Bug 1437027

Created attachment 1267273 [details]
foreman-debug

I think Jeff has already spent some time investigating this.

reproducible w/ sat6.2.9 snap2 (satellite server is upgraded to 6.2.9 snap2 and capsule is at 6.2.8) 

-bash-4.2# hammer -u admin -p changeme capsule content synchronize --id=2
[..........................................................................................................................................   ] [97%]
Error: OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1)
-bash-4.2# rpm -qa | grep satellite
satellite-cli-6.2.9-2.0.el7sat.noarch
satellite-capsule-6.2.9-2.0.el7sat.noarch
satellite-installer-6.2.0.13-1.el7sat.noarch
satellite-6.2.9-2.0.el7sat.noarch


Moreover, I filed similar issue a long time back during 6.2 release testing, so looks like a regression.

https://bugzilla.redhat.com/show_bug.cgi?id=1323644#c34

Currently following version of libtasn package is installed on capsule as well as on staellite

libtasn1-3.8-3.el7.x86_64

Nothing jumps out at me.  Likely a certificate issue.

This is consistently reproducible w/ 6.2.9. Especially, when capsule is at 6.2.8 and satellite is at 6.2.9.

I do have setup and can easily reproduce if someone wants to take a look. thanks..

Tested with 6.2.13 and ostree-2017.11-1.el7.x86_64.rpm  as well as old package ostree-2017.1-2.atomic.el7.x86_64.

Now error is changed something else:

2018-01-12 07:01:32  [katello/pulp_rest] [E] RestClient.post "https://sjagtap-qe-capsule.usersys.redhat.com/pulp/api/v2/repositories/", 10879 byte(s) length, "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Content-Length"=>"10879", "accept"=>"application/json", "content_type"=>"application/json"
 | \n# => 400 BadRequest | application/json 385 bytes
 | 
2018-01-12 07:01:32  [foreman-tasks/action] [E] 400 Bad Request (RestClient::BadRequest)
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/abstract_response.rb:48:in `return!'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:79:in `block in get_response'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `call'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `process_result'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:50:in `block in transmit'
 | /opt/rh/rh-ruby22/root/usr/share/ruby/net/http.rb:853:in `start'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:44:in `transmit'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:64:in `execute'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:33:in `execute'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/resource.rb:67:in `post'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:78:in `get_response'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:66:in `call'



2018-01-12 07:01:32  [katello/pulp_rest] [I] RestClient.post "https://sjagtap-qe-capsule.usersys.redhat.com/pulp/api/v2/repositories/Default_Organization-QE-cv_atomic-Red_Hat_Enterprise_Linux_Atomic_Host-Red_Hat_Enterprise_Linux_Atomic_Host_Trees/actions/unassociate/", "{\"criteria\":{}}", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Content-Length"=>"15", "accept"=>"application/json", "content_type"=>"application/json"
 | \n# => 404 NotFound | application/json 942 bytes
 | 
2018-01-12 07:01:32  [foreman-tasks/action] [E] 404 Resource Not Found (RestClient::ResourceNotFound)
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/abstract_response.rb:48:in `return!'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:79:in `block in get_response'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `call'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `process_result'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:50:in `block in transmit'
 | /opt/rh/rh-ruby22/root/usr/share/ruby/net/http.rb:853:in `start'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:44:in `transmit'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:64:in `execute'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:33:in `execute'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/resource.rb:67:in `post'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:78:in `get_response'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:66:in `call'

Can we have any update on this Bug please?

Echoing Neha's request for a status update, please.  Customer's work with Atomic Host is significantly impacted by this bug.  Thanks!

I upgraded satellite & capsule 6.2.13 -> 6.2.14 and I still see same issue with capsule sync:

-bash-4.2# hammer -u admin -p changeme capsule content synchronize --id=2
[.........................................................................................................................................................................................................] [100%]
Error: OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1)
-bash-4.2# 


2018-02-14 05:50:36  [foreman-tasks/action] [E] OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) (Katello::Errors::PulpError)
 | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.162/app/lib/actions/pulp/abstract_async_task.rb:121:in `block in external_task='
 | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.162/app/lib/actions/pulp/abstract_async_task.rb:119:in `each'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.162/app/lib/actions/pulp/abstract_async_task.rb:119:in `external_task='
 | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.6/lib/dynflow/action/polling.rb:98:in `poll_external_task_with_rescue'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.6/lib/dynflow/action/polling.rb:21:in `run'
 | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.6/lib/dynflow/action/cancellable.rb:9:in `run'
 | /

Installed packages:

ostree-2017.1-2.atomic.el7.x86_64
tfm-rubygem-katello_ostree-3.0.0.162-1.el7sat.noarch
python-pulp-ostree-common-1.1.3.3-1.el7sat.noarch
pulp-ostree-plugins-1.1.3.3-1.el7sat.noarch

we won't be shipping an update to ostree in 6.2 but the users are free to do the following to get the latest from extras:

# subscription-manager repos --enable rhel-7-server-extras-rpms
Repository 'rhel-7-server-extras-rpms' is enabled for this system.

# yum update ostree
...

# subscription-manager repos --disable rhel-7-server-extras-rpms
Repository 'rhel-7-server-extras-rpms' is disabled for this system.

closing as NEXTRELEASE as we have shipped an updated version of ostree in 6.3

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days