Bug 2104257
| Summary: | adapt crypto-policies to removal of java on i686 | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | jiri vanek <jvanek> |
| Component: | crypto-policies | Assignee: | Red Hat Crypto Team <crypto-team> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | ahughes, asosedki, cllang, crypto-team, dbelyavs, java-maint-sig, jhuttana, jvanek, luk.claes, mspacek, mturk, pmikova, rrelyea, sahana, sgehwolf, tm, zzambers |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-07-18 17:13:47 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 2083750, 2104259 | ||
|
Description
jiri vanek
2022-07-05 19:25:04 UTC
As discussed in https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LZY7R6BBQG3XQG6RVCYG2WNWPCGMOFY4/, this is a problem for the subversion or git packages to fix, not for openssl. However, crypto-policies' dependency on java should be investigated. Unfortunately it seems no ticket was filed for crypto-policies for this change. I'll re-name and re-assign this ticket to track this. crypto-policies is noarch, so is this even a problem? crypto-policies requires java only for build to be able to run tests of the java crypto policy. The build arch of crypto-policies is noarch. I do not know if it is possible to somehow exclude build on i686 for a noarch build. It's not and I'm just gonna close the bug. Hello! This may get more tricky, and my advice is to reopen the bug. Crypto policies, as being noarch, and direclty depending on java, has ben amended by me, instead havinf filled the bug. I have 2weeks ago i injected https://src.fedoraproject.org/rpms/crypto-policies/c/675ff515727bbe0188b5f0dbd8fdc7dbefc5b470?branch=rawhide ; which is actually doing what Tomas wanted (so Alexandr is wrong), however, that "solution" have bug in bbug. By design, such pkg should will not be availabl in i686 repos. (if pkg have exclusive arches, it builds only on them, but even if noarch, it is available only there). But luckily there is bug.. in pungi... which is invalidating the desig. In all cases, the behavior is not reliable. In adition, we no longer have i686 repos, they are multilib only... So the i686 will inherit all x86_64's noarch pkgs.... If the java deps i s only for tests, I recomed to revert my "fix" and ifarch onky the test and java dependence. Of course you can keep it as it is, and take a risk (whihc should be safe by all my thinking, but others thinks differently) (In reply to Tomáš Mráz from comment #3) > crypto-policies requires java only for build to be able to run tests of the > java crypto policy. The build arch of crypto-policies is noarch. I do not > know if it is possible to somehow exclude build on i686 for a noarch build. Could we not migrate these to the JDK? We are also running tests to make sure the JDK is using crypto policies, which means we have a build requirement on crypto-policies... So removing the dependency from crypto-policies would not only fix the i686 issue on Fedora, but also fix a cyclic dependency. > revert my "fix" and ifarch onky the test and java dependence
could you elaborate what do you mean by that? somehow conditionalizing the BuildRequires on java?
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 365 days |