Details
-
Bug
-
Resolution: Done-Errata
-
Critical
-
4.13.0
-
None
-
No
-
uShift Sprint 234
-
1
-
False
-
Description
Description of problem:
The build system is currently using unreleased RHEL content so the RPMs being built for MicroShift have dependencies on packages not available to users. We need to loosen some of our dependency settings to allow candidate RPMs to be usable.
Version-Release number of selected component (if applicable):
4.13
How reproducible:
All EC builds
Steps to Reproduce:
1. Try to install EC build RPMs from the mirror on 9.2 beta or earlier systems. 2. 3.
Actual results:
nothing provides selinux-policy >= 38.1.11-2.el9_2 needed by microshift-selinux-4.13.0~rc.2-202303301538.p0.g1ed1cf3.assembly.rc.2.el9.noarch
Expected results:
RPM installs
Additional info:
https://github.com/openshift/microshift/blob/ded652d83c532493cada424a30394b885441e61d/packaging/rpm/microshift.spec#L20 specifies a minimum version of the selinux policy as 3.14.3-67, which seems to come from RHEL 8.
https://github.com/openshift/microshift/blob/ded652d83c532493cada424a30394b885441e61d/packaging/rpm/microshift.spec#L80 sets that version as the build requirement.
https://github.com/openshift/microshift/blob/ded652d83c532493cada424a30394b885441e61d/packaging/rpm/microshift.spec#L84 uses a different macro to set the runtime requirements.
In Fedora, that macro is defined as https://github.com/fedora-selinux/selinux-policy-macros/blob/master/macros.selinux-policy#L32-L46 and the version number comes from a variable earlier in the file.
Attachments
Issue Links
- blocks
-
-
- Closed
-
- is cloned by
-
-
- Closed
-
- links to
-
RHSA-2023:5008
OpenShift Container Platform 4.14.z security update
