[opensuse-factory] Test updates for SUSE Linux 10.1
I've published two repositories for SUSE Linux 10.1: * An updated packagemanagement stack * New kernel 2.6.16.21 We plan to release this soon (this week!) as official update and appreciate any testing, please report bugs you find on bugzilla.novell.com and CC me on the report (as <aj at novell dot com>). The packages and the changes itself have been tested intensively during the last weeks inside Novell. Since these are large updates, we like to have additional testing of these as a patch and on a variety of systems and environments. Package Management Stack Update =============================== In addition to the already released fixes for the package management stack, we have now fixed further bugs. The most important changes are: * Fixes for autorefresh (#186115, #181613, #181182) * Do not leave stall tmp files (#178292) * Empty catalogs before filling them (#181602) * Handle passwords in URLs (#186978, #186842, #186804) * Handle signing in zen-updater, zmd * Fix some bugs in interaction of libzypp and zmd The repository URL is: ftp://ftp.suse.com/pub/people/aj/10.1-packagemanagement-update-test (please use a mirror of ftp.suse.com if possible.) Kernel Update ============= Please apply the package management stack before applying the kernel update. This is an update to Kernel 2.16.21 together with a number of bug fixes that we developed during the last weeks. The kernel changes its ABI completely, so all the kernel-module-packages (kmp) that you have installed, need to be updated as well. The interface between kernel and AppArmor has been changed as well, and therefore you have to update AppArmor as well (or disable it). Xen is updated as - as well as udev, open-iscsi, multipath-tools and mkinitrd. The repository URL is: ftp://ftp.suse.com/pub/people/aj/10.1-kernel-update-test (please use a mirror of ftp.suse.com if possible.) Note on AppArmor ---------------- Since the update adds new flags to the profile syntax, you likely should review and adapt your profiles. - If a profile allowed unconfined execution ("ux") of a child binary it was possible to inject code via LD_PRELOAD or similar environment variables into this child binary and execute code without confiment. We have added new flag "Ux" (and "Px" for "px") which makes the executed child clear the most critical environment variables (similar to setuid programs). Special care needs to be taken nevertheless that this interaction between parent and child programs can not be exploited in other ways to gain the rights of the child process. - If a resource is marked as "r" in the profile it was possible to use mmap with PROT_EXEC flag set to load this resource as executable piece of code, making it effectively "ix". This could be used by a coordinated attack between two applications to potentially inject code into the reader. To allow mmap() executable access, supply the "m" flag to the applications profile. Please also review the updated documentation. Andreas -- Andreas Jaeger, aj@suse.de, http://www.suse.de/~aj/ SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
On Tuesday 11 July 2006 9:22 am, Andreas Jaeger wrote:
I've published two repositories for SUSE Linux 10.1: * An updated packagemanagement stack * New kernel 2.6.16.21
The zen update worked perfectly. However, the kernel update did not:: xen:~ # rug up aj-kernel Resolving Dependencies... ERROR: Dependency resolution failed: Unresolved dependencies: Establishing novfs-kmp-default-1.2.0_2.6.16.13_4-10.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] Installing novfs-kmp-default-1.2.0_2.6.16.13_4-10.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] Establishing atom:novfs-kmp-default-1.2.0_2.6.16.21_0.6-9.2.x86_64[aj-kernel] kernel-default-2.6.16.13-4.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] provides kernel(kernel) == f6bd6270900c24b7, but another version of that package is already installed. There are no installable providers of kernel(kernel) == f6bd6270900c24b7 for novfs-kmp-default-1.2.0_2.6.16.13_4-10.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] xen:~ # rpm -q kernel-default kernel-default-2.6.16.20-2 xen:~ # rpm -e novfs-kmp-default error: package novfs-kmp-default is not installed If novfs-kmp-default is not installed, why is it considered in the dependency resolution? -- James Oakley jfunk@funktronics.ca --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory-help@opensuse.org
James Oakley <jfunk@funktronics.ca> writes:
On Tuesday 11 July 2006 9:22 am, Andreas Jaeger wrote:
I've published two repositories for SUSE Linux 10.1: * An updated packagemanagement stack * New kernel 2.6.16.21
The zen update worked perfectly. However, the kernel update did not::
xen:~ # rug up aj-kernel Resolving Dependencies...
