July 2022 - openSUSE Build Service - openSUSE Mailing Lists

Re: Rocky / Alma / CentOS 8 Stream builds unresolvable
by Will Furnell - STFC UKRI 25 Jul '22

25 Jul '22

Hi, I can confirm I am also seeing the same issues. I have tried to replicate this on my local OBS instance, and I'm getting an issue where the 8 repositories have the red triangles next to them - which is showing the following in the logs, which may help the developers debug this issue? Even on the public OBS instance only some of the repos are OK for Alma/Rocky - but not AppStream - and AppStream is where this package is located, so that may be why things are failing? AppStream itself is breaking on my instance for the following reason: 2022-07-25 10:52:35: [2331] looking at low prio RockyLinux:8/appstream (0/0/6/0/33) - RockyLinux:8/appstream scanning repo RockyLinux:8/appstream... unresolvable preinstalls: nothing provides rpm And then standard and a project which is a combination of all repos... 2022-07-25 10:52:35: [2331] looking at low prio RockyLinux:8/standard (0/0/2/0/33) - RockyLinux:8/standard scanning repo RockyLinux:8/standard... scanning repo RockyLinux:8/baseos... scanning repo RockyLinux:8/appstream... scanning repo RockyLinux:8/powertools... scanning repo RockyLinux:8/extras... unresolvable preinstalls: nothing provides perl(:MODULE_COMPAT_5.32.1) needed by perl-Digest-MD5 2022-07-25 10:52:35: [2331] looking at low prio monitoring/Rocky_8 (0/0/0/0/33) - monitoring/Rocky_8 scanning repo monitoring/Rocky_8... scanning repo RockyLinux:8/standard... scanning repo RockyLinux:8/baseos... scanning repo RockyLinux:8/appstream... scanning repo RockyLinux:8/powertools... scanning repo RockyLinux:8/extras... unresolvable preinstalls: nothing provides perl(:MODULE_COMPAT_5.32.1) needed by perl-Digest-MD5 Thanks, Will. This email and any attachments are intended solely for the use of the named recipients. If you are not the intended recipient you must not use, disclose, copy or distribute this email or any of its attachments and should notify the sender immediately and delete this email from your system. UK Research and Innovation (UKRI) has taken every reasonable precaution to minimise risk of this email or any attachments containing viruses or malware but the recipient should carry out its own virus and malware checks before opening the attachments. UKRI does not accept any liability for any losses or damages which the recipient may sustain due to presence of any viruses.

1 0

Open Build Service 2.10.17
by Lukas Krause 25 Jul '22

25 Jul '22

Hello People, We have just released Open Build Service 2.10.17 which fixes security vulnerabilities. You should update your installations as soon as possible. ## Fixed Issues Frontend: 1. Bug fix session leaking during BsRequest auto accept - See https://github.com/openSUSE/open-build-service/pull/12821 2. Update rails to 5.2.8.1 - CVE-2022-32224 Possible RCE escalation bug with Serialized Columns in Active Record 3. Update tzinfo from 1.2.9 to 1.2.10 - CVE-2022-31163 TZInfo relative path traversal vulnerability allows loading of arbitrary file ## How to Update Package updates are available from the 2.10 repositories https://build.opensuse.org/project/show/OBS:Server:2.10 Fixed appliances can be downloaded from http://openbuildservice.org/download Kind regards, Lukas -- Lukas Krause, Build Solutions SUSE Software Solutions Germany GmbH Maxfeldstrasse 5 90409 Nürnberg (HRB 36809, AG Nürnberg) Geschäftsführer: Ivo Totev

