Bug 1226723 - audit: backlog limit exceeded on migration from 5.5 -> 6.0
Summary: audit: backlog limit exceeded on migration from 5.5 -> 6.0
Status: NEW
Alias: None
Product: PUBLIC SUSE Linux Enterprise Micro 5.5
Classification: openSUSE
Component: Installation (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Jiri Srain
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-06-21 10:14 UTC by Lubos Kocman
Modified: 2024-06-21 14:39 UTC (History)
0 users

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments
installation failing on unpacking of runc (368.65 KB, image/png)
2024-06-21 11:05 UTC, Lubos Kocman
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Lubos Kocman 2024-06-21 10:14:38 UTC
IN cockpit webui terminal on fully updated Leap Micro 5.5 (KVM VM with 20GB disk)

$ translactional-update shell # let's switch to the tu-shell
$ zypper --releasever 6.0 in openSUSE-repos # to get new repo definitions
$ zypper --releasever 6.0 dup

After doing about 80% the cockpit is down and console shows only audit: backlog limit exceeded

Seems to be relevant to:
https://access.redhat.com/solutions/473223

I am suspicious that it might be just disk space, as base install has 4GB, we have to fetch packages somewhere and then install them (with snapshot in mind).
Comment 1 Lubos Kocman 2024-06-21 11:05:22 UTC
Created attachment 875637 [details]
installation failing on unpacking of runc
Comment 2 Lubos Kocman 2024-06-21 11:06:17 UTC
it complained also about crun and conmon
Comment 3 Lubos Kocman 2024-06-21 11:28:03 UTC
Once you ignore installation of problematic packages, finish the zypper dup and re-run the dup it finishes properly.

I suppose one of the installed packages from 6.0 dup fixes the auditd problem.
Comment 4 Stefan Hundhammer 2024-06-21 11:38:21 UTC
No YaST on MicroOS 6.0; see also bug #1223976.
Comment 5 Lubos Kocman 2024-06-21 12:53:16 UTC
Workaround: install auditd + automatically pulled deps from 6.0 before starting the upgrade. Then issue goes away completely

Would it make sense to release auditd update for 5.5?
Comment 6 Lubos Kocman 2024-06-21 13:59:25 UTC
So here we see a failure with zypper --releasever 6.0 dup by using audit-3.0.6-150400.4.16.1.x86_64

https://paste.opensuse.org/pastes/6874a858188f


warning: /var/cache/zypp/packages/openSUSE:repo-main/x86_64/runc-1.1.12-1.3.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 09d9ea69: NOKEY
error: lsetfilecon: (/usr/sbin/runc;667584ff, system_u:object_r:container_runtime_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
error: unpacking of archive failed on file /usr/sbin/runc;667584ff: cpio: (error 0x2)
error: runc-1.1.12-1.3.x86_64: install failed
error: runc-1.1.12-150000.64.1.x86_64: erase skipped
(137/705) Installing: runc-1.1.12-1.3.x86_64 ..........................................................................................................................................................................................[error]
Installation of runc-1.1.12-1.3.x86_64 failed:
Error: Subprocess failed. Error: RPM failed: Command exited with status 1.


warning: /var/cache/zypp/packages/openSUSE:repo-main/x86_64/crun-1.14-1.18.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 09d9ea69: NOKEY
error: lsetfilecon: (/usr/bin/crun;6675851b, system_u:object_r:container_runtime_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
error: unpacking of archive failed on file /usr/bin/crun;6675851b: cpio: (error 0x2)
error: crun-1.14-1.18.x86_64: install failed
(206/705) Installing: crun-1.14-1.18.x86_64 ...........................................................................................................................................................................................[error]
Installation of crun-1.14-1.18.x86_64 failed:
Error: Subprocess failed. Error: RPM failed: Command exited with status 1.



