[stork-users] Stork for RedHat/Rocky 9?
Slawek Figiel
slawek at isc.org
Tue Oct 3 09:08:02 UTC 2023
Hello Scott!
Thank you for your report. We have never tested our packages in FIPS
mode. I suppose our packaging tool may not support it. I've opened
https://gitlab.isc.org/isc-projects/stork/-/issues/1171 to check it and
fix the problem.
Regards,
Slawek
On 02/10/2023 22:06, Scott Rakow wrote:
> So it appears that some RPM's do have issues with FIPS when unpacking
> the RPM, with the Stork RPM being one of them.
>
> It looks like there are two things you can do.
>
> 1. Skip the evaluation of the digest
>
> rpm -ivh isc-stork-server-1.12.0.230802125029-1.x86_64.rpm
> --nofiledigest --noidgest
>
> 2. Disable, run the dnf, then re-enable FIPS
>
> # fips-mode-setup --check
> # fips-mode-setup --disable
> # fips-mode-setup --check
> # shutdown -r now
>
> # dnf install isc-stork-server-1.12.0.230802125029-1.x86_64.rpm
> # flips-mode-setup --enable
> # fips-mode-setup --check
> # shutdown -r now
>
> You may have to reset your update-crypto-policies setting to fix and
> other issues after reboot.
>
> Scott
>
>
> On Mon, Oct 2, 2023 at 9:10 AM Slawek Figiel <slawek at isc.org
> <mailto:slawek at isc.org>> wrote:
>
> Hello Scott!
>
> I've checked the packages on the Red Hat 9 (Red Hat Enterprise Linux
> release 9.1 (Plow)).
>
> I was able to install the packages from the local file as well as from
> the CloudSmith repository.
>
> Please check if your RHEL or `dnf` installation is not corrupted or
> out-of-date.
>
> My logs:
>
> >>> dnf install -y isc-stork-server-1.12.0.230802125029-1.x86_64.rpm
> Updating Subscription Management repositories.
>
> Last metadata expiration check: 0:00:39 ago on Mon 02 Oct 2023 08:57:19
> AM UTC.
> Dependencies resolved.
> ===============================================================================================================
> Package Architecture Version
> Repository Size
> ===============================================================================================================
> Installing:
> isc-stork-server x86_64 1.12.0.230802125029-1
> @commandline 28 M
>
> Transaction Summary
> ===============================================================================================================
> Install 1 Package
>
> Total size: 28 M
> Installed size: 62 M
> Downloading Packages:
> Running transaction check
> Transaction check succeeded.
> Running transaction test
> Transaction test succeeded.
> Running transaction
> Preparing :
> 1/1
> Installing : isc-stork-server-1.12.0.230802125029-1.x86_64
> 1/1
> Running scriptlet: isc-stork-server-1.12.0.230802125029-1.x86_64
> 1/1
> Verifying : isc-stork-server-1.12.0.230802125029-1.x86_64
> 1/1
> Installed products updated.
>
> Installed:
> isc-stork-server-1.12.0.230802125029-1.x86_64
>
>
> Best regards
> Slawek
>
> On 29/09/2023 20:49, Scott Rakow wrote:
> > I am running a “dnf install
> > isc-stork-server-1.12.0.230802125029-1.x86_64.rpm” from a local
> > directory. My system is also FIPS enabled.
> >
> > The error messages from the install are as follows…
> >
> > Error unpacking rpm package
> isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> > Error occurred during transaction.
> >
> > Verifying:isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> > Completion plugin: generating completion cache…
> >
> > Failed: isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> > Failed:
> >
> > isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> > Error: Transaction failed
> >
> > ###
> >
> > The dnf.log is showing…
> >
> > DDEBUG RPM transaction start.
> >
> > DDEBUG RPM transaction over.
> >
> > DEBUG Errors occurred during transaction.
> >
> > DDEBUG timer: verify transaction: 70 ms
> >
> > DDEBUG timer: transaction: 172 ms
> >
> > DEBUG Comletion plugin: Generating completion cache…
> >
> > DEBUG Failed: isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> > DDEBUG Cleaning up.
> >
> > DDEBUG Cleaning up.
> >
> > DDEBUG Plugins were unloaded.
> >
> > SUBDEBUG
> >
> > Traceback (most recent call last):
> >
> > File “/user/lib/python3.9/site-packages/dnf/cli/main.py”, line
> 67, in main
> >
> > return _main(base, args, cli_class, option_parser_class)
> >
> > File “/usr/lib/python3.9/site-package/dnf/cli/main.py”, line 106,
> in _main
> >
> > return cli_run(clci, base)
> >
> > File “/usr/lib/python3.9/site-package/dnf/cli/main.py”, line 130,
> in cli_run
> >
> > ret = resolving(cli, base)
> >
> > File “/usr/lib/python3.9/site-package/dnf/cli/main.py”, line 176, in
> > resolving
> >
> > base.do_transaction(display=disiplays)
> >
> > File “/usr/lib/python3.9/site-package/dnf/cli/main.py”, line 264, in
> > do_transaction
> >
> > raise dnf.exceptions.Error(_(‘Transaction failed’))
> >
> > dnf.exceptions.Error: Transaction failed
> >
> > CRITICAL Error: Transaction failed
> >
> > ###
> >
> > The dnf.librepo.log is showing…
> >
> > INFO --- logging initialized ---
> >
> > SUBDEBUG Installed: isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> > ERROR ERROR unpacking rpm package
> > isc-stork-server-1.12.0.230802125029-1.x86_64
> >
> >
> > Scott
> >
> >
> > On Fri, Sep 29, 2023 at 6:07 AM Slawek Figiel <slawek at isc.org
> <mailto:slawek at isc.org>
> > <mailto:slawek at isc.org <mailto:slawek at isc.org>>> wrote:
> >
> > Hello Scott!
> >
> > I've tested now the RPM packages on RedHat Universal Base
> Image 9, and
> > it seems they work.
> > Did you observe any troubles with installing our packages on
> RHEL 9? If
> > yes, could you attach the logs?
> >
> > Best regards,
> > Slawek
> >
> > On 29/09/2023 02:36, Scott Rakow wrote:
> > > In wanting to install and test the latest version of
> Stork, the
> > RPM's
> > > look to only be for RedHat/Rocky 8. Will the next version
> include a
> > > build that will work on 9?
> > >
> > > Scott Rakow
> > >
> > --
> > Stork-users mailing list
> > Stork-users at lists.isc.org <mailto:Stork-users at lists.isc.org>
> <mailto:Stork-users at lists.isc.org <mailto:Stork-users at lists.isc.org>>
> > https://lists.isc.org/mailman/listinfo/stork-users
> <https://lists.isc.org/mailman/listinfo/stork-users>
> > <https://lists.isc.org/mailman/listinfo/stork-users
> <https://lists.isc.org/mailman/listinfo/stork-users>>
> >
>
More information about the Stork-users
mailing list