Do you have novfs-kmp-default installed? That package needs to be installed...
ERROR: Dependency resolution failed: Unresolved dependencies: Establishing novfs-kmp-default-1.2.0_2.6.16.13_4-10.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] Installing novfs-kmp-default-1.2.0_2.6.16.13_4-10.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] Establishing atom:novfs-kmp-default-1.2.0_2.6.16.21_0.6-9.2.x86_64[aj-kernel] kernel-default-2.6.16.13-4.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613] provides kernel(kernel) == f6bd6270900c24b7, but another version of that package is already installed. There are no installable providers of kernel(kernel) == f6bd6270900c24b7 for novfs-kmp-default-1.2.0_2.6.16.13_4-10.x86_64 [SUSE-Linux-10.1-DVD9-x86-x86_64-10.1-0-20060707-164613]
xen:~ # rpm -q kernel-default kernel-default-2.6.16.20-2 xen:~ # rpm -e novfs-kmp-default error: package novfs-kmp-default is not installed
If novfs-kmp-default is not installed, why is it considered in the dependency resolution?
That's a bug in the spec file which triggers a strange behaviour in libzypp. :-(((( Install novfs-kmp-default and be happy, Andreas -- Andreas Jaeger, aj@suse.de, http://www.suse.de/~aj/ SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
Andreas Jaeger <aj@suse.de> writes:
James Oakley <jfunk@funktronics.ca> writes:
On Tuesday 11 July 2006 9:22 am, Andreas Jaeger wrote: [...] That's a bug in the spec file which triggers a strange behaviour in libzypp. :-((((
Install novfs-kmp-default and be happy,
We fixed this issue now - somebody come up with the right idea how to do it ;-) I'm releasing a new packagemanagement update stack the next days with that fix and then it should work... Andreas -- Andreas Jaeger, aj@suse.de, http://www.suse.de/~aj/ SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
Andreas Jaeger <aj@suse.de> writes:
Andreas Jaeger <aj@suse.de> writes:
James Oakley <jfunk@funktronics.ca> writes:
On Tuesday 11 July 2006 9:22 am, Andreas Jaeger wrote: [...] That's a bug in the spec file which triggers a strange behaviour in libzypp. :-((((
Install novfs-kmp-default and be happy,
We fixed this issue now - somebody come up with the right idea how to do it ;-)
I've just updated my repositories: * package management: Fix the bug James had with e.g. installation of kdump kernel * kernel: Add some additional fixes, especially security fixes. The package management will go out today if our last tests passed, Andreas -- Andreas Jaeger, aj@suse.de, http://www.suse.de/~aj/ SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 11 July 2006 14:22, Andreas Jaeger wrote:
I've published two repositories for SUSE Linux 10.1: * An updated packagemanagement stack * New kernel 2.6.16.21
Some good news and some bad news regarding the package management: The update process worked, although during the process an error was detected (this happened with most of the updates during the last weeks - the installation process ran always to the end and everything was fine.) This time, the program complained that the ZMD service was not running (ok, that makes sense). Unfortunately, it opened 627 windows telling me so, which stopped nearly the whole system. But after some (long) time, the package management update was installed, the tray icon vanished and all 627 windows with the error message were closed. After reboot, the updates for KDE which were available at that time were detected and now installed without any error messages. Fine :-) Now the bad news: One of my installation sources is a local copy of the Packman archive, which also contains some updated packages. When right-clicking the tray icon and selecting 'update' ('Aktualisieren') I get an error message window: "Refresh failed. Failed to parse XML metadata: Unsigned file '/repodata/repomd.xml (dir:///akira/space/SuSE_Update/packman/10.1)'" So it seems that the handling of unsigned repositories still does not work or even worse it does not work anymore. Before the update, the repositories were not refreshed automatically, but at least after a manual refresh the packages were detected and installed. There is still some work for you ;-) Bye, Jürgen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFEs8EJtMrl3JEeRvwRAgEAAJ9FfibQ0yQmD0qQn9292TNj4yojIQCgyFzX DV8yEtIQAxFujCmQ8H0w+FE= =xpVZ -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory-help@opensuse.org
