Bug 1927395

Summary: RHVH, protecting key packages from being removed.
Product: Red Hat Enterprise Virtualization Manager Reporter: Nir Levy <nlevy>
Component: redhat-release-virtualization-hostAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED ERRATA QA Contact: shiyi lei <shlei>
Severity: high Docs Contact:
Priority: high    
Version: 4.4.0CC: arachman, cshao, dfediuck, lsvaty, mavital, peyu, pjasbuti, sbonazzo, shlei, weiwang, yaniwang
Target Milestone: ovirt-4.4.5Keywords: ZStream
Target Release: 4.4.5Flags: shlei: testing_plan_complete+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: redhat-release-virtualization-host-4.4.5-3.el8ev Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-04-14 11:44:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Node RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Nir Levy 2021-02-10 16:27:29 UTC
Description of problem:
Currently it is possible to remove critical RHVH pacakges,
which removes the rpm's collector rpm (redhat-release-virtualization-host-content) which leaves us with no way of recovery.


Version-Release number of selected component (if applicable):
any.

How reproducible:
always

Steps to Reproduce:
1. yum remove libvirt (or any dependent rpm,
     list can be gathered by 'rpm -qR redhat-release-virtualization-host-content)
2. confirm
3. dependent package redhat-release-virtualization-host-content is lost with no way to retrieve.
   package is left with only the latest available in the CDN which is not what we want in RHVH ( high rist of breaking integrity ).

Actual results:
packages removed.

'yum remove libvirt'

Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Dependencies resolved.
==============================================================================================================================================================
 Package                                                 Architecture        Version                                               Repository            Size
==============================================================================================================================================================
Removing:
 libvirt                                                 x86_64              6.6.0-7.3.module+el8.3.0+9547+7d548490                @System                0  
Removing dependent packages:
 redhat-release-virtualization-host-content              x86_64              4.4.4-1.el8ev                                         @System                0  



 dnf remove  libvirt
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Error: 
 Problem: The operation would result in removing the following protected packages: redhat-release-virtualization-host-content
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages

Additional info:


this can be easily achieved by
cat redhat-release-virtualization-host-content > /etc/dnf/protected.d/redhat-release-virtualization-host-content.conf

file should be supplied by redhat-release-virtualization-host rpm.

Comment 3 shiyi lei 2021-02-18 05:43:52 UTC
Test version:
rhvh-4.4.5.3-0.20210215.0

Test steps:
1.Install rhvh
2.yum/dnf remove libvirt

Test result:
[root@lenovo-sr630-08 ~]# yum remove libvirt
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Error: 
 Problem: The operation would result in removing the following protected packages: redhat-release-virtualization-host-content
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
[root@lenovo-sr630-08 ~]# dnf remove libvirt
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Error: 
 Problem: The operation would result in removing the following protected packages: redhat-release-virtualization-host-content
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)


This bug has been fixed in the latest version. Move the status to VERIFIED.

Comment 12 errata-xmlrpc 2021-04-14 11:44:48 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Virtualization security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1189

Comment 13 errata-xmlrpc 2021-04-14 11:48:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Virtualization security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1189