Pulp: Issueshttps://pulp.plan.io/https://pulp.plan.io/favicon.ico2017-02-21T12:56:15ZPulp
Planio Pulp - Story #2595 (CLOSED - DUPLICATE): Being able to set a retry for failed tasks would make pu...https://pulp.plan.io/issues/25952017-02-21T12:56:15Zkfiresmithkfiresmith@gmail.com
<p>As my pulp installation has expanded out to 140+ repos, failed repo syncs have become a daily occurrence. I currently deal with this manually after being notified by external tools (Splunk alerts) - if I could set a global default and/or a task-type specific delay&retry for failed tasks, that would sort most of the problems I have with failed tasks and make pulp more reliable.</p> Pulp - Issue #2024 (CLOSED - DUPLICATE): Summary listing of RPM repos appears to be brokenhttps://pulp.plan.io/issues/20242016-06-20T17:59:24Zkfiresmithkfiresmith@gmail.com
<pre><code>ERROR - Client-side exception occurred
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/pulp/client/extensions/core.py", line 474, in run
exit_code = Cli.run(self, args)
File "/usr/lib/python2.7/site-packages/okaara/cli.py", line 974, in run
exit_code = command_or_section.execute(self.prompt, remaining_args)
File "/usr/lib/python2.7/site-packages/pulp/client/extensions/extensions.py", line 210, in execute
return self.method(*arg_list, **clean_kwargs)
File "/usr/lib/python2.7/site-packages/pulp/client/commands/repo/cudl.py", line 331, in run
self.display_repository_summaries(**kwargs)
File "/usr/lib/python2.7/site-packages/pulp/client/commands/repo/cudl.py", line 395, in display_repository_summaries
_default_summary_view(repo_list, self.prompt)
File "/usr/lib/python2.7/site-packages/pulp/client/commands/repo/cudl.py", line 535, in _default_summary_view
name_value = repo['display_name'][0:max_name_width]
TypeError: 'NoneType' object has no attribute '__getitem__'
An unexpected error has occurred. More information may be found using the -v
flag.
</code></pre>
<p><a href="http://paste.fedoraproject.org/382230/66444803/" class="external">http://paste.fedoraproject.org/382230/66444803/</a></p> Pulp - Story #1999 (CLOSED - WONTFIX): When ISO plugin is generalized to "FILES", could we please...https://pulp.plan.io/issues/19992016-06-10T20:35:00Zkfiresmithkfiresmith@gmail.com
<p>I understand there are plans to generalize the ISO plugin for Pulp. This is great, because many of us use it to host arbitrary files such as kickstarts, RPM signing keys, and lots of other things.</p>
<p>This works well when the authoritative repository is already under our control, or Pulp is the authoritative repository. But it is impossible to sync a remote file repository because there won't be a 'PULP_MANIFEST' file.</p>
<p>The generalized files plugin (name TBD?), would be much more useful if it could check for a PULP_MANIFEST file, but then fall back to a recursive link-following scheme in the event that no PULP_MANIFEST exists in the feed.</p>
<p>I'm imagining something analogous to 'wget -r', but I'm not sure if libcurl, nectar, or python-requests has such capability.</p> RPM Support - Issue #1971 (CLOSED - WONTFIX): '--retain-old-count' option not retroactivehttps://pulp.plan.io/issues/19712016-06-03T17:34:07Zkfiresmithkfiresmith@gmail.com
<p>If you update the '--retain-old-count=' option on a previously sync'd repo that has a number of RPM versions greater than the new value, the new value is not retroactive. Currently it appears the only way you can reduce the number of old versions is to delete the repo and re-create/re-sync with the new target value.</p>
<p>Steps to reproduce:</p>
<p>pulp-admin rpm repo create --repo-id=epel-test --feed=<a href="http://download-i2.fedoraproject.org/pub/epel/5/x86_64/" class="external">http://download-i2.fedoraproject.org/pub/epel/5/x86_64/</a> --retain-old-count=2 && pulp-admin rpm repo sync run --repo-id=epel-test<br>
pulp-admin rpm repo list --details --repo-id=epel-test | grep 'Rpm'</p>
<p>pulp-admin rpm repo update --repo-id=epel-test --retain-old-count=1 && pulp-admin rpm repo sync run --repo-id=epel-test<br>
pulp-admin rpm repo list --details --repo-id=epel-test | grep 'Rpm'</p>
<p>The RPM count will <strong>not</strong> change, but should be reduced by 1/3.</p> Pulp - Issue #1946 (CLOSED - DUPLICATE): pulp-admin rpm repo update --relative-url doesn't clean ...https://pulp.plan.io/issues/19462016-05-25T17:14:53Zkfiresmithkfiresmith@gmail.com
<p>Folks,<br>
