Hide Forgot
Description of problem: During the RHEL6.10 planning phase, it was agreed with release-engineering that the default-product certs provided by the redhat-release-<VARIANT> package would follow the table in https://mojo.redhat.com/docs/DOC-1167304. Some of the variants passed and some of them failed. Here are the results for RHEL-6.10-Snapshot-1.1... __________________________________________________________________ RedHatEnterpriseLinux6-Server-i386 PASS redhat-release-server-6Server-6.10.0.10.el6.i686 DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Server-ppc64 PASS redhat-release-server-6Server-6.10.0.10.el6.ppc64 DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Server-s390x PASS redhat-release-server-6Server-6.10.0.10.el6.s390x DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Server-x86_64 BLOCKED BY BUG 1573181 Error loading certificate: /etc/pki/product-default/135.pem redhat-release-server-6Server-6.10.0.10.el6.x86_64.rpm __________________________________________________________________ RedHatEnterpriseLinux6-Client-i386 FAIL - DID NOT EXPECT /etc/pki/product-default/68.pem; SHOULD HAVE NOT BEEN PROVIDED # rpm -q --whatprovides /etc/pki/product-default/68.pem redhat-release-client-6Client-6.10.0.2.el6.i686 __________________________________________________________________ RedHatEnterpriseLinux6-Client-x86_64 FAIL - DID NOT EXPECT /etc/pki/product-default/68.pem; SHOULD HAVE NOT BEEN PROVIDED # rpm -q --whatprovides /etc/pki/product-default/68.pem redhat-release-client-6Client-6.10.0.2.el6.x86_64 __________________________________________________________________ RedHatEnterpriseLinux6-ComputeNode-x86_64 FAIL - DID NOT EXPECT /etc/pki/product-default/76.pem; SHOULD HAVE NOT BEEN PROVIDED # rpm -q --whatprovides /etc/pki/product-default/76.pem redhat-release-computenode-6ComputeNode-6.10.0.2.el6.x86_64 __________________________________________________________________ RedHatEnterpriseLinux6-Workstation-i386 PASS redhat-release-workstation-6Workstation-6.10.0.2.el6.i686 DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Workstation-x86_64 PASS - HTB PRODUCT CERT 155 PROVIDED BY redhat-release-workstation-6Workstation AS EXPECTED # rpm -q --whatprovides /etc/pki/product-default/155.pem redhat-release-workstation-6Workstation-6.10.0.2.el6.x86_64 Version-Release number of selected component (if applicable): There is a mixture of redhat-release versions. See versions above.
Results from RHEL-6.10-Snapshot-2.0 COMPOSE_ID have improved, but the Client and ComputeNode variants are still not as expected. __________________________________________________________________ RedHatEnterpriseLinux6-Server-i386 PASS redhat-release-server-6Server-6.10.0.11.el6.i686 DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Server-ppc64 PASS redhat-release-server-6Server-6.10.0.11.el6.ppc64 DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Server-s390x PASS redhat-release-server-6Server-6.10.0.11.el6.s390x DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Server-x86_64 PASS - HTB PRODUCT CERT 135 PROVIDED BY redhat-release-server-6Server AS EXPECTED # rpm -q --whatprovides /etc/pki/product-default/135.pem redhat-release-server-6Server-6.10.0.11.el6.x86_64 __________________________________________________________________ RedHatEnterpriseLinux6-Client-i386 FAIL - DID NOT EXPECT /etc/pki/product-default/68.pem; SHOULD HAVE NOT BEEN PROVIDED # rpm -q --whatprovides /etc/pki/product-default/68.pem redhat-release-client-6Client-6.10.0.2.el6.i686 __________________________________________________________________ RedHatEnterpriseLinux6-Client-x86_64 FAIL - DID NOT EXPECT /etc/pki/product-default/68.pem; SHOULD HAVE NOT BEEN PROVIDED # rpm -q --whatprovides /etc/pki/product-default/68.pem redhat-release-client-6Client-6.10.0.2.el6.x86_64 __________________________________________________________________ RedHatEnterpriseLinux6-ComputeNode-x86_64 FAIL - DID NOT EXPECT /etc/pki/product-default/76.pem; SHOULD HAVE NOT BEEN PROVIDED # rpm -q --whatprovides /etc/pki/product-default/76.pem redhat-release-computenode-6ComputeNode-6.10.0.2.el6.x86_64 __________________________________________________________________ RedHatEnterpriseLinux6-Workstation-i386 PASS redhat-release-workstation-6Workstation-6.10.0.2.el6.i686 DOES NOT PROVIDE A /etc/pki/product-default/ AS EXPECTED __________________________________________________________________ RedHatEnterpriseLinux6-Workstation-x86_64 PASS - HTB PRODUCT CERT 155 PROVIDED BY redhat-release-workstation-6Workstation AS EXPECTED # rpm -q --whatprovides /etc/pki/product-default/155.pem redhat-release-workstation-6Workstation-6.10.0.2.el6.x86_64
I rebuild redhat-release-{cleint, computenode} with empty tarball with no certificates. Versions: redhat-release-computenode-6ComputeNode-6.10.0.3.el6 redhat-release-client-6Client-6.10.0.3.el6 Please test if it works as expected.
Yesterday at the RHEL6 program call on 5/10/2018 we learned that they do NOT want to treat the rhel6.10 snapshots like a traditional high touch beta. Snapshots1&2 are problematic for partners testing snapshot composes. Instead they want the snapshot compose content pushed to the beta repos which means that all the redhat-release-<variant> packages need to be re-built to provide the beta product certs. I have updated the table in table in https://mojo.redhat.com/docs/DOC-1167304 to reflect the expected /etc/pki/product-default/ certs.