Description of problem: A system with FIPS enabled and syncing all checksum types (MD5, SHA1, SHA256) fails when performing migration. Version-Release number of selected component (if applicable): 6.9.7 snap 1 How reproducible: 100 Steps to Reproduce: 1. On a 6.9 satellite box, enabled FIPS following the instructions on https://access.redhat.com/solutions/137833 2. Sync rhel6, rhel7, rhel8 repos 3. Create a custom yum repo and sync https://fixtures.pulpproject.org/rpm-with-md5/ & https://fixtures.pulpproject.org/rpm-with-sha-1-modular/ for sha1 and md5 4. Create a content view and add the repos from 2 and 3. 5. Run the following commands to set the PULP_CONTENT_PREMIGRATION_BATCH_SIZE $ mkdir /etc/systemd/system/pulpcore-worker@.service.d/ $ vi /etc/systemd/system/pulpcore-worker@.service.d/settings.conf [Service] User=pulp Environment=PULP_CONTENT_PREMIGRATION_BATCH_SIZE=1000 # systemctl daemon-reload # satellite-maintain service restart 6. Publish content view 7. Run migration Expected: Migration should return successfully Actual results: 2021-10-26 10:48:33 -0400: Distribution creation 16/21 2021-10-26 10:48:43 -0400: Distribution creation 16/21 2021-10-26 10:48:53 -0400: Distribution creation 16/21 2021-10-26 10:49:03 -0400: Distribution creation 16/21 2021-10-26 10:49:13 -0400: Distribution creation 16/21 2021-10-26 10:49:23 -0400: Distribution creation 16/21 2021-10-26 10:49:33 -0400: Distribution creation 16/21 2021-10-26 10:49:43 -0400: [FAIL] Failed executing preserve_output=true foreman-rake katello:pulp3_migration, exit status 1 -------------------------------------------------------------------------------- Scenario [Prepare content for Pulp 3] failed. The following steps ended up in failing state: [content-prepare] Resolve the failed steps and rerun the command. In case the failures are false positives, use --whitelist="content-prepare" Additional info: I will attach a file with me information on the failure.
Steps to retest. You can follow the descriptions to retest. Since I had 6.9.7 snap 1, I upgraded to snap 3 with yum update and verified that all the packages are in. Then I ran `satellite-maintain content prepare` until it's completed. Afterwards, I checked the `satellite-maintain content migration-stats` to ensure all are migrated over successfully. Expected: Migration should finish successfully Actual: Migration finished successfully. Check the migration-stats yields correct result: # satellite-maintain content migration-stats Running Retrieve Pulp 2 to Pulp 3 migration statistics ================================================================================ Retrieve Pulp 2 to Pulp 3 migration statistics: ============Migration Summary================ Migrated/Total RPMs: 81143/81143 Migrated/Total errata: 35640/35640 Migrated/Total repositories: 21/21 All content has been migrated. Verified on 6.9.7 snap 1, but upgraded the createrepo_c to latest: python3-createrepo_c-0.17.1-2.el7pc.x86_64 createrepo_c-libs-0.17.1-2.el7pc.x86_64 createrepo_c-0.17.1-2.el7pc.x86_64
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Satellite 6.9.7 Async Bug Fix Update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:4612