Bug 1222235 - installation-images: update for crypto-policies/krb5
Summary: installation-images: update for crypto-policies/krb5
Status: RESOLVED FIXED
Alias: None
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Installation (show other bugs)
Version: Current
Hardware: Other Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: Steffen Winterfeldt
QA Contact: Jiri Srain
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 1211301
  Show dependency treegraph
 
Reported: 2024-04-02 12:18 UTC by Ana Guerrero
Modified: 2024-04-05 07:42 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ana Guerrero 2024-04-02 12:18:03 UTC
krb5 is adding crypto-policies support and this is making  installation-images:openSUSE (and MicroOS) failing to build:

[  210s] checking for dangling symlinks...
[  210s] invalid: /etc/krb5.conf.d/crypto-policies -> ../crypto-policies/back-ends/krb5.config
[  210s] mk_image: please fix symlinks
[  210s] make: *** [Makefile:83: base] Error 9
[  210s] error: Bad exit status from /var/tmp/rpm-tmp.UG9WSl (%build)
[  210s] 

See 
https://build.opensuse.org/request/show/1156860
https://bugzilla.opensuse.org/show_bug.cgi?id=1211301
Comment 1 Steffen Winterfeldt 2024-04-02 17:07:50 UTC
Is this change in a Staging project somewhere?
Comment 3 Steffen Winterfeldt 2024-04-04 12:48:29 UTC
Fixed:

- https://github.com/openSUSE/installation-images/pull/704
Comment 4 Steffen Winterfeldt 2024-04-04 12:57:47 UTC
While fixing the issue I noticed something else.

The postinstall of crypto-policies depends on the FIPS setting in
/proc/sys/crypto/fips_enabled.

I would assume that building in OBS/IBS this is always 0.
Is that relevant for fips enablement during installation?
Comment 5 Steffen Winterfeldt 2024-04-05 07:42:59 UTC
fix has been submitted