Bug 1222235

Summary:	installation-images: update for crypto-policies/krb5
Product:	[openSUSE] openSUSE Tumbleweed	Reporter:	Ana Guerrero <ana.guerrero>
Component:	Installation	Assignee:	Steffen Winterfeldt <snwint>
Status:	RESOLVED FIXED	QA Contact:	Jiri Srain <jsrain>
Severity:	Normal
Priority:	P5 - None	CC:	ana.guerrero, meissner, pmonrealgonzalez, scabrero
Version:	Current
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---
Bug Depends on:
Bug Blocks:	1211301

Description Ana Guerrero 2024-04-02 12:18:03 UTC

krb5 is adding crypto-policies support and this is making  installation-images:openSUSE (and MicroOS) failing to build:

[  210s] checking for dangling symlinks...
[  210s] invalid: /etc/krb5.conf.d/crypto-policies -> ../crypto-policies/back-ends/krb5.config
[  210s] mk_image: please fix symlinks
[  210s] make: *** [Makefile:83: base] Error 9
[  210s] error: Bad exit status from /var/tmp/rpm-tmp.UG9WSl (%build)
[  210s] 

See 
https://build.opensuse.org/request/show/1156860
https://bugzilla.opensuse.org/show_bug.cgi?id=1211301

Comment 1 Steffen Winterfeldt 2024-04-02 17:07:50 UTC

Is this change in a Staging project somewhere?

Comment 2 Ana Guerrero 2024-04-04 07:21:13 UTC

Hi Steffen

Please take a look at https://build.opensuse.org/staging_workflows/openSUSE:Factory/staging_projects/openSUSE:Factory:Staging:G

Broken packages:
* installation-images:MicroOS: failed (x86_64): 

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:G/installation-images:MicroOS/standard/x86_64

* installation-images:openSUSE: failed (i586, x86_64)

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:G/installation-images:openSUSE/standard/i586

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:G/installation-images:openSUSE/standard/x86_64

Comment 3 Steffen Winterfeldt 2024-04-04 12:48:29 UTC

Fixed:

- https://github.com/openSUSE/installation-images/pull/704

Comment 4 Steffen Winterfeldt 2024-04-04 12:57:47 UTC

While fixing the issue I noticed something else.

The postinstall of crypto-policies depends on the FIPS setting in
/proc/sys/crypto/fips_enabled.

I would assume that building in OBS/IBS this is always 0.
Is that relevant for fips enablement during installation?

Comment 5 Steffen Winterfeldt 2024-04-05 07:42:59 UTC

fix has been submitted