Bug 1214053

Hello Stephan, can you please copy and paste the error message here into the bug so we are able to identify the issue ?

Ah, you mentioned Download Error in the description so it looks like you where not able to download and install the package.

On my testing system (SLES-15-SP5) I was able to install the package with "zypper in xmrig"

Can you please attach a zypper logfile (/var/log/zypper.log and /var/log/zypper/history) ?

Hi Wolfgang,

I attach the Error Messages but I think I have to clear/change the token.

Error syncing the channel: SUSE-PackageHub-15-SP5-Backports-Pool for x86_64

Command '[/usr/bin/spacewalk-repo-sync, --channel, suse-packagehub-15-sp5-backports-pool-x86_64, --type, yum, --non-interactive]' exited with error code 1: 04:41:42 ERROR: Download failed: https://updates.suse.com/SUSE/Backports/SLE-15-SP5_x86_64/standard/rpm/x86_64_GA/xmrig-6.18.1-bp155.1.8.x86_64.rpm?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX3FXn-6ssSgLE_StpO9rlPDQxU9wetphQEZmHY1M_x5au4snRos7xSOwYhe_aCA2vEuhMJ-gM4_XS9F0-WgUDqI6npfc_QJXCJOgutQdtZAojKbpU - [Errno 14] HTTPS Error 403 - Forbidden.
04:41:42     1/1 : xmrig-6.18.1-bp155.1.8.x86_64.rpm (failed)

with Token per PM if wanted ;-)

kind regards

Stephan

(In reply to Stephan Kreuz from comment #3)
> Hi Wolfgang,
> 
> I attach the Error Messages but I think I have to clear/change the token.
> 
> Error syncing the channel: SUSE-PackageHub-15-SP5-Backports-Pool for x86_64
> 
> Command '[/usr/bin/spacewalk-repo-sync, --channel,
> suse-packagehub-15-sp5-backports-pool-x86_64, --type, yum,
> --non-interactive]' exited with error code 1: 04:41:42 ERROR: Download
> failed:
> https://updates.suse.com/SUSE/Backports/SLE-15-SP5_x86_64/standard/rpm/
> x86_64_GA/xmrig-6.18.1-bp155.1.8.x86_64.
> rpm?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX3FXn-
> 6ssSgLE_StpO9rlPDQxU9wetphQEZmHY1M_x5au4snRos7xSOwYhe_aCA2vEuhMJ-gM4_XS9F0-
> WgUDqI6npfc_QJXCJOgutQdtZAojKbpU - [Errno 14] HTTPS Error 403 - Forbidden.
> 04:41:42     1/1 : xmrig-6.18.1-bp155.1.8.x86_64.rpm (failed)
> 
> with Token per PM if wanted ;-)
> 
> kind regards
> 
> Stephan


Hello Stephan,

I'm not able to send you a license or subscription for your SLES version. 
Please get in touch with your local IT or SUSE-Support to get one.

The package xmrig itself also can be freely downloaded from here:
https://download.opensuse.org/repositories/openSUSE:/Backports:/SLE-15-SP5/standard/x86_64/xmrig-6.18.1-bp155.1.8.x86_64.rpm

Regards,

Wolfgang

Hi Wolfgang,

please read the Bug Description !!
I have a Download Error not an Installation Problem.

Also I have a Subscription, I can download all Packages only if I download the Package xmrig-6.18.1-bp155.1.8.x86_64.rpm, i get the Error !!

Alternative Download Links can not be set in SuSeManager for SuSe Products !

kind regards
Stephan

Created attachment 868765 [details]
VirusTotal check  for xmrig

Hi Wolfgang,

now it ist clear why I can`t download the Package.

Checked with VirusTotal.

Atttached Screenshot

kind regards

Stephan

Hello Stephan,

(In reply to Stephan Kreuz from comment #7)
> Hi Wolfgang,
> 
> now it ist clear why I can`t download the Package.
> 
> Checked with VirusTotal.
> 
> Atttached Screenshot

Thank you for the update, sharing the screenshot.

I also tested download and installation using an RMT-Server and on my test system directly connected to SCC. Both worked.

I also checked the rpm with clamscan but with no results regarding an infection. My guess is that it is a false positive with your virus scanner since xmrig contains code for mining :)

Regards,

Wolfgang

Hi Wolfgang,

thats right , our Security Gateway dropped the Package.
Im working for the Department of Defense in Germany and it is not possible to whitelist  xmrig.

So we must live with the daily Error Messages.

BTW

Why should anybody use a Crypto Miner in a Enterprise Environment ?

kind regards

Stephan

Hi Stephan,

(In reply to Stephan Kreuz from comment #9)
> Hi Wolfgang,
> 
> thats right , our Security Gateway dropped the Package.
> Im working for the Department of Defense in Germany and it is not possible
> to whitelist  xmrig.
> 
> So we must live with the daily Error Messages.

Thanks for letting me know. 

> 
> BTW
> 
> Why should anybody use a Crypto Miner in a Enterprise Environment ?

Package Hub consists of additional community packages that we share with openSUSE Leap (we are sharing the sources and so the binaries) so there are many additional packages that are not specific to typical enterprise usage.
On the other hand it gives the freedom for the user to also use those packages on a enterprise platform. But I see your point since especially for xmrig the user base on the enteprise sector might be quite small.

Regards,

Wolfgang