Project

General

Profile

Actions
Copy link

Bug #11884

closed

rudder-agent does not install on CentOS 5

Added by Simon Hintermann about 7 years ago. Updated over 2 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Packaging
Target version:
4.1.11
Pull Request:
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
User visibility:
First impressions of Rudder
Effort required:
Priority:
150
Name check:
Fix check:
Regression:

Description

CentOS5 does not understand V4 packet signatures:

  1. yum install v rudder-agent.x86_64
    Loading "fastestmirror" plugin
    Config time: 0.067
    Yum Version: 3.2.22
    Setting up Package Sacks
    Loading mirror speeds from cached hostfile
    pkgsack time: 0.003
    rpmdb time: 0.000
    Setting up Install Process
    Building updates object
    up:Obs Init time: 0.000
    up:simple updates time: 0.000
    up:obs time: 0.000
    up:condense time: 0.000
    updates time: 0.042
    Resolving Dependencies
    -    > Running transaction check
    ---> Package rudder-agent.x86_64 1398866025:4.2.3.release-1.EL.5 set to be updated
    Checking deps for rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    looking for ('crontabs', None, (None, None, None)) as a requirement of rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    looking for ('dmidecode', None, (None, None, None)) as a requirement of rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    looking for ('pcre', None, (None, None, None)) as a requirement of rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    looking for ('/bin/sh', None, (None, None, None)) as a requirement of rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    looking for ('net-tools', None, (None, None, None)) as a requirement of rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    looking for ('openssl', None, (None, None, None)) as a requirement of rudder-agent.x86_64 1398866025-4.2.3.release-1.EL.5 - u
    --> Finished Dependency Resolution
    Dependency Process ending
    Depsolve time: 0.345

Dependencies Resolved

==========================================================================================================================================================================================================================================
Package Arch Version Repository Size ==========================================================================================================================================================================================================================================
Installing:
rudder-agent x86_64 1398866025:4.2.3.release-1.EL.5 Rudder_4.2 27 M

Transaction Summary ==========================================================================================================================================================================================================================================
Install 1 Package(s)
Upgrade 0 Package(s)

Total size: 27 M
Is this ok [y/N]: y
Downloading Packages:
using local copy of 1398866025:rudder-agent-4.2.3.release-1.EL.5.x86_64
error: rpmts_HdrFromFdno: Header V4 RSA/SHA1 signature: BAD, key ID 6f07d355

Problem opening package rudder-agent-4.2.3.release-1.EL.5.x86_64.rpm

Actions
Copy link
 #1

Updated by Vincent MEMBRÉ about 7 years ago

  • Translation missing: en.field_tag_list set to Sponsored
  • Priority changed from 76 to 108
Actions
Copy link
 #2

Updated by Vincent MEMBRÉ about 7 years ago

  • Assignee changed from Anonymous to Alexis Mousset
  • User visibility changed from Operational - other Techniques | Technique editor | Rudder settings to First impressions of Rudder
  • Priority changed from 108 to 156

Thanks for reporting your issue.

We are currently looking why the signature is not compatible with Centos 5 anymore (it used to be ok, but we upgraded our build system lately, maybe a default has changed unnoticed ...)

A "workaround" would be to disable gpgcheck on the repo definition in /etc/yum.repo.d, but this is a really bad advice ...

Actions
Copy link
 #3

Updated by Simon Hintermann about 7 years ago

Already tried that... this error has nothing to do with GPG signing, unfortunately, you can try it for yourself, the package does not install.

Actions
Copy link
 #4

Updated by Vincent MEMBRÉ almost 7 years ago

THis should have been fixed 2 weeks ago by a fix in our internal CI ... Sorry we haven't told you yet about this.

Can you try to install a nightly version of the 4.2 version ? repo url is: http://www.rudder-project.org/rpm-4.2-nightly/

Actions
Copy link
 #5

Updated by Simon Hintermann almost 7 years ago

Hello,

sorry still the same issue:

[root@raq26 ~]# yum install rudder-agent.x86_64
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package rudder-agent.x86_64 1398866025:4.2.4.rc1.git201801030030-1.EL.5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

==========================================================================================================================================================================================================================================
Package Arch Version Repository Size ==========================================================================================================================================================================================================================================
Installing:
rudder-agent x86_64 1398866025:4.2.4.rc1.git201801030030-1.EL.5 Rudder_4.2 27 M

Transaction Summary ==========================================================================================================================================================================================================================================
Install 1 Package(s)
Upgrade 0 Package(s)

Total download size: 27 M
Is this ok [y/N]: y
Downloading Packages:
rudder-agent-4.2.4.rc1.git201801030030-1.EL.5.x86_64.rpm | 27 MB 00:09
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
error: rudder-agent-4.2.4.rc1.git201801030030-1.EL.5: Header V4 RSA/SHA1 signature: BAD, key ID 6f07d355

Installed:
rudder-agent.x86_64 1398866025:4.2.4.rc1.git201801030030-1.EL.5

Complete!
[root@raq26 ~]#

My rudder.repo:

[Rudder_4.2]
name=Rudder 4.1 EL repository
#baseurl=http://www.rudder-project.org/rpm-4.2/RHEL_5/
baseurl=http://www.rudder-project.org/rpm-4.2-nightly/RHEL_5/
gpgcheck=0
gpgkey=http://www.rudder-project.org/rpm-4.2/RHEL_5/repodata/repomd.xml.key

Actions
Copy link
 #6

Updated by Simon Hintermann almost 7 years ago

Did you try by yourself on a CentOS 5? perhaps I need to do something more to be able to install it...

Actions
Copy link
 #8

Updated by Alexis Mousset almost 7 years ago

  • Target version changed from 4.2.4 to 4.1.10

This issue was caused by changes on our build infrastructure, we upgraded the server that signs the packages to debian stretch, which includes gpg2 by default, and packages were hence signed using it. The problem is that gpg2 does not support V3 signatures (used in CentOS5) anymore. We added gpg1 back, and we are now using it for signing packages for old platforms.

Current nightly packages should work correctly now:

https://www.rudder-project.org/rpm-repos/4.1-nightly/
https://www.rudder-project.org/rpm-repos/4.2-nightly/

Actions
Copy link
 #9

Updated by Vincent MEMBRÉ almost 7 years ago

  • Target version changed from 4.1.10 to 4.1.11
  • Priority changed from 156 to 153
Actions
Copy link
 #10

Updated by Nicolas CHARLES almost 7 years ago

  • Status changed from New to Pending technical review
  • Priority changed from 153 to 152

This ticket has been solved as part of our packaging infrastructure change, as Vincent stated 2 months ago.
I'm closing this ticket, since installation works as expected on centos5

Actions
Copy link
 #11

Updated by Nicolas CHARLES almost 7 years ago

  • Status changed from Pending technical review to Rejected

There's no code associated in repo (everything is on the builder), so as to not break the standart ticket workflow (released means code associated in repo) i'm rejecting this issue
But be assure that it is dixed

Actions
Copy link
 #12

Updated by Alexis Mousset over 2 years ago

  • Priority changed from 152 to 150
Actions
Copy link

Also available in: Atom PDF