Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-31699

gstreamer1 package dependency in network-tools creates legal concerns

XMLWordPrintable

    • No
    • SDN Sprint 251
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, the `network-tools` image, which is a debugging tool, included the Wireshark network protocol analyzer. Wireshark had a dependency on the `gstreamer1` package, and this package has specific licensing requirements. With this release, the `gstreamer1` package is removed from the network-tools image and the image now includes the `wireshark-cli` package.(link:https://issues.redhat.com/browse/OCPBUGS-31699[*OCPBUGS-31699*])
      Show
      * Previously, the `network-tools` image, which is a debugging tool, included the Wireshark network protocol analyzer. Wireshark had a dependency on the `gstreamer1` package, and this package has specific licensing requirements. With this release, the `gstreamer1` package is removed from the network-tools image and the image now includes the `wireshark-cli` package.(link: https://issues.redhat.com/browse/OCPBUGS-31699 [* OCPBUGS-31699 *])
    • Bug Fix
    • Done

      Description of problem:

      gstreamer1 package (and its plugins) include certain video/audio codecs, which create licensing concerns for our Partners, who embed our solutions (OCP) and deliver it to their end customers. 

ose-network-tools container image (seems applicable for all OCP releases) includes dependency to gstreamer1 rpm (and its plugin rpms, like gstreamer1-plugins-bad-free). The request is re-consider this dependency and if possible totally remove it. It is a blocking issue which prevents our partners to deliver their solution on the field.

It is an indirect dependency. ose-network-tools includes wireshark, wireshark has dependency to qt5-multimedia, which in turn includes dependency to gstreamer1-plugins-bad-free. 

First question: is wireshark really needed for network-tools? Wireshirk is a GUI tool, so dependency is not clear. 
Second question: would wireshark-cli be sufficient for needed purposes instead? Because CLI version does not contain dependency to qt5 and so on.

      Version-Release number of selected component (if applicable):

          Seems applicable to all active OCP releases.

      How reproducible:

          Steps to Reproduce:
          1.
    2.
    3.

      Actual results:

      Expected results:

      Additional info:

            [OCPBUGS-31699] gstreamer1 package dependency in network-tools creates legal concerns

            Errata Tool added a comment -

            Since the problem described in this issue should be resolved in a recent advisory, it has been closed.

            For information on the advisory (Critical: OpenShift Container Platform 4.16.0 bug fix and security update), and where to find the updated files, follow the link below.

            If the solution does not work for you, open a new bug report.
            https://access.redhat.com/errata/RHSA-2024:0041

            Errata Tool added a comment - Since the problem described in this issue should be resolved in a recent advisory, it has been closed. For information on the advisory (Critical: OpenShift Container Platform 4.16.0 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2024:0041

            Anurag Saxena added a comment -

            Verified on 4.16.0-0.nightly-2024-04-05-052913

            sh-5.1# podman run --rm --entrypoint '' fdfbb2d40cfd rpm -qa | grep -i shar
perl-threads-shared-1.58-2.el8.x86_64
wireshark-cli-2.6.2-14.el8.x86_64   <<<<<<<<<<<<<<<<<<<<<<<<<<
shared-mime-info-1.9-3.el8.x86_64

            Anurag Saxena added a comment - Verified on 4.16.0-0.nightly-2024-04-05-052913 sh-5.1# podman run --rm --entrypoint '' fdfbb2d40cfd rpm -qa | grep -i shar perl-threads-shared-1.58-2.el8.x86_64 wireshark-cli-2.6.2-14.el8.x86_64 <<<<<<<<<<<<<<<<<<<<<<<<<< shared-mime-info-1.9-3.el8.x86_64

            OpenShift Jira Bot added a comment -

            Hi npinaeva@redhat.com,

            Bugs should not be moved to Verified without first providing a Release Note Type("Bug Fix" or "No Doc Update") and for type "Bug Fix" the Release Note Text must also be provided. Please populate the necessary fields before moving the Bug to Verified.

            OpenShift Jira Bot added a comment - Hi npinaeva@redhat.com , Bugs should not be moved to Verified without first providing a Release Note Type("Bug Fix" or "No Doc Update") and for type "Bug Fix" the Release Note Text must also be provided. Please populate the necessary fields before moving the Bug to Verified.

            Anurag Saxena added a comment -

            rh-ee-qiowang Can you help verifying it on priotity? thanks

            Anurag Saxena added a comment - rh-ee-qiowang Can you help verifying it on priotity? thanks

            Nadia Pinaeva added a comment -

            there are 2 things to verify:

            1. gstreamer1 package is not included in the image
            2. tshark commands still work (or even test this script https://github.com/openshift/network-tools/blob/master/debug-scripts/test-networking/ovn_ipsec_connectivity with ipsec-enabled env)

            Nadia Pinaeva added a comment - there are 2 things to verify: gstreamer1 package is not included in the image tshark commands still work (or even test this script https://github.com/openshift/network-tools/blob/master/debug-scripts/test-networking/ovn_ipsec_connectivity with ipsec-enabled env)

              npinaeva@redhat.com Nadia Pinaeva
              ibodunov Ivan Bodunov
              Anurag Saxena Anurag Saxena
              Ashley Hardin Ashley Hardin
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: