Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1701035

Summary: Enable CDN access from kickstart files
Product: Red Hat Enterprise Linux 7 Reporter: Lars Karlitski <lueberni>
Component: pykickstartAssignee: Dave Cantrell <dcantrell>
Status: CLOSED ERRATA QA Contact: Release Test Team <release-test-team-automation>
Severity: unspecified Docs Contact:
Priority: high    
Version: 7.6CC: bcl, jikortus, mbanas, salmy, stefw
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: pykickstart-1.99.66.20-1.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1702370 (view as bug list) Environment:
Last Closed: 2019-08-06 12:41:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1664388, 1664392, 1701032, 1702370    
Attachments:
Description Flags
0001-Add-repo-and-url-command-SSL-options-1701035.patch none

Comment 3 Dave Cantrell 2019-04-22 13:26:32 UTC
This is a little more complicated to backport to RHEL-7 kickstart.  The work for this mentioned above builds on the F30 handler, which is not in the version of pykickstart in RHEL-7 (most recent in F22).  I am hesitant to rebase pykickstart in RHEL-7 and would prefer a direct reimplementation of this work on rhel7-branch upstream and cutting a new release from that.  That would mean that the SSL handling work should extend the RHEL7 handler in this version of Kickstart.  That does introduce a problem where the RHEL7 handler in pykickstart in RHEL8 would then lack the SSL handler work, but that's easier to fix up than to rebase pykickstart in RHEL-7.

So this needs both a candidate PR for rhel7-branch and a candidate PR for rhel8-branch that adds the SSL commands to the RHEL7 handler to maintain forward compatibility.

Is anyone opposed to this approach?

Comment 4 Lars Karlitski 2019-04-22 14:29:29 UTC
(In reply to David Cantrell from comment #3)
> This is a little more complicated to backport to RHEL-7 kickstart.  The work
> for this mentioned above builds on the F30 handler, which is not in the
> version of pykickstart in RHEL-7 (most recent in F22).  I am hesitant to
> rebase pykickstart in RHEL-7 and would prefer a direct reimplementation of
> this work on rhel7-branch upstream and cutting a new release from that. 
> That would mean that the SSL handling work should extend the RHEL7 handler
> in this version of Kickstart.  That does introduce a problem where the RHEL7
> handler in pykickstart in RHEL8 would then lack the SSL handler work, but
> that's easier to fix up than to rebase pykickstart in RHEL-7.
> 
> So this needs both a candidate PR for rhel7-branch and a candidate PR for
> rhel8-branch that adds the SSL commands to the RHEL7 handler to maintain
> forward compatibility.
> 
> Is anyone opposed to this approach?

I'm not opposed, but I wonder why you're hesitant to rebase. I assumed the reason for pykickstart handling different OS versions itself was that it could be used as-is in all kinds of OS releases. Is there a huge difference between the versions in RHEL 7 and 8?

Comment 5 Dave Cantrell 2019-04-22 14:50:57 UTC
rhel7-branch is 744 commits behind master, rhel8-branch is now 86 commits behind.  That's a lot of change for a .7 update release.

The other major problem is python2 vs. python3.  I do not recommend a rebase of pykickstart in RHEL-7 because it is a high risk of impact to both anaconda and Satellite and any other product using pykickstart.  This is why pykickstart is built to version the handlers and the project is maintained with multiple stable branches at one time.

Adding in the CDN access patches to the RHEL7 handler in pykickstart's rhel7-branch as well as adding it to the RHEL7 handler in rhel8-branch is safer low risk path to take here.

Comment 6 Dave Cantrell 2019-04-23 13:15:36 UTC
*** Bug 1664390 has been marked as a duplicate of this bug. ***

Comment 7 Dave Cantrell 2019-04-23 15:02:09 UTC
Created attachment 1557738 [details]
0001-Add-repo-and-url-command-SSL-options-1701035.patch

Patch for rhel7-branch and adds the SSL options to the repo and url commands for the RHEL7 version of kickstart parsed by pykickstart.  This patch passes the pykickstart test suite on RHEL7.

This is specific to the rhel7-branch of pykickstart.

Comment 8 Dave Cantrell 2019-04-24 14:40:22 UTC
I've pushed these patches to pykickstart's rhel7-branch to prepare for a release once acks are set on this bug (and other rhel7.7 bugs for pykickstart).  Thanks.

Comment 14 Dave Cantrell 2019-04-26 12:35:32 UTC
I also need to push and build an update for RHEL-8's pykickstart at the same time I do this.  If I don't, then the version=RHEL7 handler in pykickstart in RHEL-8 will fail to parse kickstart files generated with this new build of pykickstart on RHEL-8, which would be a regression.

Bug #1702370 needs acks and then whatever fields set that tell me what branch the change should go on.  I don't know if that is 8.0.1 or 8.1.0 or something else.  Please advise.

Comment 15 Dave Cantrell 2019-04-26 21:26:38 UTC
Bug #1702370 appears to have been acked for RHEL 8.1.0

Today I released pykickstart-1.99.66.20 off rhel7-branch which incorporates the fix for this bug.  Tests pass on RHEL-7, in Travis-CI, and via %check when building in brew.  Covscan also passes.

Enjoy.

Comment 19 errata-xmlrpc 2019-08-06 12:41:33 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2074