Bug 2343682
| Summary: | EPEL package iptables-services prevents iptables-libs update | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora EPEL | Reporter: | Mikko Saukkoriipi <mikko.saukkoriipi> | ||||||
| Component: | iptables-epel | Assignee: | Michel Lind <michel> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | |||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | epel9 | CC: | anderson, benmwebb, bilias, bitchecker, blocke, bvitnik, davide, jason.corley, javier.salmeron, juris.gribuska, michael.ward, michel, milo, o.freyermuth, ralston, ratness, redhat-bugzilla, trevor.hemsley | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | x86_64 | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | iptables-epel-1.8.10-11.1.el9 | Doc Type: | If docs needed, set a value | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2025-02-15 03:09:07 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
|
Description
Mikko Saukkoriipi
2025-02-04 07:46:41 UTC
I'm getting the same error on my machines. Me too. Created attachment 2075733 [details]
Fix iptables-epel spec file sufficient to build and require the newer iptables-libs
I am not entirely sure why the iptables-epel spec file depends on the exact version of iptables-libs being correct when all the files shipped by iptables-services are text files and have no direct interface to anything included in iptables-libs. The iptables-legacy* packages emited by the same spec file probably do have -libs dependencies but I have no idea what the purpose of those packages is. I downloaded the current SRPM using yumdownloader --source --url iptables-services then installed that, modified the spec file with the attached patch, then rpmbuild -bs iptables-epel.spec and feed the resulting SRPM into `mock -r rocky+epel-9-x86_64 --rebuild ~/rpmbuild/SRPMS/iptables-epel-1.8.10-4.1.fc40.src.rpm`. Then take the iptables-services package from /var/lib/mock/rocky+epel-9-x86_64/result and install that. Created attachment 2075734 [details]
Fix iptables-epel spec file sufficient to build and require the newer iptables-libs
Bump iptables-services version number.
Remove iptables-services dependency on specific iptables-libs versions so this package will no longer block future updates from RHEL.
Require correct iptables-libs versions for the rest.
I'm having this issue too It's breaking our updates and kickstart file *** Bug 2344204 has been marked as a duplicate of this bug. *** *** Bug 2345168 has been marked as a duplicate of this bug. *** Sorry, been swamped since FOSDEM - I'll try and get this fixed in both epel9 and epel9-next FEDORA-EPEL-2025-e92117a6e9 (iptables-epel-1.8.10-11.1.el9) has been submitted as an update to Fedora EPEL 9. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-e92117a6e9 verified that the linked packages resolved the problem in a test system, thanks! FEDORA-EPEL-2025-e92117a6e9 has been pushed to the Fedora EPEL 9 testing repository. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-e92117a6e9 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates. FEDORA-EPEL-2025-e92117a6e9 (iptables-epel-1.8.10-11.1.el9) has been pushed to the Fedora EPEL 9 stable repository. If problem still persists, please make note of it in this bug report. Hi all. This seem to be fixed for some cases but is bound to break again. Can Trevor Hemsley's patch be applied to the package specs? This package really does not need strict package version dependencies as it does not rely on any specific API/ABI, just a standard iptables command line interface. We still have the issue while installing this package in some specific circumstances. For example, while building VM templates for RHEL (in automated way), we exclusively rely on packages available on ISO media. We don't want to unnecessarily temporarily subscribe such systems to RHMS just to pull some packages. The situation, as it is now, is that ISO media for RHEL 9.5 has older version of iptables-libs and thus the latest version of iptables-services cannot be installed. This will once again "unbreak" with RHEL 9.6 but is bound to break again after that. So we are constantly stuck in chicken-egg problem. Relaxing iptables-services package requirements should solve this for a foreseeable future as Trevor Hemsley already noted. (In reply to Bojan Vitnik from comment #15) > Hi all. This seem to be fixed for some cases but is bound to break again. > Can Trevor Hemsley's patch be applied to the package specs? This package > really does not need strict package version dependencies as it does not rely > on any specific API/ABI, just a standard iptables command line interface. +1 This has already happened more than once in the past. I opened BZ#2349297 to argue that the `iptables-services` package should either be renamed to `iptables-legacy-services`, or removed entirely. |