Bug 2017489 - Migration fails when migrating content with FIPS mode enabled
Summary: Migration fails when migrating content with FIPS mode enabled
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Pulp
Version: 6.9.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: 6.9.7
Assignee: satellite6-bugs
QA Contact: Lai
URL:
Whiteboard:
Depends On:
Blocks: 1929347
TreeView+ depends on / blocked
 
Reported: 2021-10-26 15:31 UTC by Lai
Modified: 2022-07-21 21:54 UTC (History)
4 users (show)

Fixed In Version: createrepo_c-0.17.1-2
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-11-10 16:23:43 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2021:4612 0 None None None 2021-11-10 16:23:47 UTC

Description Lai 2021-10-26 15:31:31 UTC
Description of problem:
A system with FIPS enabled and syncing all checksum types (MD5, SHA1, SHA256) fails when performing migration.

Version-Release number of selected component (if applicable):
6.9.7 snap 1

How reproducible:
100

Steps to Reproduce:
1. On a 6.9 satellite box, enabled FIPS following the instructions on https://access.redhat.com/solutions/137833
2. Sync rhel6, rhel7, rhel8 repos
3. Create a custom yum repo and sync https://fixtures.pulpproject.org/rpm-with-md5/ & https://fixtures.pulpproject.org/rpm-with-sha-1-modular/ for sha1 and md5
4. Create a content view and add the repos from 2 and 3.
5. Run the following commands to set the PULP_CONTENT_PREMIGRATION_BATCH_SIZE

$ mkdir /etc/systemd/system/pulpcore-worker@.service.d/
$ vi  /etc/systemd/system/pulpcore-worker@.service.d/settings.conf

[Service]
User=pulp
Environment=PULP_CONTENT_PREMIGRATION_BATCH_SIZE=1000

# systemctl daemon-reload
# satellite-maintain service restart

6. Publish content view
7. Run migration

Expected:
Migration should return successfully


Actual results:
2021-10-26 10:48:33 -0400: Distribution creation 16/21
2021-10-26 10:48:43 -0400: Distribution creation 16/21
2021-10-26 10:48:53 -0400: Distribution creation 16/21
2021-10-26 10:49:03 -0400: Distribution creation 16/21
2021-10-26 10:49:13 -0400: Distribution creation 16/21
2021-10-26 10:49:23 -0400: Distribution creation 16/21
2021-10-26 10:49:33 -0400: Distribution creation 16/21
2021-10-26 10:49:43 -0400:                                                                       [FAIL]
Failed executing preserve_output=true foreman-rake katello:pulp3_migration, exit status 1
--------------------------------------------------------------------------------
Scenario [Prepare content for Pulp 3] failed.

The following steps ended up in failing state:

  [content-prepare]

Resolve the failed steps and rerun
the command. In case the failures are false positives,
use --whitelist="content-prepare"


Additional info:
I will attach a file with me information on the failure.

Comment 9 Lai 2021-11-01 16:12:20 UTC
Steps to retest.

You can follow the descriptions to retest.


Since I had 6.9.7 snap 1, I upgraded to snap 3 with yum update and verified that all the packages are in.  Then I ran `satellite-maintain content prepare` until it's completed.  Afterwards, I checked the `satellite-maintain content migration-stats` to ensure all are migrated over successfully.


Expected:
Migration should finish successfully

Actual:
Migration finished successfully.  Check the migration-stats yields correct result:

# satellite-maintain content migration-stats
Running Retrieve Pulp 2 to Pulp 3 migration statistics
================================================================================
Retrieve Pulp 2 to Pulp 3 migration statistics: 
============Migration Summary================
Migrated/Total RPMs: 81143/81143
Migrated/Total errata: 35640/35640
Migrated/Total repositories: 21/21
All content has been migrated.

Verified on 6.9.7 snap 1, but upgraded the createrepo_c to latest: 

python3-createrepo_c-0.17.1-2.el7pc.x86_64
createrepo_c-libs-0.17.1-2.el7pc.x86_64
createrepo_c-0.17.1-2.el7pc.x86_64

Comment 14 errata-xmlrpc 2021-11-10 16:23:43 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Satellite 6.9.7 Async Bug Fix Update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4612


Note You need to log in before you can comment on or make changes to this bug.