I've discovered that re-organizing pulp RPM repos is not as easy as it would seem using the 'rpm repo update' function. It appears that cruft is left behind in the form of a directory structure with a single file called 'listing' in each segment of said directory path.</p>
<p>Thus if I have a repository published at /pulp/repos/IBM/7/7Server/x86_64/, and I use 'pulp-admin rpm repo update --repo-id=IBM-server-7 --relative-url=thirdparty/IBM', the new directory structure is published as you would expect at /pulp/repos/thirdparty/IBM, but there is an entire (mostly) empty folder structure left behind at /pulp/repos/IBM.</p> Pulp - Issue #1844 (CLOSED - CURRENTRELEASE): pulp-admin --config and/or api_prefix option appear...https://pulp.plan.io/issues/18442016-04-14T15:02:34Zkfiresmithkfiresmith@gmail.com
<p>Hi Folks,<br>
This is a show-stopper problem for my AD / kerberos integration efforts I'm putting together for 2.9 documentation.</p>
<p>Because pulp-admin cannot work with kerberos tickets, a split authentication scheme must be used to allow both AD accounts and local pulp accounts to log into Pulp. The easiest way we have thought of to allow this is to have two different api paths via WSGIScriptAlias like so:</p>
<p>WSGIScriptAlias /pulp/api /usr/share/pulp/wsgi/webservices.wsgi<br>
WSGIScriptAlias /pulp-local/api /usr/share/pulp/wsgi/webservices.wsgi</p>
<p>Then having a mod_auth_gssapi conf file to protect logins on the normal API path using AD auth:</p>
<p><Location /pulp/api/v2/actions/login></p>
<ol>
<li>Require TLS (nee SSL).<br>
SSLRequireSSL<br>
SSLOptions +StrictRequire</li>
</ol>
<ol>
<li>Use GSSAPI authentication.<br>
AuthType GSSAPI<br>
AuthName "Pulp Login"</li>
</ol>
<ol>
<li>For paranoia, make GSSAPI also require TLS.<br>
GssapiSSLonly On</li>
</ol>
<ol>
<li>Permit password-based authentication for clients that can't do Negotiate.<br>
GssapiBasicAuth On</li>
</ol>
<ol>
<li>Require a valid user.<br>
require valid-user</li>
</ol>
<p></Location></p>
<p>With these settings in place for Apache, a local login should be possible by using an alternate config file that contains the following api_prefix statement:<br>
api_prefix: /pulp-local/api<br>
...and pointing to the alternate config file via:<br>
pulp-admin -v --config=/etc/pulp/admin/admin-local.conf login -u admin -p <some_password></p>
<p>But this does not happen. Instead, the login command is posted to the normal api path as seen in the logs:</p>
<p>==> /var/log/httpd/ssl_access_log <==<br>
10.xx.xx.xx - - [14/Apr/2016:10:22:47 <del>0400] "POST /pulp/api/v2/actions/login/ HTTP/1.1" 401 451 "</del>" "-"</p>
<p>Frustratingly, using strace it's apparent that the admin-client does in fact source the alternate config file, but it doesn't seem to accept the api_prefix option:</p>
<p>$strace pulp-admin <del>v --config=/etc/pulp/admin/admin-local.conf login -u admin -p ----------------</del> 2>&1 | grep admin-local<br>
open("/etc/pulp/admin/admin-local.conf", O_RDONLY) = 3</p>
<p>Because I don't know how to Python, I'm at a loss to figure out what is broken behind the curtain.</p> Pulp - Issue #1728 (CLOSED - CURRENTRELEASE): Please relax input validation on --login for 'pulp-...https://pulp.plan.io/issues/17282016-02-29T19:04:39Zkfiresmithkfiresmith@gmail.com
<p>While working out the process for setting up AD-integration for Pulp to allow SSO logins in pulp-admin, I discovered that '@' is not an allowed character of a login:</p>
<p>$pulp-admin auth user create --login <a href="mailto:jim_bob@AD.COLLEGE.EDU" class="email">jim_bob@AD.COLLEGE.EDU</a><br>
Validation failed for argument [--login]: value must contain only letters,<br>
numbers, underscores, periods and hyphens</p>
<p>This unfortunately is a show-stopper issue for Pulp at our organization. Please relax the input validation so that we can continue working out how to get mod_auth_kerb set up for pulp.</p>
<p>Thanks!</p> Pulp - Story #1677 (CLOSED - WONTFIX): 'pulp-admin repo history sync' needs more filters to be us...https://pulp.plan.io/issues/16772016-02-15T17:36:05Zkfiresmithkfiresmith@gmail.com
<p>Right now I can iterate over a full list of repos to get a snapshot of the state of repo syncs across my pulp server by running this:</p>
<ol>
<li>for i in $(pulp-admin repo list | grep 'Id:' | awk '{print $2}'); do pulp-admin repo history sync --limit=1 --repo-id=$i; done</li>
</ol>
<p>Unfortunately that will return text for all repos regardless of if they have ever been synced (some repos originate from within pulp thus do not sync...), and cannot be set to not return anything if the last sync was successful.</p>
