Bug 1893007
| Summary: | After Satellite 6.8 upgrade, systems assigned to custom content view are getting 404 errors while downloading repodata. baseurl contain " %2F " in it | |||
|---|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Ashish Humbe <ahumbe> | |
| Component: | Candlepin | Assignee: | Barnaby Court <bcourt> | |
| Status: | CLOSED ERRATA | QA Contact: | Lai <ltran> | |
| Severity: | urgent | Docs Contact: | ||
| Priority: | urgent | |||
| Version: | 6.8.0 | CC: | amarirom, hakon.gislason, jbhatia, jjansky, jsherril, ktordeur, ldelouw, mcasabur, mlinden, mmccune, naijain, ofalk, patalber, pcfe, pcreech, pdudley, pdwyer, pgiustin, rankumar, rsebasti, saydas, sraut, swachira, yferszt | |
| Target Milestone: | 6.8.1 | Keywords: | PrioBumpGSS, Triaged | |
| Target Release: | Unused | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | candlepin-3.1.22-1 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1893836 1894035 (view as bug list) | Environment: | ||
| Last Closed: | 2020-11-11 14:19:08 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1893836 | |||
| Bug Blocks: | 1894035 | |||
|
Description
Ashish Humbe
2020-10-29 20:56:10 UTC
*** Bug 1893004 has been marked as a duplicate of this bug. *** We worked with a customer and have added an additional step to the workaround (step 1 in this case): 1. Edit /etc/pulp/repo_auth.conf change: enabled: true to enabled: false 2. Create a file /etc/httpd/conf.d/05-foreman-ssl.d/rewrite.conf with contents: AllowEncodedSlashes NoDecode RewriteEngine On RewriteRule "^/pulp/repos/(.*)%2F(.*)" "/pulp/repos/$1/$2" [R] 3. restart httpd: systemctl restart httpd Please keep in mind that anytime you re-run the installer you will need to reapply these changes. This is a temporary workaround until we have a more permanent fix. Note: we are working on capsule workaround instructions now. On capsules, perform these changes to workaround the problem: 1. Edit /etc/pulp/repo_auth.conf change: enabled: true to enabled: false 2. Edit the file /etc/httpd/conf.d/05-pulp-https.conf and find these two lines: alias /pub /var/www/html/pub <Location /pub> Between these two lines, insert the following: ####### BZ 1893007 workaround AllowEncodedSlashes NoDecode RewriteEngine On RewriteRule "^/pulp/repos/(.*)%2F(.*)" "/pulp/repos/$1/$2" [R] ####### So the final result will look like: alias /pub /var/www/html/pub ####### BZ 1893007 workaround AllowEncodedSlashes NoDecode RewriteEngine On RewriteRule "^/pulp/repos/(.*)%2F(.*)" "/pulp/repos/$1/$2" [R] ####### <Location /pub> 3. restart httpd: systemctl restart httpd Just a note that the workaround provided succeeds for content but does not succeeds for other things like the package-upload plugin or katello-package-upload, expect these to fail due to the URL problem. *** Satellite 6.8.0 Hotfix Available *** 1) Download http://people.redhat.com/~mmccune/hotfix/hotfix-1893561.tar to your Satellite 2) verify sha256: $ sha256sum hotfix-1893561.tar b9ea3bd6c2c9c09e60a7ac7238d9771a611e17a876112dd764a94abc21f45437 hotfix-1893561.tar 3) stop services: satellite-maintain service stop 4) Install: tar xvf hotfix-1893561.tar rpm -Uvh candlepin*.rpm 5) restart: satellite-maintain service start 6) resume operations After installing the hotfix I'm still not able to correct the url. Tried: - installed rpms - restarted Satellite - refreshed manifest - refreshed content host certs - unregistered/re-registered content host Satellite: ~~~ [root@satellite ~]# rpm -qa candlepin* candlepin-selinux-3.1.22-1.el7sat.noarch candlepin-3.1.22-1.el7sat.noarch ~~~ Content host: ~~~ [root@ch ~]# subscription-manager refresh ; yum repolist 1 local certificate has been deleted. All local data refreshed Loaded plugins: enabled_repos_upload, package_upload, product-id, search-disabled-repos, subscription-manager This system is registered with an entitlement server, but is not receiving updates. You can use subscription-manager to assign subscriptions. https://satellite.example.com/pulp/repos/ghost/Library%2Frhel_7/content/dist/rhel/server/7/7Server/x86_64/os/repodata/repomd.xml: [Errno 14] HTTPS Error 404 - Not Found Trying other mirror. ... repo id repo name status rhel-7-server-rpms/7Server/x86_64 Red Hat Enterprise Linux 7 Server (RPMs) 0 repolist: 0 Uploading Enabled Repositories Report Loaded plugins: product-id, subscription-manager ~~~ Perhaps missing something, not sure what. Thanks! Paul Paul, You may need an installer run 'satellite-installer --upgrade' (although i think its just satellite-installer now in 6.8) in order to migrate the candlepin db to drop existing certs. Then upon checkin systems should pull down their new certs. Note that this doesn't fully explain the unregistering/reregistering case, but definitely try an installer run after upgrading the rpms. Justin, Thanks! Running the satellite-installer with no options was just fine. After that a refresh on the client was the only thing needed for the certs to right themselves. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Satellite 6.8.0.1 Async Bug Fix Update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:5089 |