Bug 2026184

Summary:	PackageKit does not respect `dnf versionlock`
Product:	[Fedora] Fedora	Reporter:	Maxwell G <maxwell>
Component:	PackageKit	Assignee:	Richard Hughes <rhughes>
Status:	NEW ---	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	gnome-sig, jonathan, kapsh, kde-sig, ochal, orion, pahan, rdieter, rhughes, skaplons, smparrish, thofmann, Thomas.Rausch
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Maxwell G 2021-11-24 01:52:28 UTC

Description of problem:
I have versionlocked[1] the `mpv` package, because the latest version is incompatible with one of the mpv scripts that I use. Annoyingly, KDE Discover ignores this and repeatedly offers to upgrade the package.

Version-Release number of selected component (if applicable):
plasma-discover-5.23.3.1-1.fc35.x86_64


Steps to Reproduce:
1. sudo dnf install 'dnf-command(versionlock)'
2. sudo dnf install downgrade mpv
3. sudo dnf versionlock mpv

Actual results:
KDE Discover offers to upgrade MPV.

Expected results:
KDE Discover/packagekit (whichever is at fault here) should respect `dnf versionlock.

[1]: https://dnf-plugins-core.readthedocs.io/en/latest/versionlock.html

Comment 1 Rex Dieter 2021-11-24 14:42:32 UTC

Probably more an issue that "PackageKit doesn't support dnf versionlock", can you confirm if this does the same as discover?

pkcon update

Comment 2 Maxwell G 2021-11-26 16:27:08 UTC

You are right; this is an issue with Packageit. What are the next steps to resolve this issue? Should I set the Bugzilla component to Packagekit?

Comment 3 Maxwell G 2021-12-01 00:20:07 UTC

(In reply to Maxwell G from comment #2)
> You are right; this is an issue with Packageit. What are the next steps to
> resolve this issue? Should I set the Bugzilla component to Packagekit?

I have transferred this bug to Packagekit. Packagekit maintainer(s), please let me know if there's any other information you need from me.

Thanks,
Maxwell

Comment 4 Maxwell G 2021-12-01 05:20:37 UTC

(In reply to Maxwell G from comment #0)
> Steps to Reproduce:
> 1. sudo dnf install 'dnf-command(versionlock)'
> 2. sudo dnf install downgrade mpv
> 3. sudo dnf versionlock mpv

For the record, mpv is not included in the default Fedora repos (it's from rpmfusion-free), but another package can of course be used to reproduce this issue.

Comment 5 Thomas Rausch 2023-01-23 08:43:30 UTC

Is there a possibility that until the problem is solved, perhaps the package at Packagekit is also masked in parallel?

Comment 6 Sandro Bonazzola 2023-04-17 14:36:50 UTC

Setting severity to medium as if you need to exclude a specific NVR that introduces a regression:

# dnf versionlock exclude <broken NVR>

will avoid dnf to update to that NVR but pkcon update will apply the broken build anyway.

Comment 7 Orion Poplawski 2023-08-03 14:16:47 UTC

This is very problematic for us.  Is there an alternative method to lock package version in PackageKit?