Description of problem: ====================================================================================================================================================================== Package Architecture Version Repository Size ====================================================================================================================================================================== Upgrading: freeipa-selinux noarch 4.8.10-2.fc33 updates-testing 29 k Installing dependencies: 389-ds-base x86_64 1.4.4.4-1.fc33.2 updates-testing 1.8 M 389-ds-base-libs x86_64 1.4.4.4-1.fc33.2 updates-testing 895 k apache-commons-collections noarch 3.2.2-20.fc33 fedora 527 k apache-commons-daemon x86_64 1.2.2-5.fc33 fedora 54 k apache-commons-io noarch 1:2.6-10.fc33 fedora 216 k apache-commons-net noarch 3.6-10.fc33 fedora 290 k ecj noarch 1:4.16-4.fc33 fedora 2.7 M fedora-logos-httpd noarch 30.0.2-5.fc33 fedora 15 k freeipa-healthcheck-core noarch 0.6-4.fc33 fedora 50 k freeipa-server x86_64 4.8.10-2.fc33 updates-testing 358 k freeipa-server-common noarch 4.8.10-2.fc33 updates-testing 536 k httpcomponents-client noarch 4.5.10-4.fc33 fedora 707 k httpcomponents-core noarch 4.4.12-4.fc33 fedora 629 k httpd x86_64 2.4.46-1.fc33 fedora 1.4 M httpd-filesystem noarch 2.4.46-1.fc33 fedora 14 k httpd-tools x86_64 2.4.46-1.fc33 fedora 83 k jackson-jaxrs-json-provider noarch 2.11.2-1.fc33 fedora 22 k jackson-jaxrs-providers noarch 2.11.2-1.fc33 fedora 46 k jackson-module-jaxb-annotations noarch 2.11.2-1.fc33 fedora 46 k jakarta-commons-httpclient noarch 1:3.1-36.fc33 fedora 237 k jaxb-api noarch 2.3.3-2.fc33 fedora 108 k jaxb-impl noarch 2.3.3-4.fc33 fedora 947 k jboss-annotations-1.2-api noarch 1.0.2-4.fc33 fedora 39 k jboss-jaxrs-2.0-api noarch 1.0.0-13.fc33 fedora 112 k jboss-logging noarch 3.4.1-4.fc33 fedora 67 k jboss-logging-tools noarch 2.2.1-3.fc33 fedora 220 k jdeparser noarch 2.0.3-5.fc33 fedora 217 k jss x86_64 4.7.3-1.fc33 updates-testing 1.2 M krb5-pkinit x86_64 1.18.2-22.fc33 updates-testing 67 k krb5-server x86_64 1.18.2-22.fc33 updates-testing 304 k ldapjdk noarch 4.22.0-3.fc33 fedora 336 k mod_auth_gssapi x86_64 1.6.3-1.fc33 fedora 74 k mod_http2 x86_64 1.15.7-2.fc33 fedora 151 k mod_lookup_identity x86_64 1.0.0-12.fc33 fedora 27 k mod_session x86_64 2.4.46-1.fc33 fedora 48 k mod_ssl x86_64 1:2.4.46-1.fc33 fedora 114 k open-sans-fonts noarch 1.10-13.fc33 fedora 476 k openssl-perl x86_64 1:1.1.1g-15.fc33 fedora 30 k pki-base noarch 10.9.4-3.fc33 updates-testing 262 k pki-base-java noarch 10.9.4-3.fc33 updates-testing 687 k pki-ca noarch 10.9.4-3.fc33 updates-testing 550 k pki-kra noarch 10.9.4-3.fc33 updates-testing 192 k pki-server noarch 10.9.4-3.fc33 updates-testing 3.4 M pki-symkey x86_64 10.9.4-3.fc33 updates-testing 51 k pki-tools x86_64 10.9.4-3.fc33 updates-testing 725 k python3-argparse-manpage noarch 1.4-4.fc33 fedora 29 k python3-attrs noarch 19.3.0-5.fc33 fedora 66 k python3-custodia noarch 0.6.0-13.fc33 fedora 115 k python3-iniconfig noarch 1.0.0-2.fc33 fedora 15 k python3-ipaserver noarch 4.8.10-2.fc33 updates-testing 1.2 M python3-kdcproxy noarch 0.4.2-6.fc33 fedora 37 k python3-lib389 noarch 1.4.4.4-1.fc33.2 updates-testing 827 k python3-mod_wsgi x86_64 4.7.1-3.fc33 fedora 6.0 M python3-nss x86_64 1.0.1-20.fc33 fedora 265 k python3-pki noarch 10.9.4-3.fc33 updates-testing 151 k python3-pluggy noarch 0.13.1-2.fc33 fedora 38 k python3-py noarch 1.9.0-2.fc33 fedora 433 k python3-pytest noarch 6.0.2-1.fc33 updates-testing 1.5 M resteasy-atom-provider noarch 3.0.26-5.fc33 fedora 53 k resteasy-client noarch 3.0.26-5.fc33 fedora 162 k resteasy-core noarch 3.0.26-5.fc33 fedora 800 k resteasy-jackson2-provider noarch 3.0.26-5.fc33 fedora 28 k resteasy-jaxb-provider noarch 3.0.26-5.fc33 fedora 86 k slapi-nis x86_64 0.56.5-3.fc33 fedora 143 k slf4j-jdk14 noarch 1.7.30-6.fc33 fedora 17 k softhsm x86_64 2.6.1-3.fc33.4 fedora 451 k sscg x86_64 2.6.2-2.fc33 fedora 45 k tomcat noarch 1:9.0.38-1.fc33 updates-testing 90 k tomcat-el-3.0-api noarch 1:9.0.38-1.fc33 updates-testing 106 k tomcat-jsp-2.3-api noarch 1:9.0.38-1.fc33 updates-testing 63 k tomcat-lib noarch 1:9.0.38-1.fc33 updates-testing 5.3 M tomcatjss noarch 7.5.0-1.fc33 fedora 41 k velocity noarch 1.7-32.fc33 fedora 424 k Installing weak dependencies: tomcat-native x86_64 1.2.23-3.fc33 fedora 81 k Skipping packages with conflicts: (add '--best --allowerasing' to command line to force their upgrade): cldr-emoji-annotation noarch 1:38~beta-2.fc33 updates-testing 5.7 M net-snmp-libs x86_64 1:5.9-2.fc33 updates-testing 747 k procps-ng x86_64 3.3.16-1.fc33 updates-testing 329 k spirv-llvm-translator x86_64 11.0.0-0.1.fc33 updates-testing 666 k Skipping packages with broken dependencies: cldr-emoji-annotation-dtd noarch 1:38~beta-2.fc33 updates-testing 31 k Transaction Summary ====================================================================================================================================================================== Install 74 Packages Upgrade 1 Package Skip 5 Packages Total download size: 39 M Is this ok [y/N]: In other words: On machine registered as FreeIPA client with client packages installed, upgrading freeipa-selinux brings in freeipa server components (389, httpd, jboss etc.) Version-Release number of selected component (if applicable): Fedora 33 How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Added in https://src.fedoraproject.org/rpms/freeipa/c/8ab24b5c2c8f449af7e9f48e3f75f3b657085812?branch=f33 (line 791)
