CentOS virt - Nov 2015 - CentOS 6 Xen package update (including XSA-156)

So going forward, we're moving the CentOS 6 Xen packages from the
custom "xen4" repos that were introduced several years ago, to repos
based on its position as a sub-project of the Virt Sig.  That will
make things consistent between all the sigs, as well as between CentOS
6 and 7 Xen packages.

Unfortunately, XSA-156 came up rather suddenly and is a bit blocked by
this transition.

So please help us test the new repository structure, so that we can
with conscience push the updates to xen4 users in general.

To update to the new repository structure, install the
centos-release-xen package directly from the new repo:

 yum update
http://mirror.centos.org/centos/6/virt/x86_64/xen/centos-release-xen-7-11.el6.x86_64.rpm

This should replace the xen4 repositories with the new virt sig
repositories.  Now do a 'yum update':

yum update

This should pull in the Xen 4.4.3-6 package, which contains XSA-156
(and all other packages).

If everything works as planned, we'll push the new centos-release-xen
to centos-extras, and then everyone else will be moved to the new
repos the next time they do an update.

 -George

On 11/12/2015 04:00 PM, George Dunlap wrote:
> To update to the new repository structure, install the
> centos-release-xen package directly from the new repo:
>
>   yum
updatehttp://mirror.centos.org/centos/6/virt/x86_64/xen/centos-release-xen-7-11.el6.x86_64.rpm
>
> This should replace the xen4 repositories with the new virt sig
[root at xenh4bis ~]# yum update -y 
http://mirror.centos.org/centos/6/virt/x86_64/xen/centos-release-xen-7-11.el6.x86_64.rpm
Loaded plugins: fastestmirror, presto
Setting up Update Process
centos-release-xen-7-11.el6.x86_64.rpm | 6.0 kB     00:00
Examining 
/var/tmp/yum-root-DzSL_q/centos-release-xen-7-11.el6.x86_64.rpm: 
10:centos-release-xen-7-11.el6.x86_64
Marking /var/tmp/yum-root-DzSL_q/centos-release-xen-7-11.el6.x86_64.rpm 
as an update to 10:centos-release-xen-6-4.el6.centos.x86_64
Loading mirror speeds from cached hostfile
  * epel: fedora.mirrors.telekom.ro
base |  951 B     00:00
updates |  951 B     00:00
Resolving Dependencies
--> Running transaction check
---> Package centos-release-xen.x86_64 10:6-4.el6.centos will be updated
---> Package centos-release-xen.x86_64 10:7-11.el6 will be an update
--> Processing Dependency: 
/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization for package: 
10:centos-release-xen-7-11.el6.x86_64
--> Processing Dependency: 
/etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization for package: 
10:centos-release-xen-7-11.el6.x86_64
--> Finished Dependency Resolution
Error: Package: 10:centos-release-xen-7-11.el6.x86_64 
(/centos-release-xen-7-11.el6.x86_64)
            Requires: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization
  You could try using --skip-broken to work around the problem
  You could try running: rpm -Va --nofiles --nodigest

On Thu, Nov 12, 2015 at 2:03 PM, Manuel Wolfshant
<wolfy at nobugconsulting.ro> wrote:
> On 11/12/2015 04:00 PM, George Dunlap wrote:
>>
>> To update to the new repository structure, install the
>> centos-release-xen package directly from the new repo:
>>
>>   yum
>>
updatehttp://mirror.centos.org/centos/6/virt/x86_64/xen/centos-release-xen-7-11.el6.x86_64.rpm
>>
>> This should replace the xen4 repositories with the new virt sig
>
>
> [root at xenh4bis ~]# yum update -y
>
http://mirror.centos.org/centos/6/virt/x86_64/xen/centos-release-xen-7-11.el6.x86_64.rpm
> Loaded plugins: fastestmirror, presto
> Setting up Update Process
> centos-release-xen-7-11.el6.x86_64.rpm | 6.0 kB     00:00
> Examining /var/tmp/yum-root-DzSL_q/centos-release-xen-7-11.el6.x86_64.rpm:
> 10:centos-release-xen-7-11.el6.x86_64
> Marking /var/tmp/yum-root-DzSL_q/centos-release-xen-7-11.el6.x86_64.rpm as
> an update to 10:centos-release-xen-6-4.el6.centos.x86_64
> Loading mirror speeds from cached hostfile
>  * epel: fedora.mirrors.telekom.ro
> base |  951 B     00:00
> updates |  951 B     00:00
> Resolving Dependencies
> --> Running transaction check
> ---> Package centos-release-xen.x86_64 10:6-4.el6.centos will be updated
> ---> Package centos-release-xen.x86_64 10:7-11.el6 will be an update
> --> Processing Dependency:
> /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization for package:
> 10:centos-release-xen-7-11.el6.x86_64
> --> Processing Dependency:
> /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization for package:
> 10:centos-release-xen-7-11.el6.x86_64
> --> Finished Dependency Resolution
> Error: Package: 10:centos-release-xen-7-11.el6.x86_64
> (/centos-release-xen-7-11.el6.x86_64)
>            Requires: /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Virtualization
>  You could try using --skip-broken to work around the problem
>  You could try running: rpm -Va --nofiles --nodigest
Do you have the centos-extras repo enabled?  The key in question is in
the centos-release-virt-common package, which is in the centos-extras
repo.

