Description of problem: It was a long time since last compose in rawhide but we finally got new updates today. And I cannot install podman anymore. Version-Release number of selected component (if applicable): podman-2:1.2.0-8.dev.git40f7843.fc31 How reproducible: Deterministic Steps to Reproduce: 2. podman run -ti --rm registry.fedoraproject.org/fedora:rawhide # run rest in container 3. dnf install -y podman Actual results: sh# podman run -ti --rm registry.fedoraproject.org/fedora:rawhide Trying to pull registry.fedoraproject.org/fedora:rawhide...Getting image source signatures Copying blob sha256:0d03b935ee6aa42b430089d87f9d9ca89006092bc19e16bceed96e94bc683934 88.96 MB / 88.96 MB [======================================================] 4s Copying config sha256:6f0c1f93238184a8739ff595fa0f79785a94a31eb2ac7e13ebc4e4ce11a55cce 1.27 KB / 1.27 KB [========================================================] 0s Writing manifest to image destination Storing signatures [root@975610458f1b /]# dnf install -d1 -y podman Last metadata expiration check: 0:00:01 ago on Fri 08 Mar 2019 11:39:33 AM UTC. Error: Problem: package podman-2:1.2.0-8.dev.git40f7843.fc31.x86_64 requires conmon, but none of the providers can be installed - conflicting requests - package conmon-2:1.11.8-1.git71cc465.module_f31+3270+f6ef9413.x86_64 is excluded (try to add '--skip-broken' to skip uninstallable packages) Expected results: //no dependency conflicts [root@b9058850ce9c /]# dnf install -y podman Last metadata expiration check: 0:08:24 ago on Fri 08 Mar 2019 11:32:36 AM UTC. Dependencies resolved. ============================================================================================================ Package Architecture Version Repository Size ============================================================================================================ Installing: podman x86_64 2:1.2.0-8.dev.git40f7843.fc31 rawhide 11 M Installing dependencies: conmon x86_64 2:1.11.8-1.git71cc465.module_f31+3270+f6ef9413 rawhide-modular 38 k container-selinux noarch 2:2.87-3.git2c1a2ab.fc31 rawhide 45 k containernetworking-plugins x86_64 0.7.4-2.fc31 rawhide 14 M containers-common x86_64 1:0.1.36-2.dev.git2031e17.fc31 rawhide 33 k fuse3-libs x86_64 3.2.3-17.fc30 rawhide 82 k iptables x86_64 1.8.0-5.fc30 rawhide 372 k jansson x86_64 2.12-2.fc30 rawhide 40 k libmnl x86_64 1.0.4-9.fc30 rawhide 26 k libnet x86_64 1.1.6-17.fc30 rawhide 61 k libnetfilter_conntrack x86_64 1.0.7-2.fc30 rawhide 56 k libnfnetlink x86_64 1.0.1-15.fc30 rawhide 27 k libnftnl x86_64 1.1.1-6.fc30 rawhide 84 k libnl3 x86_64 3.4.0-8.fc30 rawhide 286 k libselinux-utils x86_64 2.9-0.rc1.1.fc30.1 rawhide 101 k nftables x86_64 1:0.9.0-5.fc30 rawhide 217 k ostree-libs x86_64 2019.1-5.fc30 rawhide 363 k policycoreutils x86_64 2.9-0.rc1.1.fc30.1 rawhide 188 k protobuf-c x86_64 1.3.1-2.fc30 rawhide 33 k rpm-plugin-selinux x86_64 4.14.2.1-4.fc30.1 rawhide 24 k runc x86_64 2:1.0.0-80.dev.git923a8f8.fc31 rawhide 2.4 M selinux-policy noarch 3.14.4-3.fc31 rawhide 119 k selinux-policy-targeted noarch 3.14.4-3.fc31 rawhide 14 M Installing weak dependencies: criu x86_64 3.11-3.fc30 rawhide 486 k fuse-overlayfs x86_64 0.3-4.dev.gitea72572.fc31 rawhide 48 k slirp4netns x86_64 0.3.0-1.alpha.2.git30883b5.fc31 rawhide 71 k Transaction Summary ============================================================================================================ Install 26 Packages Additional info: Workaround is to manually enable necessary module dnf module enable -y cri-o:1.11 But if podman depends on some module then it should magically enable the right stream. or there should be some hint which module&stream is required.
