[Pki-devel] New update: PKI 10.6.7 and its deps

[Dinesh Prasanth Moluguwan Krishnamoorthy]

Ok, I have an update which I think is the reason for the failure.

We placed 2 bodhi updates as follows:

(1) tomcatjss 7.3.6-1
(2) nuxwdog 1.0.5-2, dogtag-pki 10.6.7-1, pki-core 10.6.7-1

(However, for F29, all were combined into a single bodhi update. That's
why there were no issues reported against F29)

The problem is that we changed the deps for pki-core 10.6.7-1 to
require tomcatjss 7.3.6. Since they were placed as 2 separated updates,
bodhi is intentionally configured to avoid packages from a different
bodhi update entry.

Solution:
(1) Tomcatjss goes to stable in a day (10/12). We wait a day and ask
the openqa folks to retrigger the test (Recommended)
(2) We do a -2 release for tomcatjss and combine it with the existing
pki-core bodhi update -- tomcatjss 7.3.6-1 will be obsolete
automatically

The problem I see with (2) approach is that this will not only break
the sync that exists between packages in RHEL/Fedora but also between
Fedora release itself.


Regards,
Dinesh


On Thu, 2018-10-11 at 10:39 -0400, Dinesh Prasanth Moluguwan
Krishnamoorthy wrote:
> Hi Fraser,
> 
> What baffles me the most is that, we have a nightly test that tries
> to
> pull the latest "stable" IPA and runs all cert related tests. Our
> nightly CI should have been the one which should have caught this
> error
> before, but it didn't. :\
> 
> This nightly ran on Oct 11 -- 
> https://travis-ci.org/dogtagpki/pki-nightly-test/jobs/439957658#L2674
> 
> As you can see, FreeIPA 4.7.0-3.fc28.x86_64 was installed and all the
> tests passed. openqa uses the same version of IPA and Dogtag. May be
> we
> can ask to try retriggering the openqa test. Any thoughts?
> 
> Regards,
> Dinesh
> 
> On Thu, 2018-10-11 at 22:58 +1000, Fraser Tweedale wrote:
> > Dear Dinesh,
> > 
> > The 10.6.7-1 update[1] was given negative karma due to FreeIPA
> > installation failure[2] on openqa.  I have spent considerable time
> > trying to reproduce the failure using the same package from
> > updates-testing, without success.
> > 
> > [1] https://bodhi.fedoraproject.org/updates/FEDORA-2018-83e180a755
> > [2] https://openqa.fedoraproject.org/tests/291997
> > 
> > The error in the openqa logs seems to be something to do with the
> > resteasy jackson provider and inability to construct the
> > ConfigurationRequest class.  Says it can't see the zero-arg
> > constructor... (it's definitely there!)
> > 
> > I'm on PTO tomorrow but keep me in the loop if you make any
> > progress.
> > 
> > Cheers,
> > Fraser
> > 
> > On Fri, Oct 05, 2018 at 12:07:22PM -0400, Dinesh Prasanth Moluguwan
> > Krishnamoorthy wrote:
> > > Hi everyone,
> > > Today, we have released a new update of pki-core and its
> > > dependencies.
> > > PKI 10.6.7 is now available upstream:
> > > https://github.com/dogtagpki/pki/releases/tag/v10.6.7Tomcatjss
> > > 7.3.6 is
> > > now available upstream:
> > > https://github.com/dogtagpki/tomcatjss/releases/tag/v7.3.6
> > > Fedora 28 builds are available via the following update:pki-core,
> > > nuxwdog, dogtag-pki: 
> > > 
> 
> 
https://bodhi.fedoraproject.org/updates/pki-core-10.6.7-1.fc28%20nuxwdog-1.0.5-2.fc28%20dogtag-pki-10.6.7-1.fc28tomcatjss
> > > :
> > >  https://bodhi.fedoraproject.org/updates/FEDORA-2018-5558d54d37
> > > Fedora 29 builds are available via the following update:pki-core,
> > > nuxwdog, dogtag-pki, tomcatjss:
> > > https://bodhi.fedoraproject.org/updates/FEDORA-2018-fd68715f9c
> > > Rawhide builds are available in Koji.
> > > Fedora 27 builds are available in this COPR repository:
> > > https://copr.fedorainfracloud.org/coprs/g/pki/10.6/
> > > Regards,Dinesh
> > > _______________________________________________
> > > Pki-devel mailing list
> > > Pki-devel at redhat.com
> > > https://www.redhat.com/mailman/listinfo/pki-devel
> > 
> >