Description of problem: The upgrade of RHEL7 worker from 4.2 to 4.3 will be failed due to the changed dependencies of "podman-1.6.4-16.el7_8". The previous version had not "conmon" dependency before, but the new one has been changed to depend on "conmon". "conmon" will install "/usr/libexec/crio/conmon" which is included "cri-o", so if "conmon" package install before cri-o, then it will conflict with existing cri-o package. Look the following each podman package dependency. // When podman-1.4.4-4.el7 package was installed, no dependencies are there. ============================================================================================================================================================================================ Package Arch Version Repository Size ============================================================================================================================================================================================ Installing: podman x86_64 1.4.4-4.el7 rhel-7-server-extras-rpms 9.3 M Transaction Summary ============================================================================================================================================================================================ Install 1 Package // When podman-1.6.4-16.el7_8 package was installed, multiple dependencies are there including "conmon-2:2.0.8-1.el7" ============================================================================================================================================================================================ Package Arch Version Repository Size ============================================================================================================================================================================================ Updating: podman x86_64 1.6.4-16.el7_8 rhel-7-server-extras-rpms 13 M Installing for dependencies: conmon x86_64 2:2.0.8-1.el7 rhel-7-server-extras-rpms 31 k fuse-overlayfs x86_64 0.7.2-6.el7_8 rhel-7-server-extras-rpms 55 k fuse3-libs x86_64 3.6.1-4.el7 rhel-7-server-extras-rpms 82 k libnftnl x86_64 1.0.8-3.el7 rhel-7-server-rpms 78 k nftables x86_64 1:0.8-14.el7 rhel-7-server-rpms 186 k slirp4netns x86_64 0.4.3-4.el7_8 rhel-7-server-extras-rpms 82 k Transaction Summary ============================================================================================================================================================================================ Install ( 6 Dependent packages) Upgrade 1 Package // It occurs the following conflict issue due to the changed dependency conmon of the "podman-1.6.4-16.el7_8" package. ============================================================================================================================================================================================ Package Arch Version Repository Size ============================================================================================================================================================================================ Updating: podman x86_64 1.6.4-16.el7_8 rhel-7-server-extras-rpms 13 M Installing for dependencies: conmon x86_64 2:2.0.8-3.rhaos4.3.el7 rhel-7-server-ose-4.3-rpms 32 k Transaction Summary ============================================================================================================================================================================================ Install ( 1 Dependent package) Upgrade 1 Package Total download size: 13 M Downloading packages: Delta RPMs disabled because /usr/bin/applydeltarpm not installed. (1/2): conmon-2.0.8-3.rhaos4.3.el7.x86_64.rpm | 32 kB 00:00:00 (2/2): podman-1.6.4-16.el7_8.x86_64.rpm | 13 MB 00:00:02 -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Total 4.7 MB/s | 13 MB 00:00:02 Running transaction check Running transaction test Transaction check error: file /usr/libexec/crio/conmon from install of conmon-2:2.0.8-3.rhaos4.3.el7.x86_64 conflicts with file from package cri-o-1.14.12-19.dev.rhaos4.2.git313d784.el7.x86_64 <--- the conflicts happened here !! Version-Release number of the following components: rpm -q openshift-ansible openshift-ansible-4.3.11-202004040552.git.0.6843f59.el7.noarch rpm -q ansible ansible-2.8.10-1.el7ae.noarch ansible --version nsible 2.8.10 config file = /etc/ansible/ansible.cfg configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python2.7/site-packages/ansible executable location = /usr/bin/ansible python version = 2.7.5 (default, Jun 11 2019, 14:33:56) [GCC 4.8.5 20150623 (Red Hat 4.8.5-39)] How reproducible: 1. First install podman-1.4.4-4.el7, then install cri-o-1.14.12-19 using OCP4.2 repository. 2. Update podman to podman-1.6.4-16.el7_8 with "yum update podman" 3. The conflicts can be reproduced in your host. Steps to Reproduce: 1. 2. 3. Actual results: Upgrade of RHEL7 worker node from 4.2 to 4.3 was failed with the "podman" package dependency conflicts. Expected results: Upgrade of RHEL7 worker node from 4.2 to 4.3 will be successful without the package dependency conflicts. Additional info: Please attach logs from ansible-playbook with the -vvv flag
Since this is a package dependency issue in cri-o and podman I'm moving this to Containers.
Lokesh can you PTAL?
This was fixed by installing podman at the same time as the openshift packages, but I believe this surfaces a dependency problem with what is shipped in 'extras' and the 'openshift' repos. If a specific version of podman is required for specific openshift releases, it should be included in the 'openshift' repo. This should be addressed at the package level to ensure the correct packages are installed regardless of when podman is installed.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2409
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days