Bug 1684077

Summary: java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64 requires pcsc-lite-devel which is in optional repo
Product: Red Hat Enterprise Linux 7 Reporter: Marcel Härri <mharri>
Component: java-1.8.0-openjdkAssignee: jiri vanek <jvanek>
Status: CLOSED ERRATA QA Contact: OpenJDK QA <java-qa>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 7.6CC: ahughes, ahumbe, amarchuk, amashah, arydekul, asabadra, bhoefer, brent.johnston, dbhole, dward, itbrown, jbhatia, jcastran, jpazdziora, jpf321, juriarte, jvanek, knakayam, ktordeur, kupadhya, lvrtelov, mescanfe, mharri, mmccune, msurbey, nkathole, osni.oliveira, rjerrido, rromerom, salmy, sgehwolf, tcarlin, vkrizan, zzambers
Target Milestone: rcKeywords: PrioBumpGSS, Regression, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: java-1.8.0-openjdk-1.8.0.201.b09-2.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1684403 (view as bug list) Environment:
Last Closed: 2019-08-06 12:33:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1644888, 1684403, 1685298    

Description Marcel Härri 2019-02-28 11:18:06 UTC
Description of problem:

https://docs.openshift.com/container-platform/3.11/install/host_preparation.html#host-registration

subscription-manager repos \
    --enable="rhel-7-server-rpms" \
    --enable="rhel-7-server-extras-rpms" \
    --enable="rhel-7-server-ose-3.11-rpms" \
    --enable="rhel-7-server-ansible-2.6-rpms"

