Bug 2221017

Summary: rust-sevctl-0.4.3 is available
Product: [Fedora] Fedora Reporter: Upstream Release Monitoring <upstream-release-monitoring>
Component: rust-sevctlAssignee: Tyler Fanelli <tfanelli>
Status: CLOSED COMPLETED QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: berrange, crobinso, decathorpe, rust-sig, slopezpa, tfanelli, virt-maint
Target Milestone: ---Keywords: FutureFeature, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-08-08 03:51:59 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Upstream Release Monitoring 2023-07-07 03:53:56 UTC
Releases retrieved: 0.4.0, 0.4.1
Upstream release that is considered latest: 0.4.1
Current version/release in rawhide: 0.3.2-4.fc39
URL: https://crates.io/crates/sevctl

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/188189/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/rust-sevctl

Comment 1 Fabio Valentini 2023-07-27 18:56:21 UTC
Looks like this was pushed to rawhide?

Note that there's a build failure that seems to be caused by sev v1.2.1, which apparently hid some previously public modules (which should almost certainly have been breaking release, i.e. 2.0.0, but wasn't):

  --> src/session.rs:11:5
   |
11 | use ::sev::certs::sev::Certificate;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ no `Certificate` in `certs::sev`
   |
help: consider importing one of these items instead
   |
11 | use crate::sev::ca::Certificate;
   |     ~~~~~~~~~~~~~~~~~~~~~~~~~~~
11 | use crate::sev::sev::Certificate;
   |     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
11 | use crate::snp::Certificate;
   |     ~~~~~~~~~~~~~~~~~~~~~~~
11 | use native_tls::Certificate;
   |     ~~~~~~~~~~~~~~~~~~~~~~~
     and 3 other candidates

(and dozens more of similar failures)

c.f. https://koschei.fedoraproject.org/package/rust-sevctl?collection=f39

Comment 2 Tyler Fanelli 2023-07-27 23:17:36 UTC
When checking out Cargo.toml for the 0.4.1 build:

[dependencies.sev]
version = "1.1.0"
features = ["openssl"]

You're right, there were API-breaking changes in 1.2.0, but that's not the version that this build uses. I'll note that while version 1.1.0 is available in f38 + f37, I haven't built it for rawhide, and thus 1.2.0 might be the only build available. Would this be the problem?

Comment 3 Fabio Valentini 2023-07-27 23:46:54 UTC
Yes, only the latest version of a package is available for builds.

> [dependencies.sev]
> version = "1.1.0"
> features = ["openssl"]

This translates to "sev >= 1.1.0, < 2.0.0", and both RPM and cargo will resolve this to the highest version that's available (in this case, only 1.2.0 is available).

Comment 4 Tyler Fanelli 2023-07-27 23:55:11 UTC
(In reply to Fabio Valentini from comment #3)
> Yes, only the latest version of a package is available for builds.
> 
> > [dependencies.sev]
> > version = "1.1.0"
> > features = ["openssl"]
> 
> This translates to "sev >= 1.1.0, < 2.0.0", and both RPM and cargo will
> resolve this to the highest version that's available (in this case, only
> 1.2.0 is available).

That is, if and only if 1.1.0 is not available, correct?

Comment 5 Upstream Release Monitoring 2023-07-28 23:13:21 UTC
Releases retrieved: 0.4.2
Upstream release that is considered latest: 0.4.2
Current version/release in rawhide: 0.4.1-1.fc39
URL: https://crates.io/crates/sevctl

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/188189/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/rust-sevctl

Comment 6 Upstream Release Monitoring 2023-08-08 01:18:59 UTC
Releases retrieved: 0.4.3
Upstream release that is considered latest: 0.4.3
Current version/release in rawhide: 0.4.1-1.fc39
URL: https://crates.io/crates/sevctl

Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/


More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_Monitoring


Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream.


Based on the information from Anitya: https://release-monitoring.org/project/188189/


To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/rust-sevctl

Comment 7 Tyler Fanelli 2023-08-08 03:51:59 UTC
Marking as COMPLETED as I've addressed the sev library issue in a release for 0.4.3. Built here: https://koji.fedoraproject.org/koji/buildinfo?buildID=2270601