Jürgen Mell <juergen.mell@t-online.de> writes:
On Tuesday 11 July 2006 14:22, Andreas Jaeger wrote:
I've published two repositories for SUSE Linux 10.1: * An updated packagemanagement stack * New kernel 2.6.16.21
Some good news and some bad news regarding the package management:
The update process worked, although during the process an error was detected (this happened with most of the updates during the last weeks - the installation process ran always to the end and everything was fine.) This time, the program complained that the ZMD service was not running (ok, that makes sense). Unfortunately, it opened 627 windows telling me so, which stopped nearly the whole system. But after some (long) time, the package management update was installed, the tray icon vanished and all 627 windows with the error message were closed.
Could you open a bugreport for this, please?
After reboot, the updates for KDE which were available at that time were detected and now installed without any error messages. Fine :-)
Now the bad news: One of my installation sources is a local copy of the Packman archive, which also contains some updated packages. When right-clicking the tray icon and selecting 'update' ('Aktualisieren') I get an error message window:
"Refresh failed. Failed to parse XML metadata: Unsigned file '/repodata/repomd.xml (dir:///akira/space/SuSE_Update/packman/10.1)'"
So it seems that the handling of unsigned repositories still does not work or even worse it does not work anymore. Before the update, the repositories were not refreshed automatically, but at least after a manual refresh the packages were detected and installed.
Change in Preferences the setting "security-level" to "checksum".
There is still some work for you ;-)
I know :-(. I just want to be sure we do not introduce regressions while we continue fixing bugs... Andreas -- Andreas Jaeger, aj@suse.de, http://www.suse.de/~aj/ SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
On Tuesday 11 July 2006 17:17, Jürgen Mell wrote:
"Refresh failed. Failed to parse XML metadata: Unsigned file '/repodata/repomd.xml (dir:///akira/space/SuSE_Update/packman/10.1)'"
No, that is a -already mentioned in other bug report- bug in zmd or suse_register error messages: - it says xml metadata (even if the source type is not xml) - it says unsigned repo for informational purposes and confuse most usersso they thing the reason of the error is the repo being unsigned. Duncan --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory-help@opensuse.org
On Tue, 2006-07-11 at 14:22 +0200, Andreas Jaeger wrote:
I've published two repositories for SUSE Linux 10.1: * An updated packagemanagement stack * New kernel 2.6.16.21
We plan to release this soon (this week!) as official update and appreciate any testing, please report bugs you find on bugzilla.novell.com and CC me on the report (as <aj at novell dot com>).
The packages and the changes itself have been tested intensively during the last weeks inside Novell. Since these are large updates, we like to have additional testing of these as a patch and on a variety of systems and environments.
using kernel 2.6.16.21-0.6-smp I installed the updates as per instructions but the new kernel broke suspend2ram. After resuming, no files can be written because of I/O errors. There aren't any logs as nothing can be written to the drive. I had a similar problem on another motherboard with the original 10.1 kernel but the s2ram message board responses I received said it was a disk driver error, not a suspend2ram problem and never did find a resolution. I've reverted back to the earlier kernel for now and will have to wait for another update to see if it affects package management. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory-unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory-help@opensuse.org
participants (5)
-
Andreas Jaeger -
Duncan Mac-Vicar Prett -
James Oakley -
Jürgen Mell -
rmyster