[Pulp-list] pulp_rpm 3.7.0 is Generally Available

Heide, Todd Todd.Heide at sccompanies.com
Fri Oct 9 14:53:22 UTC 2020 

OK, spent some time on this and realized it isn’t going to git to get the packages, but getting them from local. I recloaned what I had, and added pulpcore-selinux.  Now the install fails at selinux.

Here is what I ran
ansible-galaxy collection install pulp.pulp_installer
Process install dependency map
Starting collection install process
Skipping 'pulp.pulp_installer' as it is already installed

Var.yml
pulp_default_admin_password:
#pulp_source_dir: '/var/lib/pulp/devel/pulpcore'
pulp_install_plugins:
  # pulp-ansible:
  #   source_dir: "/home/centos/pulp_ansible/"
  # galaxy-ng:
  #   source_dir: "/var/lib/pulp/devel/galaxy_ng"
  # pulp-certguard:
  #   source_dir: "/var/lib/pulp/devel/pulp-certguard"
  # pulp-cookbook:
  #   source_dir: "/var/lib/pulp/devel/pulp_cookbook"
  # pulp-deb:
  #   source_dir: "/var/lib/pulp/devel/pulp_deb"
  # pulp-container:
  #   source_dir: "/var/lib/pulp/devel/pulp_container"
  # pulp-gem:
  #   source_dir: "/var/lib/pulp/devel/pulp_gem"
  # pulp-maven:
  #   source_dir: "/var/lib/pulp/devel/pulp_maven"
  # pulp-npm:
  #   source_dir: "/var/lib/pulp/devel/pulp_npm"
  # pulp-python:
  #   source_dir: "/var/lib/pulp/devel/pulp_python"
   pulp-rpm:
      version:"3.7.0"
  #   source_dir: "/home/centos/pulp_rpm_prerequisites"
  #   prereq_role: "pulp.pulp_rpm_prerequisites" # RPM needs a prereq_role: https://github.com/pulp/pulp_rpm_prerequisites
  # pulp-file:
  #   source_dir: "pulp_file"
  #   version: "0.3.0"
developer_user_home: /var/lib/pulp
developer_user: pulp
pulp_settings:
  secret_key:
  content_origin: "http:// pulp3test"

ansible-playbook playbooks/example-use/playbook.yml -u root --ask-become-pass -e @vars.yml
BECOME password:

TASK [pulp_common : Check if SELinux is enabled] ********************************************************************
ok: [pulp3test]

TASK [pulp_common : Install SELinux policy build dependencies] ******************************************************
ok: [pulp3test]

TASK [pulp_common : Ensure that /usr/local/share/selinux/targeted exists] *******************************************
changed: [pulp3test]

TASK [pulp_common : Clone SELinux policy from Git] ******************************************************************
ok: [pulp3test]

TASK [pulp_common : Compile the SELinux policies] *******************************************************************
ok: [pulp3test] => (item=pulpcore_port)
ok: [pulp3test] => (item=pulpcore)
ok: [pulp3test] => (item=pulpcore_rhsmcertd)

TASK [pulp_common : Install the SELinux policy packages on disk] ****************************************************
changed: [pulp3test] => (item=pulpcore_port)
changed: [pulp3test] => (item=pulpcore)
changed: [pulp3test] => (item=pulpcore_rhsmcertd)

-pulp3test ~]# getenforce
Permissive

cat /etc/selinux/config

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE= can take one of three values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

It is running on Centos 7 in AWS
cat /etc/centos-release
CentOS Linux release 7.8.2003 (Core)

Here is where it fails now,

RUNNING HANDLER [pulp_common : Load the SELinux policy packages] ****************************************************
failed: [pulp3test] (item=pulpcore_port) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore_port.pp", "item": "pulpcore_port", "msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore.pp", "item": "pulpcore", "msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore_rhsmcertd) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore_rhsmcertd.pp", "item": "pulpcore_rhsmcertd", "msg": "[Errno 2] No such file or directory", "rc": 2}


Probably missing something, but can’t figure out what.

Thanks for looking.


From: Mike DePaulo <mikedep333 at redhat.com>
Sent: Wednesday, October 7, 2020 3:10 PM
To: Heide, Todd <Todd.Heide at sccompanies.com>
Cc: Tatiana Tereshchenko <ttereshc at redhat.com>; pulp-list <pulp-list at redhat.com>
Subject: Re: [Pulp-list] pulp_rpm 3.7.0 is Generally Available

[EXTERNAL] This message originated outside of the organization. Use caution when opening files or following links in this email!
Hi Todd,

1. You appear to be running the latest master branch of pulp_installer. You should (but are not yet required to) follow our new process to install pulp_installer as an ansible galaxy collection. You would get the latest stable release 3.7.1, which does not contain that particular failing task.
https://pulp-installer.readthedocs.io/en/latest/quickstart/#installation

2. That particular task should not be failing.
To help us debug this issue on our master branch, can you show the output from several tasks?
The 1st task: "Install SELinux policy build dependencies"
The final task: "Install the SELinux policy packages on disk"
Also run these commands for our info:
$ getenforce
$ cat /etc/selinux/config
And what Linux distro & version of it are you running?
And are you running in any sort of container? If so, what is the host like?

