Jelle de Jong
2023-Jan-09 16:16 UTC
[CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).
Hello everybody, What is the status of the freeipa/sssd and samba conflicts in the repositories? I can not wrap my mind around that two big packages are not getting security updates anymore, because they are conflicting. I will go to FOSDEM in Belgium this year to figure out more, but I am considering moving my centos systems to rockylinux. Kind regards, Jelle de Jong On 12/16/22 16:59, Jelle de Jong wrote:> Hello everybody, > > Could someone give me an estimate on when the repositories are resolving > the right dependencies for the freeipa pacakges in CentOS Stream release 8? > > I have about +10 systems sending me alerts everyday that > dnf-automatic.service is failing because of the freeipa dependency > issues. Since freeipa is one of the security elements I would like to > give people an estimate on when these issues are resolved? > > How can I keep track of the work that is been done as well? > > Is there a package tracker to be followed for this? URLs? > > I asked this question on the centos-devel list weeks ago, but have not > received any feedback. The issues is bothering me a lot as it is an > security issue that stays unresolved. > > Kind regards, > > Jelle de Jong > > On 11/30/22 13:06, Jelle de Jong wrote: >> Hello everybody, >> >> I attached the dnf conflict logs with conflicting pacakges. >> >> ??Problem 1: package >> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >> requires libndr.so.2()(64bit), but none of the providers can be installed >> ??Problem 2: package >> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires >> libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the providers >> can be installed >> ??Problem 3: problem with installed package >> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >> ??Problem 4: problem with installed package >> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >> >> Kind regards, >> >> Jelle >> >> >> On 11/29/22 12:43, Jelle de Jong wrote: >>> Hello everybody, >>> >>> 1. I got many systems with failing dnf-makecache.service because some >>> mirror/repo is tried once and fails. >>> >>> Is there an option to make dnf more reliable, to try the mirror url a >>> few times and check its availability? >>> >>> man yum.conf does not >>> >>> # cat /etc/yum.conf >>> [main] >>> gpgcheck=1 >>> installonly_limit=3 >>> clean_requirements_on_remove=True >>> best=True >>> skip_if_unavailable=False >>> >>> ExecStart=/usr/bin/dnf makecache --timer >>> >>> 2. I saw in the mailing list the messages about samba sssd dependency >>> issues. I got lots of servers failing my dnf-automatic because of >>> this when can I expect a resolution for this? >>> >>> Kind regards, >>> >>> Jelle > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos
Leon Fauster
2023-Jan-09 17:04 UTC
[CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).
Am 09.01.23 um 17:16 schrieb Jelle de Jong:> Hello everybody, > > What is the status of the freeipa/sssd and samba conflicts in the > repositories? > > I can not wrap my mind around that two big packages are not getting > security updates anymore, because they are conflicting. I will go to > FOSDEM in Belgium this year to figure out more, but I am considering > moving my centos systems to rockylinux. > > Kind regards, > > Jelle de JongCentOS Stream is an upstream project now. Distro composes will have a state that does not addresses the expectations of the old CentOS project. Further more if security is a concern, then a different OS should be chosen. Some general details about updates here: https://lists.centos.org/pipermail/centos-devel/2021-July/119645.html https://blog.centos.org/2022/09/how-updates-work-in-centos/ and more useful links in the list archives. -- Leon
Johnny Hughes
2023-Jan-09 18:06 UTC
[CentOS] dnf-makecache.service failing every few days and dnf-automatic.service samba freeipa issues (again).
On 1/9/23 10:16, Jelle de Jong wrote:> Hello everybody, > > What is the status of the freeipa/sssd and samba conflicts in the > repositories? > > I can not wrap my mind around that two big packages are not getting > security updates anymore, because they are conflicting. I will go to > FOSDEM in Belgium this year to figure out more, but I am considering > moving my centos systems to rockylinux. > > Kind regards, > > Jelle de Jong > > On 12/16/22 16:59, Jelle de Jong wrote: >> Hello everybody, >> >> Could someone give me an estimate on when the repositories are >> resolving the right dependencies for the freeipa pacakges in CentOS >> Stream release 8? >> >> I have about +10 systems sending me alerts everyday that >> dnf-automatic.service is failing because of the freeipa dependency >> issues. Since freeipa is one of the security elements I would like to >> give people an estimate on when these issues are resolved? >> >> How can I keep track of the work that is been done as well? >> >> Is there a package tracker to be followed for this? URLs? >> >> I asked this question on the centos-devel list weeks ago, but have not >> received any feedback. The issues is bothering me a lot as it is an >> security issue that stays unresolved. >> >> Kind regards, >> >> Jelle de Jong >> >> On 11/30/22 13:06, Jelle de Jong wrote: >>> Hello everybody, >>> >>> I attached the dnf conflict logs with conflicting pacakges. >>> >>> ??Problem 1: package >>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>> requires libndr.so.2()(64bit), but none of the providers can be >>> installed >>> ??Problem 2: package >>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 requires >>> libsamba-errors.so.1(SAMBA_ERRORS_1)(64bit), but none of the >>> providers can be installed >>> ??Problem 3: problem with installed package >>> ipa-server-trust-ad-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>> ??Problem 4: problem with installed package >>> ipa-server-4.9.10-6.module_el8.7.0+1209+42bcbcde.x86_64 >>> >>> Kind regards, >>> >>> Jelle >>> >>> >>> On 11/29/22 12:43, Jelle de Jong wrote: >>>> Hello everybody, >>>> >>>> 1. I got many systems with failing dnf-makecache.service because >>>> some mirror/repo is tried once and fails. >>>> >>>> Is there an option to make dnf more reliable, to try the mirror url >>>> a few times and check its availability? >>>> >>>> man yum.conf does not >>>> >>>> # cat /etc/yum.conf >>>> [main] >>>> gpgcheck=1 >>>> installonly_limit=3 >>>> clean_requirements_on_remove=True >>>> best=True >>>> skip_if_unavailable=False >>>> >>>> ExecStart=/usr/bin/dnf makecache --timer >>>> >>>> 2. I saw in the mailing list the messages about samba sssd >>>> dependency issues. I got lots of servers failing my dnf-automatic >>>> because of this when can I expect a resolution for this? >>>>There should not be freeipa/sssd dependency issues in the latest release.