1 0

obssigner gpg key question
by Stefan Seyfried 25 Jul '22

25 Jul '22

Hi, I'm in the process of moving an existing installation to a new machine, with the possibility that the hostname will change. I also noted that my "master gpg key" of the buildservice is old and small (1024bit RSA), so I thought it would be a good idea to replace this with an new, larger one that's also issued to the proper address "obsrun(a)new.host.name". I tried this in a test instance and it has given me a profound amount of trouble (it only worked after creating the new key and then additionally importing the old privkey). Today I read https://openbuildservice.org/help/manuals/obs-admin-guide/obs.cha.security_… and this states that the gpg key is only used by signd to encrypt / decrypt the project keys and thus it should be of absolutely no concern (for my users) what email account etc. is used in that key. Am I correct with that assumption? In that case creating a new key would be indeed a useless endeavor from my side and I'd just skip that ;-) Thanks for any insight seife P.S.: the OBS admin documentation has greatly improved since I last looked (which was some time ago I have to admit) which is great and another Thank You! for that. -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman

1 0

openSUSE:Tools repositories for RockyLinux
by Magnus Lewis-Smith 22 Jul '22

22 Jul '22

Please could you add RockyLinux_8 and RockyLinux_9 build targets for the openSUSE:Tools project. I see that this will also require creating a project RockyLinux:9 Thanks! -- Magnus Lewis-Smith Senior Linux System Administrator / Scientific Computing, RTP https://warwick.ac.uk/research/rtp/sc/

3 5

Rocky / Alma / CentOS 8 Stream builds unresolvable
by Georg Brandl 22 Jul '22

22 Jul '22

Hi, currently, no builds can be made with those distributions: nothing provides glibc(x86-64) = 2.28-189.1.el8 needed by glibc-gconv-extra, (got version 2.28-189.5.el8_6 provided by glibc), nothing provides glibc-common = 2.28-189.1.el8 needed by glibc-gconv-extra, (got version 2.28-189.5.el8_6) for Rocky/Alma, and something similar with different version numbers for C8s. A simple test package to show this, with only the "standard" repos for the three distributions: https://build.opensuse.org/package/show/home:gbrandl/test thanks, Georg -- Jülich Centre for Neutron Science JCNS at Heinz Maier-Leibnitz Zentrum MLZ Forschungszentrum Jülich GmbH Lichtenbergstraße 1 85747 Garching GERMANY Telefon: +49 - 89 158860 731 Telefax: +49 - 89 158860 799 --------------------------------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt, Prof. Dr. Frauke Melchior ---------------------------------------------------------------------------------------------

1 0

osc build fail in my own OBS (2.10.16)
by tsai 20 Jul '22

20 Jul '22

my obs env: virtualbox with obs-server.x86_64-2.10.16 Here is my steps in frontend: 1. I sign up a test account and set it as Admin. 2. set Configuration->Interconnect, connect Standard OBS instance at build.opensuse.org 3. set Repositories->Add from a Distribution, add openSUSE Tumbleweed with x86_64 4. add a helloworld package with spec and source.tar.gz file in my home project In client side: 1. osc checkout my_home:project 2. osc build openSUSE_Tumbleweed x86_64 (my helloworld package) --> fail Here is error message: GET https://192.168.0.110/source/home:jerrytsai/_meta Building hello.spec for openSUSE_Tumbleweed/x86_64 POST https://192.168.0.110/source/home:jerrytsai/helloworld?cmd=getprojectservic… Getting buildconfig from server and store to /home/home:jerrytsai/helloworld/.osc/_buildconfig-openSUSE_Tumbleweed-x86_64 GET https://192.168.0.110/build/home:jerrytsai/openSUSE_Tumbleweed/_buildconfig Getting buildinfo from server and store to /home/home:jerrytsai/helloworld/.osc/_buildinfo-openSUSE_Tumbleweed-x86_64.xml POST https://192.168.0.110/build/home:jerrytsai/openSUSE_Tumbleweed/x86_64/_repo… Server returned an error: HTTP Error 400: Bad Request received truncated answer how to fix this issue, thanks for your replay