Lsm5 we need to finally ship conmon as a separate package. How quickly can we get this done.
Fixed in podman-1.2.0-11.dev.git1b2f867.fc31
Also opened https://github.com/containers/conmon/issues/14 for tracking packaging work. I'll open a review request once it's ready.
I am confused as to the so-called 'fix' for this bug. Note this is a duplicate of https://bugzilla.redhat.com/show_bug.cgi?id=1686636 , so I'll close it as such, but explaining my concern here. The 'resolution' does not seem to map to the actual problem here at all. conmon always *has* been a package that exists in Fedora: it's a subpackage of cri-o. What happened here is that the non-modular cri-o was retired on the f30 and rawhide branches, apparently in favour of a new cri-o module. However, the cri-o module was not given a default stream, which means that nothing from it is 'visible' on an ordinary Fedora 30 or Rawhide system unless the user manually enables the module. Effectively, conmon used to be part of Fedora 30 and Rawhide, but suddenly was taken out of it. However, the claimed "fix" for this bug was simply to remove the dependency on conmon from podman, with some ambiguous comments: "# #1686813 - conmon hasn't been made independent yet" "Resolves: #1686813 - conmon bundled inside podman rpm" Neither of those immediately makes any obvious sense. Sure conmon had been made "independent". And is it *really* "bundled inside podman rpm"? This bug is a blocker for Fedora 30, but before anyone backports this 'fix' to F30 I want to be sure it is in fact correct. Thanks! *** This bug has been marked as a duplicate of bug 1686636 ***
(In reply to Adam Williamson from comment #4) > I am confused as to the so-called 'fix' for this bug. > > Note this is a duplicate of > https://bugzilla.redhat.com/show_bug.cgi?id=1686636 , so I'll close it as > such, but explaining my concern here. > Adam, it is not the same bug. Rawhide an fedora 30 does not have the same version of podman podman-1.0.1-31.dev.git228d1cb.fc30 vs podman >= 1.2.0-12.dev.git9b21f14.fc31 And I can confirm my use-case is fixed and I do not use workaround mentioned in the description. [root@1dc2a2c85267 /]# rpm -q podman podman-1.2.0-13.dev.gitd95f97a.fc31.x86_64 [root@1dc2a2c85267 /]# podman pull registry.fedoraproject.org/fedora:rawhide Trying to pull docker://registry.fedoraproject.org/fedora:rawhide...Getting image source signatures Copying blob 6266bb6e8bee [==================================] 93.0MiB / 93.0MiB Copying config c67c9a0df4 [====================================] 1.3KiB / 1.3KiB Writing manifest to image destination Storing signatures c67c9a0df43a16e0da02b1412b8a7adf1f21c58a083161a56db648e4827b4f6d
Lukas, it *is* the same bug. The package versions don't matter: it's simply the case that podman depends/depended on conmon, but conmon effectively disappeared from the repositories because non-modular cri-o was retired. This is true of both F30 and Rawhide. podman-1.0.1-31.dev.git228d1cb.fc30 requires conmon, and podman-1.2.0-8.dev.git40f7843.fc31 required conmon, and cri-o was retired on both master and f30 branches. It is certainly "fixed" in Rawhide now in the sense that podman no longer requires conmon. The commit that changed this was confusing and didn't explain things very well, but having looked into it a bit, I think this commit: https://src.fedoraproject.org/rpms/podman/c/68a3dd860b7f391401d5a433aabf060bb2947e08?branch=master actually starting bundling conmon into podman, but did not remove the 'Requires: conmon' from the spec. So the recent commit was effectively cleaning up an oversight from that commit. *** This bug has been marked as a duplicate of bug 1686636 ***
BZ1686636 is for fedora 30 which I do not care. I'll keep this BZ closed Rawhide. I would appreciate if you stop changing that.
1686636 is for both, and was originally reported for Rawhide, as is explained in it. It's a limitation of Bugzilla that we can't mark reports as affecting multiple releases, but it doesn't mean we need five duplicates of every bug.