View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0006766 | Rocky-Linux-9 | selinux-policy | public | 2024-05-17 18:25 | 2024-06-18 08:29 |
Reporter | Camden Narzt | Assigned To | Louis Abel | ||
Priority | urgent | Severity | major | Reproducibility | always |
Status | closed | Resolution | fixed | ||
Platform | x86_64 | OS | rocky linux | OS Version | 9.4 |
Summary | 0006766: selinux-policy version in rocky doesn't match RHEL | ||||
Description | Rocky has selinux-policy 38.1.35-2.el9_4.0.1 RHEL has 38.1.35-2.el9_4 | ||||
Steps To Reproduce | install selinux-policy package | ||||
Additional Information | I don't know how the version mismatch happened but it's important for package-builders that rocky and RHEL are using the exact same version of packages, so that we can create compatible packages. Due to this bug packages that depend on selinux-policy, created on rockylinux aren't compatible with RHEL, or Alma linux. I'd be find with alma being broken but RHEL needs to work, otherwise I might as well use CentOS stream. | ||||
Tags | No tags attached. | ||||
The package is the same as RHEL, with the exception of the appended .0.1. You can verify this with the change log and compare it to RHEL, including the spec file and sources. https://git.rockylinux.org/staging/src-rhel/rpms Rebuilding packages is normal in the case of a derivative distribution such as ours. CentOS Linux did the same in the past with rebuilding packages to address build system issues. This does not create incompatibilities between us and our upstream and is not a bug. Please provide information as to how this is a bug or has created an incompatibility. |
|
We use the _selinux_policy_version macro in our rpm spec file to depend on the version of selinux-policy from the OS we build on, and by building on rocky we now depend on a version of selinux-policy that doesn't exist on RHEL or Alma, so our package cannot be installed there. This hasn't happened before in the years we've been packaging for enterprise linux variants so I figured it was a bug. | |
Here's the bug report on our issue tracker https://github.com/phusion/passenger/issues/2545 | |
I see now, I can see what happened in this case. Thank you for the info. Let me see what we can do to address this for you and others. I'll have some info a couple hours. |
|
Soon we'll be pushing an update which should address this macro issue. When it's pushed, a rebuild of your packages with a version/release bump will be required. The rest of the distribution should remain unaffected. I will send another note when we've pushed the update out to mirrors. | |
Update has been pushed out. Mirrors will begin picking it up soon. If you are connecting directly to dl.rockylinux.org for builds, then you should be able to pick up the fixed package immediately during your build. Please let me know if this resolves the issue for you. I will leave this ticket open for now. |
|
Updated package: selinux-policy-38.1.35-2.el9_4.0.2 [label@sani tmp]$ rpm2cpio selinux-policy-38.1.35-2.el9_4.0.2.noarch.rpm | cpio -idmv ./etc/selinux ./usr/lib/rpm/macros.d/macros.selinux-policy ./usr/lib/systemd/system/selinux-check-proper-disable.service ./usr/lib/tmpfiles.d/selinux-policy.conf ./usr/share/licenses/selinux-policy ./usr/share/licenses/selinux-policy/COPYING ./usr/share/selinux ./usr/share/selinux/packages 53 blocks [label@sani tmp]$ grep selinux_policy_version usr/lib/rpm/macros.d/macros.selinux-policy %_selinux_policy_version 38.1.35-2.el9_4 Requires: selinux-policy >= %{_selinux_policy_version} \ Requires(post): selinux-policy-base >= %{_selinux_policy_version} \ |
|
Thanks for the help, we'll build a new package using this fix. | |
I've built new packages and they do install fine on other EL9 distros, thanks so much this can be closed. | |
Date Modified | Username | Field | Change |
---|---|---|---|
2024-05-17 18:25 | Camden Narzt | New Issue | |
2024-05-17 18:44 | Louis Abel | Note Added: 0007129 | |
2024-05-17 18:44 | Louis Abel | Assigned To | => Louis Abel |
2024-05-17 18:44 | Louis Abel | Status | new => needinfo |
2024-05-17 18:53 | Camden Narzt | Note Added: 0007130 | |
2024-05-17 18:57 | Camden Narzt | Note Added: 0007131 | |
2024-05-17 19:03 | Louis Abel | Note Added: 0007132 | |
2024-05-17 23:02 | Louis Abel | Note Added: 0007133 | |
2024-05-17 23:46 | Louis Abel | Status | needinfo => confirmed |
2024-05-17 23:46 | Louis Abel | Note Added: 0007134 | |
2024-05-17 23:57 | Louis Abel | Note Added: 0007135 | |
2024-05-18 07:33 | Camden Narzt | Note Added: 0007136 | |
2024-05-18 13:23 | Camden Narzt | Note Added: 0007137 | |
2024-06-18 08:29 | Louis Abel | Status | confirmed => closed |
2024-06-18 08:29 | Louis Abel | Resolution | open => fixed |