Bug 2372993

Summary: keylime-agent-rust: FTBFS in Fedora 42 and Rawhide
Product: [Fedora] Fedora Reporter: Fabio Valentini <decathorpe>
Component: keylime-agent-rustAssignee: Anderson Sasaki <ansasaki>
Status: CLOSED RAWHIDE QA Contact:
Severity: medium Docs Contact:
Priority: unspecified    
Version: 42CC: ansasaki, dueno, rust-sig, scorreia, tstellar
Target Milestone: ---Flags: tstellar: mirror+
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
URL: https://koschei.fedoraproject.org/package/keylime-agent-rust
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-08-11 17:11:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2339432, 2370589    

Description Fabio Valentini 2025-06-16 10:01:52 UTC
Description of problem:
Package keylime-agent-rust fails to build from source in Fedora 42.

It looks like this started happening after the tss-esapi crate (rust-tss-esapi) was updated from v7.5.1 to v7.6.0.

I'm not sure why a minor version update like this causes a compilation failure in a dependent package (it shouldn't) - though the changes between 7.5.1 and 7.6.0 look suspiciously large. This is the error from the build log:

```
error[E0277]: the trait bound `AsymmetricAlgorithmSelection: From<EncryptionAlgorithm>` is not satisfied
   --> keylime/src/tpm.rs:598:64
    |
598 |         let cert = match ek::retrieve_ek_pubcert(&mut ctx, alg.into()) {
    |                                                                ^^^^ the trait `From<EncryptionAlgorithm>` is not implemented for `AsymmetricAlgorithmSelection`
    |
    = note: required for `EncryptionAlgorithm` to implement `Into<AsymmetricAlgorithmSelection>`
```

Version-Release number of selected component (if applicable):
0.2.7-4.fc42

Steps to Reproduce:
koji build --scratch f42 keylime-agent-rust-0.2.7-4.fc42.src.rpm

Additional info:
This package is tracked by Koschei. See:
https://koschei.fedoraproject.org/package/keylime-agent-rust


Reproducible: Always

Comment 1 Tom Stellard 2025-07-10 01:53:40 UTC
This package is still failing to build: https://koji.fedoraproject.org/koji/taskinfo?taskID=13471824

@decathorpe @dueno Are you planning to look into this?

Comment 2 Anderson Sasaki 2025-07-10 08:24:02 UTC
(In reply to Tom Stellard from comment #1)
> This package is still failing to build:
> https://koji.fedoraproject.org/koji/taskinfo?taskID=13471824
> 
> @decathorpe @dueno Are you planning to look into this?

Sorry about it, I'm taking this and will update with the newest version as soon as we have a new release.

Comment 3 Fabio Valentini 2025-07-10 15:16:34 UTC
No need to "needinfo" me, I *reported* this issue - if I could have fixed it I would have done so.
But it appears to be caused by upstream changes in tss-esapi between v7.5.1 and v7.6.0 that I don't really understand.