4 3

glibc unresolvable for AlmaLinux/RockyLinux
by Martin Weber 20 Jul '22

20 Jul '22

Hi all, I get the following error for the distros: nothing provides glibc(x86-64) = 2.28-189.1.el8 needed by glibc-gconv-extra (got version 2.28-189.5.el8_6 provided by glibc) nothing provides glibc-common = 2.28-189.1.el8 needed by glibc-gconv-extra (got version 2.28-189.5.el8_6) Viele Grüße, Martin Weber -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? | Martin Weber | Razorcat Development GmbH | Witzlebenplatz 4 fon: +49-(30)-536 357 46 | 14057 Berlin fax: +49-(30)-536 357 60 | |-------------------------------------------- | Geschäftsführer: Michael Wittner | Sitz der Gesellschaft: Berlin | Amtsgericht: Berlin, HRB 65326

1 1

Leap 15.4 builds - nothing provides rpmlint-mini
by Lars Weber 20 Jul '22

20 Jul '22

Hello all, we are using an internal OBS (2.10.16), Host-OS openSUSE 15.3. We have added openSUSE 15.4 as a new distribution to our OBS and pulled the project.conf via osc -A https://api.opensuse.org buildconfig openSUSE:Leap:15.4 standard But no packages are build for openSUSE 15.4 due to unresovable "nothing provides rpmlint-mini needed by rpmlint-Factory". It looks like there is no official rpmlinit-mini for 15.4: https://software.opensuse.org/package/rpmlint-mini What is the way to go, build are own rpmlint-mini? Or do I miss something else? Thanks and regards, Lars -- Lars Weber (Team IT-Services) Phone +49 40 808077-664 DFN-CERT Services GmbH, https://www.dfn-cert.de/, Fax +49 40 808077-556 Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737 Nagelsweg 41, 20097 Hamburg/Germany, CEO: Dr. Klaus-Peter Kossakowski

2 4

adding a debian repository from open build service
by Michael Behrisch 19 Jul '22

19 Jul '22

Hi, I try to add my home project's repo to a debian installation and did: sudo add-apt-repository https://download.opensuse.org/repositories/home:/behrisch/Debian_11/ sudo apt update and got the following error: apt update Hit:1 http://deb.debian.org/debian bullseye InRelease Hit:2 http://security.debian.org/debian-security bullseye-security InRelease Hit:3 http://deb.debian.org/debian bullseye-updates InRelease Ign:4 https://download.opensuse.org/repositories/home:/behrisch/Debian_11 bullseye InRelease Err:5 https://download.opensuse.org/repositories/home:/behrisch/Debian_11 bullseye Release 404 Not Found [IP: 195.135.221.134 443] Reading package lists... Done E: The repository 'https://download.opensuse.org/repositories/home:/behrisch/Debian_11 bullseye Release' does not have a Release file. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. The repository has a Release file and I can also retrieve it (using wget for instance). Reading the apt-secure manpage I thought it might be an issue with authentication but "apt update --allow-unauthenticated" gives the same error. I also tried it with ubuntu with the same results. Adding ubuntu ppas from launchpad works however. Thanks for any hints! Best regards, Michael

5 10

Kiwi USB Installs Occasionally Install to USB Drive, Destroying Contents of the Drive
by Jesse Fuson 18 Jul '22

18 Jul '22

Hello, We use Kiwi quite a bit with some openSUSE terminals out in the field. We send out OS updates via USB drives (working on OTA updates, but not there yet), and sometimes the USB Kiwi installer ends up installing the OS onto itself, rendering the drive useless. I don't have a boot.kiwi handy to upload yet, but I can work on getting one. It seems to have increased in occurrence starting with 15.1 and us moving to UEFI images. Is there anyway to direct the USB image to avoid using itself as the disk? Maybe via Grub or some Kiwi option? It happens with both PNY and KingSton USB drives. If I had to guess, I think it's some sort of "race condition" where when the hardware starts detecting devices on boot and finds the USB drive before the internal hard disk and assigns the USB drive as sda. Thanks for any help.

1 1