FEDORA-2024-9b9da603e1 — enhancement update for ant, ant-antunit, & 360 more

stable

ant-1.10.14-10.fc41, ant-antunit-1.4.1-11.fc41, & 360 more

FEDORA-2024-9b9da603e1 created by pmikova 10 months ago for Fedora 41

This is an update for system JDK shift from JDK 17 to JDK 21.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-9b9da603e1

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

adamwill commented 10 months ago

Congratulations on building an update so big, openQA can't download all the packages in it to a 10GB scratch disk. :D

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

pmikova commented 10 months ago

LOL, I am sorry, I guess Javastack is too big now O:)

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

yselkowitz commented 10 months ago

adamwill commented & provided feedback 10 months ago

karma

so I am working on getting all the test mess cleaned up, but while I do that, I think there is actually a genuine bug here. I think it breaks FreeIPA server deployment, with this error:

INFO: Creating new temp SSL server cert for ipa002.test.openqa.fedoraproject.org
DEBUG: Command: pki -d /etc/pki/pki-tomcat/alias -f /etc/pki/pki-tomcat/password.conf nss-cert-request --subject cn=ipa002.test.openqa.fedoraproject.org,o=2024-02-28 18:40:13 --csr /tmp/tmpy
f1x00o1/sslserver.csr --key-type RSA --key-size 2048 --hash SHA256 --debug
java.lang.UnsupportedClassVersionError: com/fasterxml/jackson/databind/AnnotationIntrospector has been compiled by a more recent version of the Java Runtime (class file version 65.0), this v
ersion of the Java Runtime only recognizes class file versions up to 61.0
        at java.base/java.lang.ClassLoader.defineClass1(Native Method)
        at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
        at java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:150)
        at java.base/jdk.internal.loader.BuiltinClassLoader.defineClass(BuiltinClassLoader.java:862)
        at java.base/jdk.internal.loader.BuiltinClassLoader.findClassOnClassPathOrNull(BuiltinClassLoader.java:760)
        at java.base/jdk.internal.loader.BuiltinClassLoader.loadClassOrNull(BuiltinClassLoader.java:681)
        at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:639)
        at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:188)
        at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:525)
        at com.netscape.cmstools.cli.MainCLI.<init>(MainCLI.java:85)
        at com.netscape.cmstools.cli.MainCLI.main(MainCLI.java:697)
ERROR: CalledProcessError: Command '['runuser', '-u', 'pkiuser', '--', 'pki', '-d', '/etc/pki/pki-tomcat/alias', '-f', '/etc/pki/pki-tomcat/password.conf', 'nss-cert-request', '--subject', '
cn=ipa002.test.openqa.fedoraproject.org,o=2024-02-28 18:40:13', '--csr', '/tmp/tmpyf1x00o1/sslserver.csr', '--key-type', 'RSA', '--key-size', '2048', '--hash', 'SHA256', '--debug']' returned
 non-zero exit status 255.

pmikova commented 10 months ago

It is definitely possible some rebuilt dependency broke it. Thank you, I will look into it now.

jvanek commented & provided feedback 10 months ago

karma

The reason is for sure, that stack wsa built by jdk21, but the used runtime jre was 17 (the numbers are sure - 17 is 61 and 21 is 65).

The simple workaround is to built com/fasterxml/ t0ools with backward compatible bytecode . That measn setting source and target to 17. But that can bite later.

The fix is to ensure, that the FreeIPA server (or only its tests?) get launched by system JDK.. The most likely casue is that freeipa (or some of its dependencies) requires literally java-17-openjdk, instead of just versionless java. The dfree ip a 9test?)runner then pick 17 instead of 21.

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'passed'.

10 months ago

This update cannot be pushed to stable. These builds diffoscope-257-2.fc41 have a more recent build in koji's f41 tag.

10 months ago

pmikova edited this update.

New build(s):

diffoscope-258-3.fc41
jboss-logging-tools-2.2.1-16.fc41
antlr4-project-4.10.1-14.fc41
string-template-maven-plugin-1.1-14.fc41
stringtemplate4-4.3.4-4.fc41
maven-reporting-impl-3.2.0-6.fc41
maven-reporting-api-3.1.1-6.fc41

Removed build(s):

diffoscope-257-2.fc41
string-template-maven-plugin-1.1-13.fc41

Karma has been reset.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'passed'.

10 months ago

This update has been submitted for stable by bodhi

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

adamwill commented 10 months ago

@abbra @rcritten please take a look...

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'passed'.

10 months ago

adamwill commented 10 months ago

Oh, wow. So someone just waived the test failure and pushed this stable? Please do not do that. It is not the right thing to do. Now FreeIPA is broken for everyone, and the test will fail for every other update, preventing them all from going stable.

I will get this untagged.

adamwill commented & provided feedback 10 months ago

karma

Untag request: https://pagure.io/releng/issue/11990

adamwill commented 10 months ago

@jvanek this test is not running some kind of test suite, it is testing an actual real-world deployment of FreeIPA. the test failing means deployment of FreeIPA is broken by this update.

adamwill commented 9 months ago

Fortunately, I was able to clean this up; by luck, just rebuilding dogtag-pki to actually build against Java 21 works at least well enough for the FreeIPA tests to pass. There may well be other incompatibilities that need resolving, but at least the basic test set is OK.

jvanek commented 9 months ago

ty!