Bug 1517010 - Domain controller role deployment fails due to FreeIPA package dependency issues in current Modular Server
Summary: Domain controller role deployment fails due to FreeIPA package dependency iss...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: fedora-modular-release
Version: 27
Hardware: All
OS: Linux
unspecified
urgent
Target Milestone: ---
Assignee: Nils Philippsen
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: ModularServer27GA
TreeView+ depends on / blocked
 
Reported: 2017-11-23 22:10 UTC by Adam Williamson
Modified: 2018-11-27 19:48 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2018-11-27 19:48:29 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Adam Williamson 2017-11-23 22:10:43 UTC
In the latest Modular Server compose - Fedora-Modular-27-20171123.n.1 - domain controller role deployment fails due to some dependency issues in FreeIPA-related packages:

Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b' Problem 1: package pki-ca-10.4.8-5.module_d7991f26.noarch requires pki-server = 10.4.8-5.module_d7991f26, but none of the providers can be installed
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-server-10.4.8-5.module_d7991f26.noarch requires pki-base-java = 10.4.8-5.module_d7991f26, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-4.6.1-3.module_c6e3f1f6.x86_64 requires pki-ca >= 10.4.0-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-base-java-10.4.8-5.module_d7991f26.noarch requires resteasy-jackson-provider >= 3.0.17-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - conflicting requests'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - nothing provides mvn(org.codehaus.jackson:jackson-core-asl) needed by resteasy-jackson-provider-3.0.19-6.module_ee1166e3.noarch'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b' Problem 2: package pki-kra-10.4.8-5.module_d7991f26.noarch requires pki-server = 10.4.8-5.module_d7991f26, but none of the providers can be installe
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-4.6.1-3.module_c6e3f1f6.x86_64 requires pki-kra >= 10.4.0-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-server-10.4.8-5.module_d7991f26.noarch requires pki-base-java = 10.4.8-5.module_d7991f26, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-dns-4.6.1-3.module_c6e3f1f6.noarch requires freeipa-server = 4.6.1-3.module_c6e3f1f6, but none of the providers can be ins
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-base-java-10.4.8-5.module_d7991f26.noarch requires resteasy-jackson-provider >= 3.0.17-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - conflicting requests'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - nothing provides mvn(org.codehaus.jackson:jackson-core-asl) needed by resteasy-jackson-provider-3.0.19-6.module_ee1166e3.noarch'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b' Problem 3: package pki-kra-10.4.8-5.module_d7991f26.noarch requires pki-server = 10.4.8-5.module_d7991f26, but none of the providers can be installe
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-4.6.1-3.module_c6e3f1f6.x86_64 requires pki-kra >= 10.4.0-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-server-10.4.8-5.module_d7991f26.noarch requires pki-base-java = 10.4.8-5.module_d7991f26, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package freeipa-server-trust-ad-4.6.1-3.module_c6e3f1f6.x86_64 requires freeipa-server = 4.6.1-3.module_c6e3f1f6, but none of the providers can b
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - package pki-base-java-10.4.8-5.module_d7991f26.noarch requires resteasy-jackson-provider >= 3.0.17-1, but none of the providers can be installed'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - conflicting requests'
Nov 23 13:50:26 ipa001.domain.local roled[1056]: 2017-11-23 16:50:26 ERROR: b'  - nothing provides mvn(org.codehaus.jackson:jackson-core-asl) needed by resteasy-jackson-provider-3.0.19-6.module_ee1166e3.noarch'

Proposing as a Final blocker, this is a clear violation of the requirement for release-blocking roles to be deployable.

Comment 1 Nils Philippsen 2017-11-27 12:50:00 UTC
This seems to come from moving jackson e.a. out of resteasy into maven which isn't finished yet. See the following two PRs against the maven module:

https://src.fedoraproject.org/modules/maven/pull-request/1
https://src.fedoraproject.org/modules/maven/pull-request/2

Comment 2 Geoffrey Marr 2017-11-27 18:32:40 UTC
Discussed during the 2017-11-27 blocker review meeting: [1]

The decision to classify this bug as an AcceptedBlocker was made as it violates the following blocker criteria:

"Release-blocking roles and the supported role configuration interfaces must meet the core functional Role Definition Requirements to the extent that supported roles can be successfully deployed..." - domain controller is a release-blocking role

[1] https://meetbot.fedoraproject.org/fedora-blocker-review/2017-11-27/f27-8-blocker-review.2017-11-27-17.01.txt

Comment 3 Nils Philippsen 2017-11-29 13:37:22 UTC
Hmm, that move proved to be too complicated, so I've moved jackson and the deps back into resteasy for the time being. Ultimately it should have its own module I guess.

Comment 4 Adam Williamson 2017-11-30 00:53:03 UTC
We're abandoning the F27 Modular Server release.

Comment 5 Ben Cotton 2018-11-27 17:59:23 UTC
This message is a reminder that Fedora 27 is nearing its end of life.
On 2018-Nov-30  Fedora will stop maintaining and issuing updates for
Fedora 27. It is Fedora's policy to close all bug reports from releases
that are no longer maintained. At that time this bug will be closed as
EOL if it remains open with a Fedora  'version' of '27'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 27 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 6 Adam Williamson 2018-11-27 19:48:29 UTC
See #c4.


Note You need to log in before you can comment on or make changes to this bug.