# yum install openshift-ansible
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-manager
azure-cli                                                                                                                                                                                                               | 2.9 kB  00:00:00     
rh-gluster-3-client-for-rhel-7-server-rpms                                                                                                                                                                              | 4.1 kB  00:00:00     
rhel-7-fast-datapath-rpms                                                                                                                                                                                               | 4.1 kB  00:00:00     
rhel-7-server-ansible-2.6-rpms                                                                                                                                                                                          | 4.1 kB  00:00:00     
rhel-7-server-extras-rpms                                                                                                                                                                                               | 3.5 kB  00:00:00     
rhel-7-server-ose-3.11-rpms                                                                                                                                                                                             | 4.1 kB  00:00:00     
rhel-7-server-rpms                                                                                                                                                                                                      | 3.5 kB  00:00:00     
(1/19): azure-cli/primary_db                                                                                                                                                                                            |  39 kB  00:00:00     
(2/19): rh-gluster-3-client-for-rhel-7-server-rpms/7Server/x86_64/group                                                                                                                                                 |  104 B  00:00:00     
(3/19): rh-gluster-3-client-for-rhel-7-server-rpms/7Server/x86_64/updateinfo                                                                                                                                            |  84 kB  00:00:00     
(4/19): rh-gluster-3-client-for-rhel-7-server-rpms/7Server/x86_64/primary_db                                                                                                                                            | 112 kB  00:00:00     
(5/19): rhel-7-fast-datapath-rpms/7Server/x86_64/group                                                                                                                                                                  |  104 B  00:00:00     
(6/19): rhel-7-fast-datapath-rpms/7Server/x86_64/updateinfo                                                                                                                                                             |  21 kB  00:00:00     
(7/19): rhel-7-fast-datapath-rpms/7Server/x86_64/primary_db                                                                                                                                                             |  98 kB  00:00:00     
(8/19): rhel-7-server-ansible-2.6-rpms/x86_64/group                                                                                                                                                                     |  104 B  00:00:00     
(9/19): rhel-7-server-ansible-2.6-rpms/x86_64/updateinfo                                                                                                                                                                |  12 kB  00:00:00     
(10/19): rhel-7-server-ansible-2.6-rpms/x86_64/primary_db                                                                                                                                                               |  16 kB  00:00:00     
(11/19): rhel-7-server-extras-rpms/x86_64/group                                                                                                                                                                         |  104 B  00:00:00     
(12/19): rhel-7-server-extras-rpms/x86_64/updateinfo                                                                                                                                                                    | 315 kB  00:00:00     
(13/19): rhel-7-server-extras-rpms/x86_64/primary_db                                                                                                                                                                    | 514 kB  00:00:00     
(14/19): rhel-7-server-ose-3.11-rpms/x86_64/group                                                                                                                                                                       |  104 B  00:00:00     
(15/19): rhel-7-server-ose-3.11-rpms/x86_64/updateinfo                                                                                                                                                                  |  92 kB  00:00:00     
(16/19): rhel-7-server-ose-3.11-rpms/x86_64/primary_db                                                                                                                                                                  | 180 kB  00:00:00     
(17/19): rhel-7-server-rpms/7Server/x86_64/group                                                                                                                                                                        | 856 kB  00:00:00     
(18/19): rhel-7-server-rpms/7Server/x86_64/updateinfo                                                                                                                                                                   | 3.2 MB  00:00:00     
(19/19): rhel-7-server-rpms/7Server/x86_64/primary_db                                                                                                                                                                   |  54 MB  00:00:01     
Resolving Dependencies
--> Running transaction check
---> Package openshift-ansible.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
--> Processing Dependency: openshift-ansible-docs = 3.11.82-3.git.0.9718d0a.el7 for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: openshift-ansible-playbooks = 3.11.82-3.git.0.9718d0a.el7 for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: openshift-ansible-roles = 3.11.82-3.git.0.9718d0a.el7 for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: java-1.8.0-openjdk-headless for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: patch for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: python2-crypto for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Running transaction check
---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.201.b09-0.el7_6 will be installed
--> Processing Dependency: copy-jdk-configs >= 3.3 for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
--> Processing Dependency: tzdata-java >= 2015d for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
--> Processing Dependency: jpackage-utils for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
--> Processing Dependency: lksctp-tools(x86-64) for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
--> Processing Dependency: pcsc-lite-devel(x86-64) for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
---> Package openshift-ansible-docs.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
---> Package openshift-ansible-playbooks.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
---> Package openshift-ansible-roles.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
---> Package patch.x86_64 0:2.7.1-10.el7_5 will be installed
---> Package python2-crypto.x86_64 0:2.6.1-15.el7 will be installed
--> Processing Dependency: libtomcrypt.so.0()(64bit) for package: python2-crypto-2.6.1-15.el7.x86_64
--> Running transaction check
---> Package copy-jdk-configs.noarch 0:3.3-10.el7_5 will be installed
---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.201.b09-0.el7_6 will be installed
--> Processing Dependency: pcsc-lite-devel(x86-64) for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
---> Package javapackages-tools.noarch 0:3.4.1-11.el7 will be installed
--> Processing Dependency: python-javapackages = 3.4.1-11.el7 for package: javapackages-tools-3.4.1-11.el7.noarch
---> Package libtomcrypt.x86_64 0:1.17-26.el7 will be installed
--> Processing Dependency: libtommath >= 0.42.0 for package: libtomcrypt-1.17-26.el7.x86_64
--> Processing Dependency: libtommath.so.0()(64bit) for package: libtomcrypt-1.17-26.el7.x86_64
---> Package lksctp-tools.x86_64 0:1.0.17-2.el7 will be installed
---> Package tzdata-java.noarch 0:2018i-1.el7 will be installed
--> Running transaction check
---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.201.b09-0.el7_6 will be installed
--> Processing Dependency: pcsc-lite-devel(x86-64) for package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64
---> Package libtommath.x86_64 0:0.42.0-6.el7 will be installed
---> Package python-javapackages.noarch 0:3.4.1-11.el7 will be installed
--> Finished Dependency Resolution
Error: Package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64 (rhel-7-server-rpms)
           Requires: pcsc-lite-devel(x86-64)
**********************************************************************
yum can be configured to try to resolve such errors by temporarily enabling
disabled repos and searching for missing dependencies.
To enable this functionality please set 'notify_only=0' in /etc/yum/pluginconf.d/search-disabled-repos.conf
**********************************************************************

Error: Package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64 (rhel-7-server-rpms)
           Requires: pcsc-lite-devel(x86-64)
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest


pcsc-lite-devel is in optional repo, which makes java-1.8.0-openjdk-headless not installable based on what OpenShift documentation says

Comment 2 Marcel Härri 2019-02-28 11:21:26 UTC
This is a new dependency (yesterday things still worked) and excluding this particular openjdk release makes things working again:

