[Bug 862791] New: xtables-addons needs to be rebuild for the kernel update
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c0 Summary: xtables-addons needs to be rebuild for the kernel update Classification: openSUSE Product: openSUSE 12.3 Version: Final Platform: PC OS/Version: openSUSE 12.3 Status: NEW Severity: Critical Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: Mathias.Homann@opensuse.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0 the xtables addon kernel modules fail to load after the last kernel update since they are not found by modprobe. Reproducible: Always Steps to Reproduce: 1. use modules from the xtables addons 2. install the latest kernel update 3. observe the firewall rules based on xtables addon mudules fail to load on reboot critical, because any server using xtables addon modules for firewall is unreachable via the network because of this. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c1 Mathias Homann <Mathias.Homann@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Kernel |Kernel Product|openSUSE 12.3 |openSUSE 13.1 --- Comment #1 from Mathias Homann <Mathias.Homann@opensuse.org> 2014-02-07 14:50:32 UTC --- only applies to 13.1, on 12.3 the kernel update still has the same major number -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c2 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com --- Comment #2 from Marcus Meissner <meissner@suse.com> 2014-02-07 16:58:51 UTC --- as they should be KMPs it should work with a new kernel -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c3 --- Comment #3 from Mathias Homann <Mathias.Homann@opensuse.org> 2014-02-07 18:42:32 UTC --- "should", true. problem is, it doesn't. Before applying the latest kernel update: oss131test:~ # modprobe -v xt_geoip insmod /lib/modules/3.11.6-4-default/extra/xt_geoip.ko oss131test:~ # uname -a Linux oss131test 3.11.6-4-default #1 SMP Wed Oct 30 18:04:56 UTC 2013 (e6d4a27) x86_64 x86_64 x86_64 GNU/Linux oss131test:~ # cat /etc/SuSE-release openSUSE 13.1 (x86_64) VERSION = 13.1 CODENAME = Bottle # /etc/SuSE-release is deprecated and will be removed in the future, use /etc/os-release instead oss131test:~ # rpm -qf /lib/modules/3.11.6-4-default/extra/xt_geoip.ko xtables-addons-kmp-default-2.3_k3.11.6_4-2.1.9.x86_64 after applying the latest kernel update: lemmy@sai:~> ssh root@oss131test Last login: Fri Feb 7 19:30:43 2014 from sai.eregion.home Have a lot of fun... oss131test:~ # modprobe -v xt_geoip FATAL: Module xt_geoip not found. oss131test:~ # rpm -qf /lib/modules/3.11.6-4-default/extra/xt_geoip.ko xtables-addons-kmp-default-2.3_k3.11.6_4-2.1.9.x86_64 oss131test:~ # rpm -qf /lib/modules/3.11. 3.11.10-7-default/ 3.11.6-4-default/ oss131test:~ # uname -a Linux oss131test 3.11.10-7-default #1 SMP Mon Feb 3 09:41:24 UTC 2014 (750023e) x86_64 x86_64 x86_64 GNU/Linux oss131test:~ # cat /etc/SuSE-release openSUSE 13.1 (x86_64) VERSION = 13.1 CODENAME = Bottle # /etc/SuSE-release is deprecated and will be removed in the future, use /etc/os-release instead -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c4 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rommel@suse.com AssignedTo|kernel-maintainers@forge.pr |mmarek@suse.com |ovo.novell.com | --- Comment #4 from Marcus Meissner <meissner@suse.com> 2014-02-08 09:54:18 UTC --- is the kmp magic in 13.1 broken? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c5 --- Comment #5 from Arjen de Korte <suse+build@de-korte.org> 2014-02-08 17:12:58 UTC --- Apparently. Likewise, in Tumbleweed it is just as broken: # rpm -q kernel-desktop|sort -n|tail -n 1 kernel-desktop-3.13.2-13.2.g97cc2ff.x86_64 but # rpm -q xtables-addons-kmp-desktop xtables-addons-kmp-desktop-2.3_k3.11.6_4-2.1.9.x86_64 The addon modules haven't been rebuild a single time, so it has been broken for quite a while already. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c6 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|mmarek@suse.com |bbrunner@suse.com --- Comment #6 from Marcus Meissner <meissner@suse.com> 2014-02-10 11:51:58 UTC --- 13.1 was changed, we need to release the kmps for the current kernel update too -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c7 --- Comment #7 from Benjamin Brunner <bbrunner@suse.com> 2014-02-10 14:58:22 CET --- I've already prepared the kmp's in openSUSE:Maintenance:2549 and will release it asap. Thanks for bringing this to our attention. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c8 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #8 from Benjamin Brunner <bbrunner@suse.com> 2014-02-11 14:41:31 CET --- I've released the kmp's now. This issue should be resolved as soon as they are published. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c9 --- Comment #9 from Arjen de Korte <suse+build@de-korte.org> 2014-02-11 15:46:24 UTC --- (In reply to comment #8)
I've released the kmp's now. This issue should be resolved as soon as they are published.
