RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 2209135 - nfs-utils will not update to version 2.5.4-18
Summary: nfs-utils will not update to version 2.5.4-18
Keywords:
Status: CLOSED DUPLICATE of bug 2157835
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: nfs-utils
Version: 9.2
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: Steve Dickson
QA Contact: Yongcheng Yang
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-05-22 19:11 UTC by karl kleinpaste
Modified: 2023-05-24 08:35 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-05-24 08:35:36 UTC
Type: Bug
Target Upstream Version:
Embargoed:
pm-rhel: mirror+

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-157869 0 None None None 2023-05-22 19:13:12 UTC

Description karl kleinpaste 2023-05-22 19:11:17 UTC 
Description of problem:
currently installed: nfs-utils 2.5.4-15.
offered new version: nfs-utils 2.5.4-18.
"dnf update" of this package fails consistently on a signature failure with "operation not supported" error.

Version-Release number of selected component (if applicable):
2.5.4-18

How reproducible:
always

Steps to Reproduce:
1. dnf update nfs-utils

Actual results:

dnf update nfs-utils
Updating Subscription Management repositories.
Last metadata expiration check: 0:14:18 ago on Mon 22 May 2023 10:35:31 AM EDT.
Dependencies resolved.
==============================================================================================================
 Package             Architecture     Version                   Repository                               Size
==============================================================================================================
Upgrading:
 nfs-utils           x86_64           1:2.5.4-18.el9            rhel-9-for-x86_64-baseos-rpms           459 k

Transaction Summary
==============================================================================================================
Upgrade  1 Package

Total download size: 459 k
Is this ok [y/N]: y
Downloading Packages:
nfs-utils-2.5.4-18.el9.x86_64.rpm                                             2.5 MB/s | 459 kB     00:00    
--------------------------------------------------------------------------------------------------------------
Total                                                                         2.5 MB/s | 459 kB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                      1/1 
  Running scriptlet: nfs-utils-1:2.5.4-18.el9.x86_64                                                      1/2 
  Upgrading        : nfs-utils-1:2.5.4-18.el9.x86_64                                                      1/2 
error: ima: could not apply signature on '/var/lib/nfs/rpc_pipefs': Operation not supported
error: Plugin ima: hook fsm_file_prepare failed

Error unpacking rpm package nfs-utils-1:2.5.4-18.el9.x86_64
  Verifying        : nfs-utils-1:2.5.4-18.el9.x86_64                                                      1/2 
  Verifying        : nfs-utils-1:2.5.4-15.el9.x86_64                                                      2/2 
Installed products updated.

Failed:
  nfs-utils-1:2.5.4-15.el9.x86_64                       nfs-utils-1:2.5.4-18.el9.x86_64                      

Error: Transaction failed

Expected results:
Normal update success.
Comment 1 Yongcheng Yang 2023-05-23 01:09:20 UTC 
Thank you for the report but I cannot reproduce this issue when updating nfs-utils from 9.1.0 to 9.2.0:

~~~
[02:35:52 root@ ~~]# dnf -y update nfs-utils
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

beaker-AppStream                                9.8 MB/s | 6.4 MB     00:00    
beaker-BaseOS                                   4.3 MB/s | 1.7 MB     00:00    
beaker-CRB                                      4.1 MB/s | 2.0 MB     00:00    
Last metadata expiration check: 0:00:01 ago on Thu May 18 02:35:56 2023.
Dependencies resolved.
================================================================================
 Package         Architecture Version                 Repository           Size
================================================================================
Upgrading:
 nfs-utils       x86_64       1:2.5.4-18.el9          beaker-BaseOS       459 k

Transaction Summary
================================================================================
Upgrade  1 Package

Total download size: 459 k
Downloading Packages:
nfs-utils-2.5.4-18.el9.x86_64.rpm               1.7 MB/s | 459 kB     00:00    
--------------------------------------------------------------------------------
Total                                           1.7 MB/s | 459 kB     00:00     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Running scriptlet: nfs-utils-1:2.5.4-18.el9.x86_64                        1/2 
  Upgrading        : nfs-utils-1:2.5.4-18.el9.x86_64                        1/2 
  Running scriptlet: nfs-utils-1:2.5.4-18.el9.x86_64                        1/2 
  Running scriptlet: nfs-utils-1:2.5.4-15.el9.x86_64                        2/2 
  Cleanup          : nfs-utils-1:2.5.4-15.el9.x86_64                        2/2 
  Running scriptlet: nfs-utils-1:2.5.4-15.el9.x86_64                        2/2 
Not supported unit type

  Verifying        : nfs-utils-1:2.5.4-18.el9.x86_64                        1/2 
  Verifying        : nfs-utils-1:2.5.4-15.el9.x86_64                        2/2 
Installed products updated.

Upgraded:
  nfs-utils-1:2.5.4-18.el9.x86_64                                               

Complete!

(In reply to karl kleinpaste from comment #0)
> ...
> error: ima: could not apply signature on '/var/lib/nfs/rpc_pipefs': Operation not supported
> error: Plugin ima: hook fsm_file_prepare failed
 
Based on the "ima" keyword maybe you've enabled the IMA policy which might lead to the failure.

Could you try once again after the ima disabled.
Comment 2 karl kleinpaste 2023-05-23 17:09:36 UTC 
Thank you. I wasn't aware of "ima" as something optional until now.
"dnf erase rpm-plugin-ima" got me to a state where "dnf update nfs-utils" works.

The underlying question then becomes, Why is nfs-utils subject to this problem, but no other package has been? The machine has almost 7000 packages installed.

Feel free to close.
Comment 3 Yongcheng Yang 2023-05-24 08:35:36 UTC 
(In reply to karl kleinpaste from comment #2)
> Thank you. I wasn't aware of "ima" as something optional until now.
> "dnf erase rpm-plugin-ima" got me to a state where "dnf update nfs-utils"
> works.

Thank you for the information.

Now I can reproduce this issue by trying to reinstall "nfs-utils" after package "rpm-plugin-ima" installed.

> 
> The underlying question then becomes, Why is nfs-utils subject to this
> problem, but no other package has been? The machine has almost 7000 packages
> installed.

According to the warning, trying to update/install nfs-utils will modify the directory /var/lib/nfs/rpc_pipefs but it's protected by the IMA thus "Operation not supported".

It's a real bug and has been reported and fixed in the package "rpm". I'm duplicating this to that one for now.

*** This bug has been marked as a duplicate of bug 2157835 ***
Note You need to log in before you can comment on or make changes to this bug.