Thanks for the report. It was supposed to be a dependency in freeipa-common to depend on freeipa-selinux of the same version but I mixed things up when unifying upstream/Fedora/RHEL specs and added a wrong dependency in a wrong place. Fixed now.
FEDORA-2020-6f072665c6 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f072665c6
FEDORA-2020-e9e815177e has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2020-e9e815177e
FEDORA-2020-d4ef7aad19 has been pushed to the Fedora 34 stable repository. If problem still persists, please make note of it in this bug report.
Sorry, Rawhide automated errata broke the status :)
I tested in a F34 container with rawhide packages: [root@cc4aab8797b3 ~]# dnf install freeipa-selinux warning: Found bdb Packages database while attempting sqlite backend: using bdb backend. warning: Found bdb Packages database while attempting sqlite backend: using bdb backend. Last metadata expiration check: 0:00:13 ago on Sun Sep 27 16:28:48 2020. Dependencies resolved. ============================================================================================================================================================================================================================================================== Package Architecture Version Repository Size ============================================================================================================================================================================================================================================================== Installing: freeipa-selinux noarch 4.8.10-3.fc34 rawhide-local-freeipa 30 k Installing dependencies: checkpolicy x86_64 3.1-3.fc33 rawhide 336 k policycoreutils-python-utils noarch 3.1-4.fc33 rawhide 73 k python3-audit x86_64 3.0-0.21.20191104git1c2f876.fc33 rawhide 86 k python3-libselinux x86_64 3.1-3.fc34 rawhide 184 k python3-libsemanage x86_64 3.1-2.fc33 rawhide 83 k python3-policycoreutils noarch 3.1-4.fc33 rawhide 2.0 M python3-setools x86_64 4.3.0-5.fc33 rawhide 518 k rpm-plugin-selinux x86_64 4.16.0-0.rc1.1.fc34 rawhide 22 k selinux-policy noarch 3.14.7-3.fc34 rawhide 87 k selinux-policy-targeted noarch 3.14.7-3.fc34 rawhide 8.0 M Transaction Summary ============================================================================================================================================================================================================================================================== Install 11 Packages Total size: 11 M Total download size: 11 M Installed size: 41 M Is this ok [y/N]: n Operation aborted. Installing freeipa-client (in container) also doesn't pull freeipa-selinux and server components. This is as expected because freeipa-common only pulls freeipa-selinux in environments where selinux is supported. freeipa-selinux package itself is explicitly requiring selinux-policy and no freeipa-server anymore.
FEDORA-2020-e9e815177e has been pushed to the Fedora 33 testing repository. In short time you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-e9e815177e` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-e9e815177e See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2020-6f072665c6 has been pushed to the Fedora 32 testing repository. In short time you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-6f072665c6` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-6f072665c6 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2020-e73c9fca9e has been pushed to the Fedora ELN stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2020-6f072665c6 has been pushed to the Fedora 32 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2020-e9e815177e has been pushed to the Fedora 33 stable repository. If problem still persists, please make note of it in this bug report.
Latest Rawhide build did this again: [root@adam tmp]# dnf repoquery --requires freeipa-selinux Last metadata expiration check: 0:00:06 ago on Thu 19 Nov 2020 10:43:18 AM. /bin/sh freeipa-server = 4.9.0-0.rc1.fc34
Introduced by ab in https://src.fedoraproject.org/rpms/freeipa/c/0d298a885e487bdefedfa3190bc44160a26709e6?branch=master .
I submitted 4.9.0-0.1.rc1 that should address this. https://koji.fedoraproject.org/koji/taskinfo?taskID=55896678
I confirmed that by eyeball, let's just close it.