Ticket #1152 (accepted defect)
RPM package verification failures on configuration files causes bcfg2 to reinstall package
Reported by: | https://www.google.com/accounts/o8/id?id=AItOawn0s7RDAZJqmy8qhaS8PFtgoke6VxxZKSI | Owned by: | solj |
---|---|---|---|
Priority: | major | Milestone: | Bcfg2 1.3.5 Release (Bugfix) |
Component: | bcfg2-client | Version: | 1.0 |
Keywords: | YUM | Cc: | [email protected]…, [email protected]… |
Description
Hello,
For packages that have configuration files (specifically %config(noreplace) config files), when Bcfg2 runs in non-quick mode, Bcfg2 marks the package as needing a reinstall when a config file fails verification. When it reinstalls the package, it doesn't replace the file, because the package marks it as %config(noreplace). So, next time Bcfg2 runs, it will continue to mark the package as needing to be reinstalled. The only solution is to mark every config file as "ignored" Path entries.
Ideally, Bcfg2 should ignore files that are config files (or at least, %config(noreplace) config files, if that's possible) when evaluating which packages need to be reinstalled. This would match standard RPM/Yum behavior.
Attachments
Change History
Changed 9 years ago by https://www.google.com/accounts/o8/id?id=AItOawn0s7RDAZJqmy8qhaS8PFtgoke6VxxZKSI
- Attachment 0001-YUM-Add-a-check-to-ignore-verification-failures-on-c.patch added
Changed 9 years ago by https://www.google.com/accounts/o8/id?id=AItOawn0s7RDAZJqmy8qhaS8PFtgoke6VxxZKSI
- Attachment bcfg2-yum-verify-check-configuration.patch added
A better patch that covers a more limited set of changes
comment:1 follow-up: ↓ 2 Changed 9 years ago by https://www.google.com/accounts/o8/id?id=AItOawn0s7RDAZJqmy8qhaS8PFtgoke6VxxZKSI
I submitted a patch that only ignores changed config files if their size, checksum, mode or ownership differ. I'm testing it now.
comment:2 in reply to: ↑ 1 Changed 9 years ago by solj
- Owner changed from desai to solj
- Status changed from new to accepted
Replying to https://www.google.com/accounts/o8/id?id=AItOawn0s7RDAZJqmy8qhaS8PFtgoke6VxxZKSI:
I submitted a patch that only ignores changed config files if their size, checksum, mode or ownership differ. I'm testing it now.
Were you ever able to verify whether or not this works?
Possible fix for this behavior