Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1738199 - yum versionlock prevents to install additional satellite packages
Summary: yum versionlock prevents to install additional satellite packages
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Satellite Maintain
Version: 6.6.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: 6.6.0
Assignee: Martin Bacovsky
QA Contact: Lukas Pramuk
URL:
Whiteboard:
: 1753605 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-08-06 13:27 UTC by Lukas Pramuk
Modified: 2019-10-22 19:48 UTC (History)
8 users (show)

Fixed In Version: foreman-maintain-0.4.8
Doc Type: Enhancement
Doc Text:
Previously, using yum to update or install packages on the Satellite base operating system might have also updated the packages related to Satellite and resulted in system inconsistency. With this release, Satellite prevents users from installing and updating packages with `yum`. Instead, you must use `foreman-maintain packages install` and `foreman-maintain packages update` commands. Note that `foreman-maintain` runs the `satellite-installer --upgrade` script after installing packages and therefore some services are restarted. You can disable this feature and control the stability of the system yourself if you want. This feature is not enabled on Capsule Server.
Clone Of:
Environment:
Last Closed: 2019-10-22 19:48:29 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 27686 0 Normal Closed yum versionlock prevents to install additional satellite packages 2021-02-17 08:44:18 UTC

Description Lukas Pramuk 2019-08-06 13:27:47 UTC 
Description of problem:
yum versionlock prevents additional satellite packages being installed. The most important exhibit of the bahavior is foreman-discovery-image package.

The issue is that the new locking mechanism assumes that all packages are either installed by default or handled by installer. That is not true, the most important example is foreman-discovery-image

Version-Release number of selected component (if applicable):
6.6.0

How reproducible:
deterministic

Steps to Reproduce:
1. # yum install foreman-discovery-image
Loaded plugins: product-id, search-disabled-repos, subscription-manager, versionlock
Excluding 420 updates due to versionlock (use "yum versionlock status" to show them)
No package foreman-discovery-image available.
Error: Nothing to do

Actual results:
installing of additional satellite rpms is prevented

Expected results:
user can install additional satellite rpms somehow
Comment 3 Martin Bacovsky 2019-08-07 14:18:04 UTC 
You can use the following steps as a workaround to unblock your installation. Proper fix will follow soon.

  $ foreman-maintain packages unlock
  $ yum install foreman-discovery-image
  $ foreman-maintain packages lock
Comment 4 Sergei Petrosian 2019-08-12 10:10:42 UTC 
In BZ#1739416, I am adding the workaround Martin shared in comment#3 to our docs everywhere `yum install` is issued.

This is the list of packages that we tell users to run `yum install` with to either install or to ensure that the package is installed, in our documentation:
ipa-client
foreman-proxy
ipa-admintools
rh-mongodb34
rh-mongodb34-syspaths
postgresql-server
rhel-system-roles
ipa-client
tfm-rubygem-foreman*
gssproxy nfs-utils
sssd
adcli
realmd
ipa-python-compat
krb5-workstation
tfm-rubygem-foreman_templates
python-pulp-manifest
nfs-utils
bind-utils
foreman-discovery-image
rubygem-smart_proxy_discovery
tfm-rubygem-net-ssh-krb
foreman-telemetry
pcp-mmvstatsd
pcp-webapi
pcp-webapp-grafana
pcp-webapp-vector
pcp-pmda-apache
pcp-pmda-postgresql
pcp-system-tools
pcp-webjs
livecd-tools
libvirt-client
rubygem-smart_proxy_discovery
satellite-clone
rubygem-foreman_maintain
virt-who
Comment 5 Martin Bacovsky 2019-08-22 12:50:14 UTC 
Created redmine issue https://projects.theforeman.org/issues/27686 from this bug
Comment 6 Bryan Kearney 2019-08-29 08:07:09 UTC 
Upstream bug assigned to mbacovsk
Comment 7 Bryan Kearney 2019-08-29 08:07:11 UTC 
Upstream bug assigned to mbacovsk
Comment 8 Bryan Kearney 2019-09-05 16:07:08 UTC 
Moving this bug to POST for triage into Satellite 6 since the upstream issue https://projects.theforeman.org/issues/27686 has been resolved.
Comment 9 Nithin Thomas 2019-09-19 12:14:47 UTC 
*** Bug 1753605 has been marked as a duplicate of this bug. ***
Comment 10 Lukas Pramuk 2019-10-08 14:39:54 UTC 
VERIFIED.

@Satellite 6.6.0 Snap22
rubygem-foreman_maintain-0.4.9-1.el7sat.noarch

User has now two options how to install additional rpms on Satellite machine:

1) Supported way includes running installer with --upgrade flag and takes longer (~3min)

# foreman-maintain packages install -y foreman-discovery-image


2) Unsupported? way skips running installer so is much faster (~20sec)

# foreman-maintain packages unlock
# yum -y install foreman-discovery-image
# foreman-maintain packages lock



With new locking mechanism everything is locked (not only Sat but also OS)
To upgrade all packages there is command:

# foreman-maintain packages update \\*

Implicit default all packages is not possible:
#  foreman-maintain packages update
ERROR: parameter 'PACKAGES ...': no value provided

Yet worse explicit all packages (*) has to be escaped twice \\* (one would expect only once \* like with yum) 
Going to file a BZ for this as it's not obvious and documented
Comment 11 Lukas Pramuk 2019-10-08 14:56:59 UTC 
Filed https://bugzilla.redhat.com/show_bug.cgi?id=1759588 - foreman-maintain packages update fails to update all packages
Comment 13 Bryan Kearney 2019-10-22 19:48:29 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2019:3172
Note You need to log in before you can comment on or make changes to this bug.