Created attachment 355696 [details]
Patch to fix problem described
Description of problem:
The caching functionality of createrepo in EPEL4 does not handle RPMs that don't contain an SHA1 checksum. This results in an entry in the cachedir that simply contains the RPM name, and no other identifying information.
When using cache, if you have more than 1 RPM with the same name (but different version/release) then createrepo can generate invalid metadata that prevents any version of this package name from being installed.
Version-Release number of selected component (if applicable):
Find two versions of an RPM that don't contain SHA1 checksums (verify with rpm -K blah.rpm), place into a directory.
Execute createrepo with the -c option to create a cache. Assuming the RPM name is "VMwareTools", you'll end up with an entry in the cache dir called "VMwareTools-".
Attempt to install the package using YUM, pointed at this repository. Failure occurs.
Yum should install the latest version (assuming no version specified on command line).
Patch attached that fixes this problem. Patch is a massaged version of:
Which should apply cleanly to the createrepo RPM in EPEL4.
I can add this one in.
patch applied and build has been submitted to koji:
Jeff can you take care of releasing this?
createrepo-0.4.4-0.4.el4 has been submitted as an update for Fedora EPEL 4.
createrepo-0.4.4-0.4.el4 has been pushed to the Fedora EPEL 4 testing repository. If problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
su -c 'yum --enablerepo=updates-testing update createrepo'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/EL-4/FEDORA-EPEL-2009-0254
createrepo-0.4.4-0.4.el4 has been pushed to the Fedora EPEL 4 stable repository. If problems still persist, please make note of it in this bug report.