Bug 1489431 - [downstream clone - 4.1.6] Rpm verify fails for newly installed libvirt-daemon-config-nwfilter package .
Summary: [downstream clone - 4.1.6] Rpm verify fails for newly installed libvirt-daem...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-node-ng
Version: 3.6.9
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ovirt-4.1.6
: ---
Assignee: Douglas Schilling Landgraf
QA Contact: cshao
URL:
Whiteboard:
Depends On: 1436519
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-09-07 12:41 UTC by rhev-integ
Modified: 2021-05-01 16:24 UTC (History)
9 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1436519
Environment:
Last Closed: 2017-09-19 07:20:24 UTC
oVirt Team: Node
Target Upstream Version:
Embargoed:
lsvaty: testing_plan_complete-


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 2983511 0 None None None 2017-09-07 12:42:49 UTC
Red Hat Product Errata RHBA-2017:2758 0 normal SHIPPED_LIVE redhat-virtualization-host bug fix, and enhancement update for RHV 4.1.6 2017-09-19 11:14:30 UTC

Description rhev-integ 2017-09-07 12:41:37 UTC
+++ This bug is a downstream clone. The original bug is: +++
+++   bug 1436519 +++
======================================================================

Description of problem:

libvirt-daemon-config-nwfilter package always returns inconsistencies for rpm verify   run against it . This issue is seen only on RHV hypervisor hosts and not on regular RHEL based host servers. An entry for uuid gets added into all the files under /etc/libvirt/nwfilter for which the rpm verify files .

Version-Release number of selected component (if applicable):

libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.5.x86_64.rpm
libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.4.x86_64.rpm

How reproducible:

Install a RHV hypervisor version  7 (3.10.0 - 514.el7.x86_64_) for RHEV 3.6 .

Steps to Reproduce:
1. Install RHV hypervisor version 7 
2. Do a rpm verify check for it using 

   # rpm -V libvirt-daemon-config-nwfilter
 

Actual results:

RPM verify fails with the below error

# rpm -q -V libvirt-daemon-config-nwfilter
SM5....T.    /etc/libvirt/nwfilter/allow-arp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp-server.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-incoming-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/allow-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/clean-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-multicast.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-broadcast.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-l2-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-rarp-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self-rarp.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self.xml



Expected results:

RPM for newly installed OS should return a consistent value. 

Additional info:

The uuid field entries are only seen on RHV hypervisor based hosts and not on any RHEL based host servers.

(Originally by Ribu Abraham)

Comment 5 rhev-integ 2017-09-07 12:41:56 UTC
Can you please provide a full sos report of the system?
It's not clear if this is a RHEV-H 3.6 setup, a RHEL-H 3.6 setup or anything different from above.
Also, this seems related to Bug #1431581 so this may be a RHEL bug and not a RHEV bug.

(Originally by Sandro Bonazzola)

Comment 9 rhev-integ 2017-09-07 12:42:14 UTC
# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 7.3 (Maipo)

# yum install libvirt-daemon-config-nwfilter
<snip>

# rpm -V libvirt-daemon-config-nwfilter
SM5....T.    /etc/libvirt/nwfilter/allow-arp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp-server.xml
SM5....T.    /etc/libvirt/nwfilter/allow-dhcp.xml
SM5....T.    /etc/libvirt/nwfilter/allow-incoming-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/allow-ipv4.xml
SM5....T.    /etc/libvirt/nwfilter/clean-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-arp-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-multicast.xml
SM5....T.    /etc/libvirt/nwfilter/no-ip-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-broadcast.xml
SM5....T.    /etc/libvirt/nwfilter/no-mac-spoofing.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-l2-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/no-other-rarp-traffic.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self-rarp.xml
SM5....T.    /etc/libvirt/nwfilter/qemu-announce-self.xml

(Originally by dougsland)

Comment 19 errata-xmlrpc 2017-09-19 07:20:24 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:2758

Comment 20 Daniel Gur 2019-08-28 13:14:23 UTC
sync2jira

Comment 21 Daniel Gur 2019-08-28 13:19:25 UTC
sync2jira


Note You need to log in before you can comment on or make changes to this bug.