /etc/libvirt/nwfilter for which the rpm verify files .

Version-Release number of selected component (if applicable):

libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.5.x86_64.rpm
libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.4.x86_64.rpm

How reproducible:

Install a RHV hypervisor version  7 (3.10.0 - 514.el7.x86_64_) for RHEV 3.6 .

Steps to Reproduce:
1. Install RHV hypervisor version 7 
2. Do a rpm verify check for it using 

   # rpm -V libvirt-daemon-config-nwfilter
 

Actual results:

RPM verify fails with the below error

# rpm -q -V libvirt-daemon-config-nwfilter
SM5....T.    /etc/libvirt/nwfilter/allow-arp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp-server.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-incoming-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/allow-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/clean-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-multicast.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-broadcast.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-l2-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-rarp-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self-rarp.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self.xml



Expected results:

RPM for newly installed OS should return a consistent value. 

Additional info:

The uuid field entries are only seen on RHV hypervisor based hosts and not on any RHEL based host servers.

(Originally by Ribu Abraham)

Comment 5 rhev-integ 2017-09-07 12:41:56 UTC

Can you please provide a full sos report of the system?
It's not clear if this is a RHEV-H 3.6 setup, a RHEL-H 3.6 setup or anything different from above.
Also, this seems related to Bug #1431581 so this may be a RHEL bug and not a RHEV bug.

(Originally by Sandro Bonazzola)

Comment 9 rhev-integ 2017-09-07 12:42:14 UTC

# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 7.3 (Maipo)

# yum install libvirt-daemon-config-nwfilter
<snip>

# rpm -V libvirt-daemon-config-nwfilter
SM5....T.    /etc/libvirt/nwfilter/allow-arp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp-server.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-incoming-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/allow-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/clean-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-multicast.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-broadcast.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-l2-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-rarp-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self-rarp.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self.xml

(Originally by dougsland)

Comment 19 errata-xmlrpc 2017-09-19 07:20:24 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:2758

Comment 20 Daniel Gur 2019-08-28 13:14:23 UTC

sync2jira

Comment 21 Daniel Gur 2019-08-28 13:19:25 UTC

sync2jira