Hello, Description of problem: Trying to upgrade a Fedora 25 system, I get: [root@station ~]# dnf upgrade Last metadata expiration check: 0:04:36 ago on Mon Feb 20 09:39:01 2017. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Upgrading: iptables x86_64 1.6.0-3.fc25 updates 416 k iptables-libs x86_64 1.6.0-3.fc25 updates 87 k Reinstalling: iptables-services x86_64 1.6.0-2.fc25 fedora 54 k Skipping packages with broken dependencies: iptables-services x86_64 1.6.0-3.fc25 updates 53 k Transaction Summary ================================================================================ Upgrade 2 Packages Skip 1 Package Total download size: 557 k Is this ok [y/N]: y Downloading Packages: (1/3): iptables-services-1.6.0-2.fc25.x86_64.rp 343 kB/s | 54 kB 00:00 (2/3): iptables-libs-1.6.0-3.fc25.x86_64.rpm 460 kB/s | 87 kB 00:00 (3/3): iptables-1.6.0-3.fc25.x86_64.rpm 1.5 MB/s | 416 kB 00:00 -------------------------------------------------------------------------------- Total 297 kB/s | 557 kB 00:01 Running transaction check Error: transaction check vs depsolve: iptables = 1.6.0-2.fc25 is needed by iptables-services-1.6.0-2.fc25.x86_64 To diagnose the problem, try running: 'rpm -Va --nofiles --nodigest'. You probably have corrupted RPMDB, running 'rpm --rebuilddb' might fix the issue. The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'dnf clean packages'. Version-Release number of selected component (if applicable): iptables-1.6.0-2.fc25.x86_64 iptables-libs-1.6.0-2.fc25.x86_64 iptables-services-1.6.0-2.fc25.x86_64 How reproducible: Always Steps to Reproduce: 1. Try upgrading a Fedora 25 system that has these packages. Actual results: Upgrade cannot be performed. Expected results: Upgrade should perform normally Best regards, Răzvan
It's actually its Provides that are broken. $ rpm -q --provides iptables-services config(iptables-services) = 1.6.0-2.fc25 iptables = 1.4.16.1 iptables-ipv6 = 1.4.11.1 iptables-services = 1.6.0-2.fc25 iptables-services(x86-64) = 1.6.0-2.fc25 $ rpm -q --provides -p updates/25/x86_64/i/iptables-services-1.6.0-3.fc25.x86_64.rpm config(iptables-services) = 1.6.0-3.fc25 iptables-services = 1.6.0-3.fc25 iptables-services(x86-64) = 1.6.0-3.fc25 And because, in my case, I have shorewall6 installed, which Requires iptables-ipv6, it can't install the new iptables-services or that iptables-ipv6 dependency would be unfilled. This looks like it's been rather neglected, since the provides both have version numbers from the 1.4.x days, back in fc18 & fc15. Anyway, could be resolved by either putting the iptables-ipv6 Provides: back in here (iptables is also Provided by the iptables package itself, of course), or get together with the shorewall people and get its dependencies sorted out. (There doesn't seem to generally be much need for IPv6-specific Requires & Provides these days, most network-aware packages handle both pretty equally.) Răzvan Sandu, do you have any of shorewall-init, shorewall-lite, shorewall6, or shorewall6-lite installed on that system? If not, we might have to hunt down whatever else depends on this.
I see the changelog refers to bug #1327786, where it was suggested that iptables-services no longer Provide iptables, so it was removed, and they're analysing the fallout over there. So this should probably be considered a duplicate of that. *** This bug has been marked as a duplicate of bug 1327786 ***
Hello, @J. Randall Owens Thank you! Yes, I use shorewall and shorewall6 on that system (from EPEL). Please let me know what exact piece of information is needed. Best regards, Răzvan