Bug 1517010

Summary:	Domain controller role deployment fails due to FreeIPA package dependency issues in current Modular Server
Product:	[Fedora] Fedora	Reporter:	Adam Williamson <awilliam>
Component:	fedora-modular-release	Assignee:	Nils Philippsen <nphilipp>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	27	CC:	gmarr, karsten, nphilipp, sgallagh
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-11-27 19:48:29 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1492243

Description Adam Williamson 2017-11-23 22:10:43 UTC

In the latest Modular Server compose - Fedora-Modular-27-20171123.n.1 - domain controller role deployment fails due to some dependency issues in FreeIPA-related packages:

Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b' Problem 1: package pki-ca-10.4.8-5.module_d7991f26.noarch requires pki-server = 10.4.8-5.module_d7991f26, but none of the providers can be installed
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-server-10.4.8-5.module_d7991f26.noarch requires pki-base-java = 10.4.8-5.module_d7991f26, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-4.6.1-3.module_c6e3f1f6.x86_64 requires pki-ca >= 10.4.0-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-base-java-10.4.8-5.module_d7991f26.noarch requires resteasy-jackson-provider >= 3.0.17-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - conflicting requests'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - nothing provides mvn(org.codehaus.jackson:jackson-core-asl) needed by resteasy-jackson-provider-3.0.19-6.module_ee1166e3.noarch'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b' Problem 2: package pki-kra-10.4.8-5.module_d7991f26.noarch requires pki-server = 10.4.8-5.module_d7991f26, but none of the providers can be installe
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-4.6.1-3.module_c6e3f1f6.x86_64 requires pki-kra >= 10.4.0-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-server-10.4.8-5.module_d7991f26.noarch requires pki-base-java = 10.4.8-5.module_d7991f26, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-dns-4.6.1-3.module_c6e3f1f6.noarch requires freeipa-server = 4.6.1-3.module_c6e3f1f6, but none of the providers can be ins
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-base-java-10.4.8-5.module_d7991f26.noarch requires resteasy-jackson-provider >= 3.0.17-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - conflicting requests'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - nothing provides mvn(org.codehaus.jackson:jackson-core-asl) needed by resteasy-jackson-provider-3.0.19-6.module_ee1166e3.noarch'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b' Problem 3: package pki-kra-10.4.8-5.module_d7991f26.noarch requires pki-server = 10.4.8-5.module_d7991f26, but none of the providers can be installe
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-4.6.1-3.module_c6e3f1f6.x86_64 requires pki-kra >= 10.4.0-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-server-10.4.8-5.module_d7991f26.noarch requires pki-base-java = 10.4.8-5.module_d7991f26, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-trust-ad-4.6.1-3.module_c6e3f1f6.x86_64 requires freeipa-server = 4.6.1-3.module_c6e3f1f6, but none of the providers can b
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-base-java-10.4.8-5.module_d7991f26.noarch requires resteasy-jackson-provider >= 3.0.17-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - conflicting requests'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - nothing provides mvn(org.codehaus.jackson:jackson-core-asl) needed by resteasy-jackson-provider-3.0.19-6.module_ee1166e3.noarch'

Proposing as a Final blocker, this is a clear violation of the requirement for release-blocking roles to be deployable.

Comment 1 Nils Philippsen 2017-11-27 12:50:00 UTC

This seems to come from moving jackson e.a. out of resteasy into maven which isn't finished yet. See the following two PRs against the maven module:

https://src.fedoraproject.org/modules/maven/pull-request/1
https://src.fedoraproject.org/modules/maven/pull-request/2

Comment 2 Geoffrey Marr 2017-11-27 18:32:40 UTC

Discussed during the 2017-11-27 blocker review meeting: [1]

The decision to classify this bug as an AcceptedBlocker was made as it violates the following blocker criteria:

"Release-blocking roles and the supported role configuration interfaces must meet the core functional Role Definition Requirements to the extent that supported roles can be successfully deployed..." - domain controller is a release-blocking role

[1] https://meetbot.fedoraproject.org/fedora-blocker-review/2017-11-27/f27-8-blocker-review.2017-11-27-17.01.txt

Comment 3 Nils Philippsen 2017-11-29 13:37:22 UTC

Hmm, that move proved to be too complicated, so I've moved jackson and the deps back into resteasy for the time being. Ultimately it should have its own module I guess.

Comment 4 Adam Williamson 2017-11-30 00:53:03 UTC

We're abandoning the F27 Modular Server release.

Comment 5 Ben Cotton 2018-11-27 17:59:23 UTC

This message is a reminder that Fedora 27 is nearing its end of life.
On 2018-Nov-30  Fedora will stop maintaining and issuing updates for
Fedora 27. It is Fedora's policy to close all bug reports from releases
that are no longer maintained. At that time this bug will be closed as
EOL if it remains open with a Fedora  'version' of '27'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 27 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 6 Adam Williamson 2018-11-27 19:48:29 UTC

See #c4.