obsolete

crypto-policies-20240715-1.gitf8b6a29.fc41

FEDORA-2024-4a23d4ee83 created by asosedkin 4 months ago for Fedora 41

Automatic update for crypto-policies-20240715-1.gitf8b6a29.fc41.

Changelog
* Mon Jul 15 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20240715-1.gitf8b6a29
- BSI: Update BSI policy for new 2024 minimum recommendations
- java: use and include jdk.disabled.namedCurves
- ec_min_size: introduce and use in java, default to 256
- java: stop specifying jdk.tls.namedGroups in javasystem
- java: drop unused javasystem backend

This update was automatically created

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'failed'.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'failed'.

4 months ago
User Icon adamwill commented & provided feedback 4 months ago
karma

This failed because in several tests, the new %pre script failed, e.g. https://openqa.fedoraproject.org/tests/2732229 . I believe this is because the script calls rm, but it does not make sure rm is there when it runs; rm is part of coreutils, and crypto-policies can be ordered for installation before coreutils. The script also does not ensure it always exits 0, which it should, per the package guidelines: "All scriptlets MUST exit with the zero exit status." - https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_syntax .

It looks like it's fine for the script to 'fail' if this is a fresh install - the thing it's trying to remove wouldn't exist there anyway - so you should be able to fix this just by making the script exit 0 even if the command doesn't work:

%pre
# Drop removed javasystem backend; can be dropped 3 releases later
rm -f "%{_sysconfdir}/crypto-policies/back-ends/javasystem.config" || :

as recommended in the guidelines.

Wow, thanks for the detailed analysis and the recommendation! Definitely an oversight from my side (thought -f was enough), will follow-up with a fix...


Please login to add feedback.

Metadata
Type
unspecified
Karma
-1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
0 days
Dates
submitted
4 months ago
in testing
4 months ago

Automated Test Results