There are still no kmp's in Tumbleweed. Am I impatient or should I file a new report? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c10 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | AssignedTo|bbrunner@suse.com |gregkh@linux.com --- Comment #10 from Benjamin Brunner <bbrunner@suse.com> 2014-02-11 17:58:15 CET --- The problem is that tumbleweed uses the kernel of the day, but the kmp's are from 13.1. So, we should probably add the affected packages to the tumbleweed-project. Thanks Arjen. Reopened and assigned to Greg. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c11 --- Comment #11 from Benjamin Brunner <bbrunner@suse.com> 2014-02-11 17:59:41 CET --- @Greg, please also see bnc#862766. Probably all kmp's are affected of this kernel-change. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c12 --- Comment #12 from Greg Kroah-Hartman <gregkh@linux.com> 2014-02-11 17:21:47 UTC --- So just add the xtables-addons package to tumbleweed will solve this? And yes, all kmp's are a problem with Tumbleweed, that is why you shouldn't use them :) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c13 --- Comment #13 from Greg Kroah-Hartman <gregkh@linux.com> 2014-02-11 17:23:21 UTC --- And I will not support VirtualBox in Tumbleweed, if you use it, you are on your own. The code in VirtualBox is so bad, it's beyond horrible. Also, the upstream developers of VirtualBox do NOT want it ever merged into the kernel tree, as they change the API all the time (by definition the compiler's implementation of C++ is the API in places, think about that for a few minutes...) VirtualBox is dead to me, as it should be to everyone else, just use KVM please. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c14 --- Comment #14 from Arjen de Korte <suse+build@de-korte.org> 2014-02-11 19:09:08 UTC --- (In reply to comment #12)
So just add the xtables-addons package to tumbleweed will solve this?
For me, it will.
And yes, all kmp's are a problem with Tumbleweed, that is why you shouldn't use them :)
In that case, they shouldn't be provided in the first place. Or only kmp's that are easy to maintain (I built xtables-addons from source by just running rpmbuild -bb xtables-addons.spec If it is not feasible to provide updated kmp's whenever the kernel is updated, Thumbleweed should not provide them. There is no point in rolling updates if an update of one package will break others that depend on them. People who really want to use them, should then stick to the latest stable openSUSE release. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c15 --- Comment #15 from Arjen de Korte <suse+build@de-korte.org> 2014-02-11 19:11:22 UTC --- (In reply to comment #13)
And I will not support VirtualBox in Tumbleweed, if you use it, you are on your own. The code in VirtualBox is so bad, it's beyond horrible. Also, the upstream developers of VirtualBox do NOT want it ever merged into the kernel tree, as they change the API all the time (by definition the compiler's implementation of C++ is the API in places, think about that for a few minutes...)
VirtualBox is dead to me, as it should be to everyone else, just use KVM please.
See my previous comment. In this case, Virtualbox should not be in Tumbleweed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c16 Greg Kroah-Hartman <gregkh@linux.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #16 from Greg Kroah-Hartman <gregkh@linux.com> 2014-02-11 22:09:20 UTC --- Virtualbox is not in Tumbleweed, so that solves that problem :) And Tumbleweed doesn't provide any kmp packages at the moment, so that's not an issue. It's an issue if you use a kmp from openSUSE 13.1. I'll go add the xtables-addons package to Tumbleweed, so it will rebuild properly. If you know of any other kmp that we support (that is NOT virtualbox), I'll be glad to consider it. But note, if it breaks building, I will not fix it up for new kernel versions, I rely on the maintainers of those packages to do this. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c17 --- Comment #17 from Benjamin Brunner <bbrunner@suse.com> 2014-02-12 10:51:49 CET --- Adding and rebuild the required kmps against the tumbleweed-kernel is enough, yes. I just wanted to clarify that not only the xtables-addons-kmp is affected. ;) Here is a list of all packages which providing kmps: cloop crash hdjmod ipset iscsitarget ndiswrapper openvswitch pcfclock vhba-kmp -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=862791 https://bugzilla.novell.com/show_bug.cgi?id=862791#c18 --- Comment #18 from Arjen de Korte <suse+build@de-korte.org> 2014-02-12 11:20:48 UTC ---
Adding and rebuild the required kmps against the tumbleweed-kernel is enough, yes.
Indeed, but it looks like it needs the new kernel running at the time of rebuilding (which is kind of hard if your headless client firewall is blocking all access due to missing modules that the kmp's should provide). ;-)
I just wanted to clarify that not only the xtables-addons-kmp is affected. ;) Here is a list of all packages which providing kmps: cloop crash hdjmod ipset iscsitarget ndiswrapper openvswitch pcfclock vhba-kmp xen
I noticed those too and also realized that these are from openSUSE-Current (not Tumbleweed). So they will be available in the list of installable packages if Tumbleweed is installed per the instructions from http://en.opensuse.org/Portal:Tumbleweed, but not receive any updates. It would be useful to blacklist these packages from openSUSE-Current somehow if the Tumbleweed repository is added (but I'm not sure if this is possible at all). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com