Bug 1599446
| Summary: | [RFE] Upgrade fails on finding capsule-certs.tar file | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Taft Sanders <tasander> |
| Component: | Certificates | Assignee: | Chris Roberts <chrobert> |
| Status: | CLOSED CANTFIX | QA Contact: | Stephen Wadeley <swadeley> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.3.2 | CC: | bkearney, chrobert, ehelms, mlele, tasander, wpinheir |
| Target Milestone: | Unspecified | Keywords: | FutureFeature, Triaged |
| Target Release: | Unused | ||
| Hardware: | x86_64 | ||
| OS: | All | ||
| URL: | https://projects.theforeman.org/issues/25377 | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-06-16 18:27:23 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Taft Sanders
2018-07-09 20:43:59 UTC
Taft, why was this file removed? What is the business drievr for removing it. Hey Bryan, In the past, I have seen others copy this file to /tmp which will get removed after most reboots. The main question around this Bugzilla is why is this file is needed if all certs have been exported from it to their designated locations on the Capsule server. If a backup of the file is needed, I suggest we copy the tarball from the location is exists and place it somewhere (maybe in /etc/pki/katello or /etc/pki/katello-certs-tools) to keep it in a safe location. It is very unfortunate to see a fresh install fail its first upgrade because the certs tarball was copied to a temporary directory. Eric, can you comment on above? Is this an easy/necessary fix? Copying it somewhere might be the easiest solution. The problem arises when trying to determine did the user intentionally remove this file or did the user forget to specify the file. The installer cannot easily determine which situation is present and prefers to protect the user from attempting an install or upgrade without having the certs tarball present which it may be required. We could try some logic that says if /root/ssl-build exists, skip the certs tarball existence check. *** Bug 1448681 has been marked as a duplicate of this bug. *** Passing --reset-foreman-proxy-content-certs-tar while running --upgrade doesn't require editing the answers file. Upstream bug assigned to chrobert Upstream bug assigned to chrobert The Satellite Team is attempting to provide an accurate backlog of bugzilla requests which we feel will be resolved in the next few releases. We do not believe this bugzilla will meet that criteria, and have plans to close it out in 1 month. This is not a reflection on the validity of the request, but a reflection of the many priorities for the product. If you have any concerns about this, feel free to contact Red Hat Technical Support or your account team. If we do not hear from you, we will close this bug out. Thank you. Bryan, I confirmed this is still an issue. With all the install work going on upstream and --upgrade being depreciated, I will write a KCS for this and close this out. - Chris Closing with KCS that gives a workaround. With all of the installer changes being made for Satellite 7.0 trying to implement a workaround would not be worth the return value with --upgrade and checks being removed in favor of the new updated foreman-installer. |