warning: /var/cache/zypp/packages/openSUSE:repo-main/x86_64/keyutils-1.6.3-2.8.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 09d9ea69: NOKEY
error: lsetfilecon: (/usr/sbin/request-key;66758520, system_u:object_r:keyutils_request_exec_t:s0) Invalid argument
error: Plugin selinux: hook fsm_file_prepare failed
error: unpacking of archive failed on file /usr/sbin/request-key;66758520: cpio: (error 0x2)
error: keyutils-1.6.3-2.8.x86_64: install failed
error: keyutils-1.6.3-5.6.1.x86_64: erase skipped
(246/705) Installing: keyutils-1.6.3-2.8.x86_64 .......................................................................................................................................................................................[error]
Installation of keyutils-1.6.3-2.8.x86_64 failed:
Error: Subprocess failed. Error: RPM failed: Command exited with status 1.
Abort, retry, ignore? [a/r/i] (a): i
Comment 7 Lubos Kocman 2024-06-21 14:35:49 UTC
Zero issue with first updating audit and then proceeding to do dup

https://paste.opensuse.org/pastes/fbf96af27332

transactional update # zypper --releasever 6.0 in openSUSE-repos audit
Warning: Enforced setting: $releasever=6.0
...
The following 5 packages are going to be upgraded:
  audit filesystem glibc glibc-locale-base libaudit1

The following 3 NEW packages are going to be installed:
  compat-usrmerge-tools glibc-locale openSUSE-repos-LeapMicro

5 packages to upgrade, 3 new.
Overall download size: 23.2 MiB. Already cached: 0 B. After the operation, additional 215.5 MiB will be used.

Backend:  classic_rpmtrans
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: compat-usrmerge-tools-84.87-2.195.x86_64 (Leap Micro Main Repository)                                                                                                                                         (1/8), 287.5 KiB    
Retrieving: compat-usrmerge-tools-84.87-2.195.x86_64.rpm .................................................................................................................................................................[done (141.1 KiB/s)]
Retrieving: openSUSE-repos-LeapMicro-20240618.8c4e429-2.1.x86_64 (Leap Micro Main Repository)                                                                                                                             (2/8),  15.2 KiB    
Retrieving: openSUSE-repos-LeapMicro-20240618.8c4e429-2.1.x86_64.rpm ...................................................................................................................................................................[done]
Retrieving: filesystem-84.87-5.2.x86_64 (Leap Micro Main Repository)                                                                                                                                                      (3/8), 101.4 KiB    
Retrieving: filesystem-84.87-5.2.x86_64.rpm ............................................................................................................................................................................................[done]
Retrieving: glibc-2.38-6.4.x86_64 (Leap Micro Main Repository)                                                                                                                                                            (4/8),   2.1 MiB    
Retrieving: glibc-2.38-6.4.x86_64.rpm ......................................................................................................................................................................................[done (2.1 MiB/s)]
Retrieving: libaudit1-3.0.9-3.143.x86_64 (Leap Micro Main Repository)                                                                                                                                                     (5/8), 101.9 KiB    
Retrieving: libaudit1-3.0.9-3.143.x86_64.rpm ..............................................................................................................................................................................[done (79.0 KiB/s)]
Retrieving: audit-3.0.9-5.15.x86_64 (Leap Micro Main Repository)                                                                                                                                                          (6/8), 260.8 KiB    
Retrieving: audit-3.0.9-5.15.x86_64.rpm ...................................................................................................................................................................................[done (79.3 KiB/s)]
Retrieving: glibc-locale-base-2.38-6.4.x86_64 (Leap Micro Main Repository)                                                                                                                                                (7/8),   2.0 MiB    
Retrieving: glibc-locale-base-2.38-6.4.x86_64.rpm ..........................................................................................................................................................................[done (2.0 MiB/s)]
Retrieving: glibc-locale-2.38-6.4.x86_64 (Leap Micro Main Repository)                                                                                                                                                     (8/8),  18.3 MiB    
Retrieving: glibc-locale-2.38-6.4.x86_64.rpm ...............................................................................................................................................................................[done (3.7 MiB/s)]

...


# zypper --releaasever 6.0 dup

(156/698) Installing: runc-1.1.12-1.3.x86_64 ...........................................................................................................................................................................................[done]

(217/698) Installing: crun-1.14-1.18.x86_64 ............................................................................................................................................................................................[done]

(244/698) Installing: keyutils-1.6.3-2.8.x86_64 ........................................................................................................................................................................................[done]
Comment 8 Lubos Kocman 2024-06-21 14:39:05 UTC
My suggestion is to update audit in SLE Micro 5.5. Please notice the pulled dependencies 

These from SLEM 6.0 ... did the trick (just notice there was also glibc pulled in, but I suppose that can be out of scope).

libaudit1-3.0.9-3.143.x86_64                                                                                                                                                 
audit-3.0.9-5.15.x86_64