Also, FYI: This issue is in pulp_installer itself, not pulp-rpm or its pulp-rpm specific codepaths.

-Mike

On Wed, Oct 7, 2020 at 12:59 PM Heide, Todd <Todd.Heide at sccompanies.com<mailto:Todd.Heide at sccompanies.com>> wrote:
OK, I must have done something wrong, not sure what.

RUNNING HANDLER [pulp_common : Load the SELinux policy packages] ***************
failed: [pulp3test] (item=pulpcore_port) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i usr/local/share/selinux/targeted/pulpcore_port.pp", "item": "pulpcore_port", "msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore.pp","item": "pulpcore", "msg": "[Errno 2] No such file or directory", "rc": 2}
failed: [pulp3test] (item=pulpcore_rhsmcertd) => {"ansible_loop_var": "item", "changed": false, "cmd": "semodule -i /usr/local/share/selinux/targeted/pulpcore_rhsmcertd.pp", "item": "pulpcore_rhsmcertd", "msg": "[Errno 2] No such file or directory", "rc": 2}

pulp3test           : ok=67   changed=11   unreachable=0    failed=1    s kipped=42   rescued=0    ignored=0

-----Original Message-----
From: Mike DePaulo <mikedep333 at redhat.com<mailto:mikedep333 at redhat.com>>
Sent: Tuesday, October 6, 2020 2:23 PM
To: Heide, Todd <Todd.Heide at sccompanies.com<mailto:Todd.Heide at sccompanies.com>>
Cc: Tatiana Tereshchenko <ttereshc at redhat.com<mailto:ttereshc at redhat.com>>; pulp-list <pulp-list at redhat.com<mailto:pulp-list at redhat.com>>
Subject: Re: [Pulp-list] pulp_rpm 3.7.0 is Generally Available

[EXTERNAL] This message originated outside of the organization. Use caution when opening files or following links in this email!

Hi Heide,

The only special upgrade instructions since 3.0 are to not set this variable anymore:
pulp_use_system_wide_pkgs

Other than that, run the latest pulp_installer with the same set of variables as you originally ran it, but make the variable pulp_install_plugins set as follows. (Assuming pulp-rpm is the only plugin you have installed.):

pulp_install_plugins:
  pulp-rpm:
    version: "3.7.0"

-Mike


On Tue, Oct 6, 2020 at 12:25 PM Heide, Todd <Todd.Heide at sccompanies.com<mailto:Todd.Heide at sccompanies.com>> wrote:
>
> Hi all, is there a doc on upgrading a 3.0.2 version to this one with Ansible?
>
>
>
> From: pulp-list-bounces at redhat.com<mailto:pulp-list-bounces at redhat.com> <pulp-list-bounces at redhat.com<mailto:pulp-list-bounces at redhat.com>> On
> Behalf Of Tatiana Tereshchenko
> Sent: Thursday, September 24, 2020 12:45 PM
> To: pulp-list <pulp-list at redhat.com<mailto:pulp-list at redhat.com>>
> Subject: [Pulp-list] pulp_rpm 3.7.0 is Generally Available
>
>
>
> [EXTERNAL] This message originated outside of the organization. Use caution when opening files or following links in this email!
>
> pulp_rpm 3.7.0 has been released. It is compatible with pulpcore 3.7 and future pulpcore 3.8.
>
> PyPI: https://pypi.org/project/pulp-rpm/3.7.0/
> Changelog: https://pulp-rpm.readthedocs.io/en/3.7/changes.html#id1
> Docs: https://pulp-rpm.readthedocs.io/ Python bindings:
> https://pypi.org/project/pulp-rpm-client/3.7.0/
> Ruby bindings:
> https://rubygems.org/gems/pulp_rpm_client/versions/3.7.0/
>
> _______________________________________________
> Pulp-list mailing list
> Pulp-list at redhat.com<mailto:Pulp-list at redhat.com>
> https://www.redhat.com/mailman/listinfo/pulp-list



--

Mike DePaulo

He / Him / His

Service Reliability Engineer, Pulp

Red Hat

IM: mikedep333

GPG: 51745404


--

Mike DePaulo

He / Him / His

Service Reliability Engineer, Pulp

Red Hat<https://www.redhat.com/>

IM: mikedep333

GPG: 51745404
[https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png]<https://www.redhat.com/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-list/attachments/20201009/54ee6c70/attachment.htm>

More information about the Pulp-list mailing list