Bug 1927395 - RHVH, protecting key packages from being removed.
Summary: RHVH, protecting key packages from being removed.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: redhat-release-virtualization-host
Version: 4.4.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-4.4.5
: 4.4.5
Assignee: Sandro Bonazzola
QA Contact: shiyi lei
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-02-10 16:27 UTC by Nir Levy
Modified: 2024-03-25 18:09 UTC (History)
11 users (show)

Fixed In Version: redhat-release-virtualization-host-4.4.5-3.el8ev
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-04-14 11:44:48 UTC
oVirt Team: Node
Target Upstream Version:
Embargoed:
shlei: testing_plan_complete+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2021:1189 0 None None None 2021-04-14 11:48:55 UTC

Description Nir Levy 2021-02-10 16:27:29 UTC
Description of problem:
Currently it is possible to remove critical RHVH pacakges,
which removes the rpm's collector rpm (redhat-release-virtualization-host-content) which leaves us with no way of recovery.


Version-Release number of selected component (if applicable):
any.

How reproducible:
always

Steps to Reproduce:
1. yum remove libvirt (or any dependent rpm,
     list can be gathered by 'rpm -qR redhat-release-virtualization-host-content)
2. confirm
3. dependent package redhat-release-virtualization-host-content is lost with no way to retrieve.
   package is left with only the latest available in the CDN which is not what we want in RHVH ( high rist of breaking integrity ).

Actual results:
packages removed.

'yum remove libvirt'

Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Dependencies resolved.
==============================================================================================================================================================
 Package                                                 Architecture        Version                                               Repository            Size
==============================================================================================================================================================
Removing:
 libvirt                                                 x86_64              6.6.0-7.3.module+el8.3.0+9547+7d548490                @System                0  
Removing dependent packages:
 redhat-release-virtualization-host-content              x86_64              4.4.4-1.el8ev                                         @System                0  



 dnf remove  libvirt
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Error: 
 Problem: The operation would result in removing the following protected packages: redhat-release-virtualization-host-content
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages

Additional info:


this can be easily achieved by
cat redhat-release-virtualization-host-content > /etc/dnf/protected.d/redhat-release-virtualization-host-content.conf

file should be supplied by redhat-release-virtualization-host rpm.

Comment 3 shiyi lei 2021-02-18 05:43:52 UTC
Test version:
rhvh-4.4.5.3-0.20210215.0

Test steps:
1.Install rhvh
2.yum/dnf remove libvirt

Test result:
[root@lenovo-sr630-08 ~]# yum remove libvirt
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Error: 
 Problem: The operation would result in removing the following protected packages: redhat-release-virtualization-host-content
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
[root@lenovo-sr630-08 ~]# dnf remove libvirt
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.

Error: 
 Problem: The operation would result in removing the following protected packages: redhat-release-virtualization-host-content
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)


This bug has been fixed in the latest version. Move the status to VERIFIED.

Comment 12 errata-xmlrpc 2021-04-14 11:44:48 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Virtualization security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1189

Comment 13 errata-xmlrpc 2021-04-14 11:48:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Virtualization security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1189


Note You need to log in before you can comment on or make changes to this bug.