Comments
martinpitt
Crashes confirmed with cockpit tests, they now segfault ipa-getkeytab and iscsid at least.
The journal for ipa-getkeytab crash shows the crash in krb5int_key_delete(), and the test output confirms the assertion:
ipa-getkeytab: ../../include/k5-thread.h:376: k5_mutex_lock: Assertion `r == 0' failed.
The journal for the iscsi crash doesn't even get that far, it crashes right at the beginning:
systemd-coredump[34279]: Process 34270 (iscsid) of user 0 dumped core.
Module libpcre2-8.so.0 from rpm pcre2-10.42-1.fc38.1.x86_64
Module liblz4.so.1 from rpm lz4-1.9.4-2.fc38.x86_64
Module libcap.so.2 from rpm libcap-2.48-6.fc38.x86_64
Module liblzma.so.5 from rpm xz-5.4.1-1.fc38.x86_64
Module libzstd.so.1 from rpm zstd-1.5.5-1.fc38.x86_64
Module libselinux.so.1 from rpm libselinux-3.5-1.fc38.x86_64
Module libblkid.so.1 from rpm util-linux-2.38.1-4.fc38.x86_64
Module libz.so.1 from rpm zlib-1.2.13-3.fc38.x86_64
Module libopeniscsiusr.so.0.2.0 from rpm iscsi-initiator-utils-6.2.1.4-10.git2a8f9d8.fc38.x86_64
Module libsystemd.so.0 from rpm systemd-253.10-1.fc38.x86_64
Module libkmod.so.2 from rpm kmod-30-4.fc38.x86_64
Module libmount.so.1 from rpm util-linux-2.38.1-4.fc38.x86_64
Module libcrypto.so.3 from rpm openssl-3.0.9-2.fc38.x86_64
Module libisns.so.0 from rpm isns-utils-0.101-6.fc38.x86_64
Module iscsid from rpm iscsi-initiator-utils-6.2.1.4-10.git2a8f9d8.fc38.x86_64
Stack trace of thread 34270:
#0 0x00007fc7ef527324 __poll (libc.so.6 + 0x105324)
#1 0x0000558cec9fcbc5 main (iscsid + 0x8bc5)
#2 0x00007fc7ef449b8a __libc_start_call_main (libc.so.6 + 0x27b8a)
#3 0x00007fc7ef449c4b __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x27c4b)
#4 0x0000558cec9fd805 _start (iscsid + 0x9805)
ELF object binary architecture: AMD x86-64
systemd[1]: iscsid.service: Main process exited, code=dumped, status=6/ABRT
Works!
works fine.
Works fine.
I verified that this update fixes FIPS mode. Thanks!
Introduces a regression: https://github.com/redhat-performance/tuned/issues/551
Introduces a regression: https://github.com/redhat-performance/tuned/issues/551
I pinged Adam about the OpenQA failures. They could be related to mirror lag and the selinux-policy update as well, but I have some trouble interpreting at least one of the failures. https://openqa.fedoraproject.org/tests/2036536#step/role_deploy_domain_controller/11 is clearly just temporary and needs a retry.
Note: Rawide is still waiting for FEDORA-2023-2ae7eaf74a , i.e. selinux-policy 38.22-1. dnf still sees 38.21, that's what makes the test fail. Checking again tomorrow.
Cockpit's tests found at least one regression: https://bugzilla.redhat.com/show_bug.cgi?id=2223568
I also found https://bugzilla.redhat.com/show_bug.cgi?id=2223571 which may be due to the new systemd version (which landed at the same time), or also a regression.
Again, please don't rush SELinux updates through -proposed, that's not enough time to catch regressions with tests.
This update triggers two SELinux AVCs, see https://bugzilla.redhat.com/show_bug.cgi?id=2223571 . Our Cockpit tests also don't actually exercise networkd much, so other than the rejection messages nothing fails. But it may for users who actually use networkd to configure the network.
Tested in a clean environment, udpates and works fine.
Tested in a clean environment, upgrades and works fine.
ansible-inventory works with the dynamic openstack plugin when downgrading to python3-openstacksdk-0.61.0-5.fc37.noarch. I upgraded to the Fedora 38 version again (python3-openstacksdk-0.101.0-2.fc38.noarch), and it fails with the error
Incompatible openstacksdk library found: Version MUST be >=0.36 and <=0.98.999, but 0.101.0 is larger than maximum
version 0.98.999.
as reported in bugzilla.
Then I installed ansible-collections-openstack-2.1.0-1.fc38 from this build (I didn't previously have that installed), and now the dynamic inventory works again. Thanks!
Updated, tested all pages, works as expected.
Tested upgrade and all pages, work fine.
Breaks SELinux page, see https://github.com/cockpit-project/cockpit/pull/18551 . Will do a 288.1 after that lands.
Breaks SELinux page, see https://github.com/cockpit-project/cockpit/pull/18551 . Will do a 288.1 after that lands.
Works for me.