# yum install openshift-ansible --exclude java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6
Loaded plugins: langpacks, product-id, search-disabled-repos, subscription-manager
Resolving Dependencies
--> Running transaction check
---> Package openshift-ansible.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
--> Processing Dependency: openshift-ansible-docs = 3.11.82-3.git.0.9718d0a.el7 for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: openshift-ansible-playbooks = 3.11.82-3.git.0.9718d0a.el7 for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: openshift-ansible-roles = 3.11.82-3.git.0.9718d0a.el7 for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: java-1.8.0-openjdk-headless for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: patch for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Processing Dependency: python2-crypto for package: openshift-ansible-3.11.82-3.git.0.9718d0a.el7.noarch
--> Running transaction check
---> Package java-1.8.0-openjdk-headless.x86_64 1:1.8.0.191.b12-1.el7_6 will be installed
--> Processing Dependency: copy-jdk-configs >= 2.2 for package: 1:java-1.8.0-openjdk-headless-1.8.0.191.b12-1.el7_6.x86_64
--> Processing Dependency: tzdata-java >= 2015d for package: 1:java-1.8.0-openjdk-headless-1.8.0.191.b12-1.el7_6.x86_64
--> Processing Dependency: jpackage-utils for package: 1:java-1.8.0-openjdk-headless-1.8.0.191.b12-1.el7_6.x86_64
--> Processing Dependency: lksctp-tools(x86-64) for package: 1:java-1.8.0-openjdk-headless-1.8.0.191.b12-1.el7_6.x86_64
---> Package openshift-ansible-docs.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
---> Package openshift-ansible-playbooks.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
---> Package openshift-ansible-roles.noarch 0:3.11.82-3.git.0.9718d0a.el7 will be installed
---> Package patch.x86_64 0:2.7.1-10.el7_5 will be installed
---> Package python2-crypto.x86_64 0:2.6.1-15.el7 will be installed
--> Processing Dependency: libtomcrypt.so.0()(64bit) for package: python2-crypto-2.6.1-15.el7.x86_64
--> Running transaction check
---> Package copy-jdk-configs.noarch 0:3.3-10.el7_5 will be installed
---> Package javapackages-tools.noarch 0:3.4.1-11.el7 will be installed
--> Processing Dependency: python-javapackages = 3.4.1-11.el7 for package: javapackages-tools-3.4.1-11.el7.noarch
---> Package libtomcrypt.x86_64 0:1.17-26.el7 will be installed
--> Processing Dependency: libtommath >= 0.42.0 for package: libtomcrypt-1.17-26.el7.x86_64
--> Processing Dependency: libtommath.so.0()(64bit) for package: libtomcrypt-1.17-26.el7.x86_64
---> Package lksctp-tools.x86_64 0:1.0.17-2.el7 will be installed
---> Package tzdata-java.noarch 0:2018i-1.el7 will be installed
--> Running transaction check
---> Package libtommath.x86_64 0:0.42.0-6.el7 will be installed
---> Package python-javapackages.noarch 0:3.4.1-11.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

===============================================================================================================================================================================================================================================
 Package                                                        Arch                                      Version                                                         Repository                                                      Size
===============================================================================================================================================================================================================================================
Installing:
 openshift-ansible                                              noarch                                    3.11.82-3.git.0.9718d0a.el7                                     rhel-7-server-ose-3.11-rpms                                    529 k
Installing for dependencies:
 copy-jdk-configs                                               noarch                                    3.3-10.el7_5                                                    rhel-7-server-rpms                                              21 k
 java-1.8.0-openjdk-headless                                    x86_64                                    1:1.8.0.191.b12-1.el7_6                                         rhel-7-server-rpms                                              32 M
 javapackages-tools                                             noarch                                    3.4.1-11.el7                                                    rhel-7-server-rpms                                              73 k
 libtomcrypt                                                    x86_64                                    1.17-26.el7                                                     rhel-7-server-extras-rpms                                      224 k
 libtommath                                                     x86_64                                    0.42.0-6.el7                                                    rhel-7-server-extras-rpms                                       36 k
 lksctp-tools                                                   x86_64                                    1.0.17-2.el7                                                    rhel-7-server-rpms                                              88 k
 openshift-ansible-docs                                         noarch                                    3.11.82-3.git.0.9718d0a.el7                                     rhel-7-server-ose-3.11-rpms                                    545 k
 openshift-ansible-playbooks                                    noarch                                    3.11.82-3.git.0.9718d0a.el7                                     rhel-7-server-ose-3.11-rpms                                    676 k
 openshift-ansible-roles                                        noarch                                    3.11.82-3.git.0.9718d0a.el7                                     rhel-7-server-ose-3.11-rpms                                    1.7 M
 patch                                                          x86_64                                    2.7.1-10.el7_5                                                  rhel-7-server-rpms                                             110 k
 python-javapackages                                            noarch                                    3.4.1-11.el7                                                    rhel-7-server-rpms                                              31 k
 python2-crypto                                                 x86_64                                    2.6.1-15.el7                                                    rhel-7-server-extras-rpms                                      477 k
 tzdata-java                                                    noarch                                    2018i-1.el7                                                     rhel-7-server-rpms                                             187 k

Transaction Summary
===============================================================================================================================================================================================================================================
Install  1 Package (+13 Dependent packages)

Total download size: 36 M
Installed size: 121 M
Is this ok [y/d/N]:

Comment 3 Ruben Romero Montes 2019-02-28 12:20:02 UTC
Hi,

We are having the same problem when running OSBS builds
http://download.eng.bos.redhat.com/brewroot/work/tasks/8695/20398695/x86_64.log

~~~
2019-02-28 11:55:55,877 - atomic_reactor.plugins.imagebuilder - INFO - Error: Package: 1:java-1.8.0-openjdk-headless-1.8.0.201.b09-0.el7_6.x86_64 (rhel-7-server-rpms)
2019-02-28 11:55:55,878 - atomic_reactor.plugins.imagebuilder - INFO -            Requires: pcsc-lite-devel(x86-64)
~~~

This is blocking or image release process.