 -George

On Thu, Nov 12, 2015 at 02:00:27PM +0000, George Dunlap
wrote:
> So going forward, we're moving the CentOS 6 Xen packages from the
> custom "xen4" repos that were introduced several years ago, to
repos
> based on its position as a sub-project of the Virt Sig.  That will
> make things consistent between all the sigs, as well as between CentOS
> 6 and 7 Xen packages.
> 
> Unfortunately, XSA-156 came up rather suddenly and is a bit blocked by
> this transition.
> 
> So please help us test the new repository structure, so that we can
> with conscience push the updates to xen4 users in general.
> 
Seems to work for me!


-- Pasi
> To update to the new repository structure, install the
> centos-release-xen package directly from the new repo:
> 
>  yum update
http://mirror.centos.org/centos/6/virt/x86_64/xen/centos-release-xen-7-11.el6.x86_64.rpm
> 
> This should replace the xen4 repositories with the new virt sig
> repositories.  Now do a 'yum update':
> 
> yum update
> 
> This should pull in the Xen 4.4.3-6 package, which contains XSA-156
> (and all other packages).
> 
> If everything works as planned, we'll push the new centos-release-xen
> to centos-extras, and then everyone else will be moved to the new
> repos the next time they do an update.
> 
>  -George

On 15 noiembrie 2015 14:04:58 EET, "Pasi K?rkk?inen" <pasik at
iki.fi> wrote:
>> 
>> So please help us test the new repository structure, so that we can
>> with conscience push the updates to xen4 users in general.
>> 
>
>Seems to work for me!
>
>
For me too.

  wolfy

On Sun, Nov 15, 2015 at 02:04:58PM +0200, Pasi K?rkk?inen
wrote:
> On Thu, Nov 12, 2015 at 02:00:27PM +0000, George Dunlap wrote:
> > So going forward, we're moving the CentOS 6 Xen packages from the
> > custom "xen4" repos that were introduced several years ago,
to repos
> > based on its position as a sub-project of the Virt Sig.  That will
> > make things consistent between all the sigs, as well as between CentOS
> > 6 and 7 Xen packages.
> > 
> > Unfortunately, XSA-156 came up rather suddenly and is a bit blocked by
> > this transition.
> > 
> > So please help us test the new repository structure, so that we can
> > with conscience push the updates to xen4 users in general.
> > 
> 
> Seems to work for me!
> 
> 
Except now on another system I see this problem:


# yum install virt-manager
..
..
..

--> Finished Dependency Resolution
Error: Package: libvirt-python-0.10.2-54.el6_7.2.x86_64 (updates)
           Requires: libvirt.so.0(LIBVIRT_PRIVATE_0.10.2)(64bit)
           Available: libvirt-client-0.10.2-54.el6.x86_64 (base)
               libvirt.so.0(LIBVIRT_PRIVATE_0.10.2)(64bit)
           Available: libvirt-client-0.10.2-54.el6_7.2.x86_64 (updates)
               libvirt.so.0(LIBVIRT_PRIVATE_0.10.2)(64bit)
           Installed: libvirt-client-1.2.15-3.el6.x86_64 (@centos-virt-xen)
               Not found
 You could try using --skip-broken to work around the problem
 You could try running: rpm -Va --nofiles --nodigest


Are we missing a build of libvirt-python 1.2.15 package? 


-- Pasi