Bug 1905619
| Summary: | [4.6.z] usbguard extension fails to install because of missing correct protobuf dependency version | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Micah Abbott <miabbott> |
| Component: | RHCOS | Assignee: | Micah Abbott <miabbott> |
| Status: | CLOSED ERRATA | QA Contact: | Michael Nguyen <mnguyen> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 4.6 | CC: | bbreard, imcleod, jligon, miabbott, mnguyen, nstielau, sdodson, skumari |
| Target Milestone: | --- | ||
| Target Release: | 4.6.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1905430 | Environment: | |
| Last Closed: | 2020-12-21 13:24:19 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1905430 | ||
| Bug Blocks: | |||
|
Description
Micah Abbott
2020-12-08 16:42:16 UTC
https://gitlab.cee.redhat.com/coreos/redhat-coreos/-/merge_requests/1193 This MR has already merged, we should see RHCOS 4.6 builds using it soon. Thank you Micah for fixing the issue with priority. MCO 4.6 e2e-gcp-op test is green now! Moving this to MODIFIED so that when the next ART nightly is built it should go ON_QA without further action. $ oc get clusterversion
NAME VERSION AVAILABLE PROGRESSING SINCE STATUS
version 4.6.0-0.nightly-2020-12-13-230909 True False 2m38s Cluster version is 4.6.0-0.nightly-2020-12-13-230909
$ oc get mc
NAME GENERATEDBYCONTROLLER IGNITIONVERSION AGE
00-master eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
00-worker eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
01-master-container-runtime eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
01-master-kubelet eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
01-worker-container-runtime eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
01-worker-kubelet eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
99-master-generated-registries eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
99-master-ssh 3.1.0 35m
99-worker-generated-registries eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
99-worker-ssh 3.1.0 35m
rendered-master-abf49d28f54aca1f839f586d03317e8b eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
rendered-worker-f11107cabe3fba649a22418182377786 eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 25m
$ cp ../extensions-usbguard.yaml .
$ cat extensions-usbguard.yaml
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
metadata:
labels:
machineconfiguration.openshift.io/role: worker
name: worker-extensions-usbguard
spec:
config:
ignition:
version: 3.1.0
extensions:
- usbguard
$ oc get nodes
NAME STATUS ROLES AGE VERSION
ip-10-0-146-248.us-west-2.compute.internal Ready worker 19m v1.19.0+7070803
ip-10-0-151-204.us-west-2.compute.internal Ready master 27m v1.19.0+7070803
ip-10-0-171-205.us-west-2.compute.internal Ready master 28m v1.19.0+7070803
ip-10-0-177-134.us-west-2.compute.internal Ready worker 19m v1.19.0+7070803
ip-10-0-207-32.us-west-2.compute.internal Ready worker 19m v1.19.0+7070803
ip-10-0-213-46.us-west-2.compute.internal Ready master 27m v1.19.0+7070803
$ oc debug node/ip-10-0-146-248.us-west-2.compute.internal -- chroot /host rpm -q usbguard
Starting pod/ip-10-0-146-248us-west-2computeinternal-debug ...
To use host binaries, run `chroot /host`
package usbguard is not installed
Removing debug pod ...
$ oc create -f extensions-usbguard.yaml
machineconfig.machineconfiguration.openshift.io/worker-extensions-usbguard created
$ oc get mc
NAME GENERATEDBYCONTROLLER IGNITIONVERSION AGE
00-master eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
00-worker eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
01-master-container-runtime eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
01-master-kubelet eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
01-worker-container-runtime eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
01-worker-kubelet eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
99-master-generated-registries eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
99-master-ssh 3.1.0 36m
99-worker-generated-registries eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
99-worker-ssh 3.1.0 36m
rendered-master-abf49d28f54aca1f839f586d03317e8b eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
rendered-worker-4bf1bdb7cc3b8c5cb38d8ae5235eb47c eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 0s
rendered-worker-f11107cabe3fba649a22418182377786 eb9778355a9020673e8ce9aee092cb98d80cde5e 3.1.0 26m
worker-extensions-usbguard 3.1.0 5s
$ oc get mcp/worker
NAME CONFIG UPDATED UPDATING DEGRADED MACHINECOUNT READYMACHINECOUNT UPDATEDMACHINECOUNT DEGRADEDMACHINECOUNT AGE
worker rendered-worker-f11107cabe3fba649a22418182377786 True False False 3 3 3 0 27m
$ oc get mcp/worker
NAME CONFIG UPDATED UPDATING DEGRADED MACHINECOUNT READYMACHINECOUNT UPDATEDMACHINECOUNT DEGRADEDMACHINECOUNT AGE
worker rendered-worker-f11107cabe3fba649a22418182377786 False True False 3 0 0 0 28m
$ watch oc get mcp/worker
$ oc debug node/ip-10-0-146-248.us-west-2.compute.internal -- chroot /host rpm -q usbguard
Starting pod/ip-10-0-146-248us-west-2computeinternal-debug ...
To use host binaries, run `chroot /host`
usbguard-0.7.4-4.el8.x86_64
Removing debug pod ...
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: OpenShift Container Platform 4.6.9 security and bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:5614 |