Thanks

Comment 5 jiri vanek 2019-02-28 12:45:15 UTC
There is no test on java-qa side. However, errata workfou had not found this and that is suspicious

Comment 6 jiri vanek 2019-02-28 12:46:15 UTC
> 
> pcsc-lite-devel is in optional repo, which makes java-1.8.0-openjdk-headless
> not installable based on what OpenShift documentation says

Marcel,  Why dont you enable optional?

Comment 7 Marcel Härri 2019-02-28 12:53:19 UTC
Because OpenShift docs doesn't say so and obviously this is a new dependency within a patch release, that breaks lots of existing things.

So either this dependency is really required and thus all the build systems and documentation all around our products need to be adapted or this dep needs to be fixed.

Also: Imagine having openjdk installed 2 weeks ago, now you want to update your servers, suddenly you need an additional repo?

Comment 8 David Ward 2019-02-28 13:15:29 UTC
This is a highly urgent, critical, blocking issue. At this time no JBoss Middleware openshift images that use openjdk8 (which is pretty much all of them) can be successfully built with this update, and it is putting many RH developers on hold until this is fixed. Can someone please share an ETA? Thank you.

Comment 9 jiri vanek 2019-02-28 13:45:03 UTC
*** Bug 1684096 has been marked as a duplicate of this bug. ***

Comment 17 Andrew John Hughes 2019-02-28 14:36:16 UTC
This looks like a bad dependency. It should be pcsc-lite-libs:

https://brewweb.engineering.redhat.com/brew/rpminfo?rpmID=5750095

I assume that is in Base because java-1.7.0-openjdk already depends on it and has for some time:

https://brewweb.engineering.redhat.com/brew/rpminfo?rpmID=6792880

Comment 19 Andrew John Hughes 2019-02-28 14:49:53 UTC
It appears to depend on pcsc-lite-devel, because only that includes a versionless symlink:

https://bugzilla.redhat.com/show_bug.cgi?id=910107

We should switch to pcsc-lite-libs and patch OpenJDK to use the versioned symlink:

https://jerboaa.fedorapeople.org/bugs/openjdk/9000142/webrev.0/

If someone could confirm pcsc-lite-libs, that would be helpful. I'm assuming it is as java-1.7.0-openjdk-headless depends on it.

Comment 30 Osni Oliveira 2019-02-28 17:30:16 UTC
(In reply to David Ward from comment #8)
> This is a highly urgent, critical, blocking issue. At this time no JBoss
> Middleware openshift images that use openjdk8 (which is pretty much all of
> them) can be successfully built with this update, and it is putting many RH
> developers on hold until this is fixed. Can someone please share an ETA?
> Thank you.

Confirming and reinforcing, this is affecting Data Grid image builds, too. We have an important CVE that will need manual re-spin (freshmaker didn't pick up our new 7.3 image) and this issue is blocking us. We have a due date in two weeks for this CVE, but there's no guarantee we won't have a critical one coming up (less than one week to release a new image). We're also waiting on an ETA. Thank you.

Comment 31 jiri vanek 2019-02-28 18:26:37 UTC
(In reply to Osni Oliveira from comment #30)
> (In reply to David Ward from comment #8)
> > This is a highly urgent, critical, blocking issue. At this time no JBoss
> > Middleware openshift images that use openjdk8 (which is pretty much all of
> > them) can be successfully built with this update, and it is putting many RH
> > developers on hold until this is fixed. Can someone please share an ETA?
> > Thank you.
> 
> Confirming and reinforcing, this is affecting Data Grid image builds, too.
> We have an important CVE that will need manual re-spin (freshmaker didn't
> pick up our new 7.3 image) and this issue is blocking us. We have a due date
> in two weeks for this CVE, but there's no guarantee we won't have a critical
> one coming up (less than one week to release a new image). We're also
> waiting on an ETA. Thank you.

Again, Ikeep wodering that this was not found during 7.7 testing. Anyway, fix is pushed in 7.7. If somebody si abel to get 7.6 push bug. Then you have it.

Comment 33 jiri vanek 2019-03-01 11:00:46 UTC
*** Bug 1684469 has been marked as a duplicate of this bug. ***

Comment 34 Scott Dodson 2019-03-01 13:27:00 UTC
*** Bug 1684285 has been marked as a duplicate of this bug. ***

Comment 47 errata-xmlrpc 2019-08-06 12:33:48 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2006