<p>I would very much like to be able to use pulp-admin to return only a list of repos that had errors syncing, so that I can limit the noise in my logging emails.</p>
<p>A setting that would allow me to filter based on the "Result:" field would be swell and could work like this:</p>
<p>pulp-admin repo history sync --limit=1 --repo-id=EPEL7 --result={error,failed,success}</p> Pulp - Story #1665 (CLOSED - WONTFIX): pulp-consumer repo bind input not validated (pitfall!)https://pulp.plan.io/issues/16652016-02-11T18:06:18Zkfiresmithkfiresmith@gmail.com
<p>Running the command 'pulp-consumer rpm bind --repo-id=foo --repo-id=bar --repo-id=zot' would only bind the 'zot' repo. This might be a troublesome pitfall as no error message is generated.</p>
<p>It should be made clear (perhaps via input validation of the command) that only one '--repo-id' entry will be used and all others are discarded.</p> RPM Support - Story #1658 (CLOSED - WONTFIX): Pulp needs some sort of role-grouping or inheritancehttps://pulp.plan.io/issues/16582016-02-10T20:29:12Zkfiresmithkfiresmith@gmail.com
<p>Currently for each new role I come up with, I have to add every user individually. I would like to be able to organize like users by access level, eg: sysadmins, users, etc. Or maybe by department. Then I could just assign users to a limited set of meta-roles that actually just contain other roles.</p>
<p>Right now if I have a bunch of roles like 'repository-viewer', 'repository-manager', 'content-publisher', etc, I must then enumerate a whole class of user logins for each role like so:</p>
<p>for i in bob sue joe jebediah zeke; do pulp-admin auth role user add --login=$i --role-id=repository-viewer; done<br>
for i in bob sue joe jebediah zeke; do pulp-admin auth role user add --login=$i --role-id=repository-manager; done<br>
for i in bob sue joe jebediah zeke; do pulp-admin auth role user add --login=$i --role-id=content-publisher; done</p>
<p>It sure would be swell to group logins into departments 'org-accounting', 'org-labadmins', 'org-mailroom', then assign myriad relevant and growing permission-containing roles under each of those organizational roles so that as people come and go it's much easier than tacking on a million individual roles to each user.</p>
<p>Hopefully that makes sense...</p> Pulp - Story #1628 (CLOSED - WONTFIX): make repo index listings more readable in a web browser (e...https://pulp.plan.io/issues/16282016-02-03T20:49:44Zkfiresmithkfiresmith@gmail.com
<p>Folks,<br>
By default (thanks Apache...), package listings in repos are really not that useful via a web browser because the default is to truncate filenames after the first 20 bytes.</p>
<p>I easily fixed this globally on my Pulp server by augmenting the following line of /etc/httpd/conf.d/autoindex.conf:<br>
- IndexOptions FancyIndexing HTMLTable VersionSort<br>
+ IndexOptions FancyIndexing HTMLTable VersionSort NameWidth=*</p>
<p>...but this can be fixed in the Pulp installation by adding that option to the right places (up to you guys specifically which) in the pulp_rpm.conf or other pulp-provided files. Attached is a visual example of how much nicer listings are without truncation.</p> Pulp - Story #1595 (CLOSED - DUPLICATE): Pulp item download functionality / linkhttps://pulp.plan.io/issues/15952016-01-28T15:53:32Zkfiresmithkfiresmith@gmail.com
<p>I believe it would be very useful for sysadmins who have access to pulp-admin with at least read privs to be able to download content returned in a search of ISO and RPM repositories.</p>
<p>This would save people from having to go to the web interface and browse to what they need. In absence of this functionality, at least having a hyperlink to the item returned in a --detail search would be a big improvement. Optimally, having both aspects of this RFE put in place would give maximum flexibility and choice to the sysadmin who prefers to do as much as possible within pulp-admin.</p>
<p>Below is a simple mockup of my idea for a --detail return with this new feature:</p>
<ol>
<li>pulp-admin iso repo isos --repo-id=IT_Kickstart --detail<br>
Metadata:<br>
Checksum: 85fc7aa085882e5c3df02f54c6d78c1aa914564ec61f1099d4017b4014f89e83<br>
Name: _RHEL7-enterpriseMgmt-template-pup4-01:2:ITS-Department<br>
Size: 16467<br>
Updated: 2016-01-28T15:28:58Z<br>
Repo Id: IT_Kickstart<br>
Created: 2016-01-28T15:28:58Z<br>
Unit Id: be782341-03a3-48b8-9879-2d1da90f43aa<br>
Unit Type Id: iso<br>
Id: 56aa33baa8b2df7b8aab0b8e<br>
Url: <a href="https://pulp.college.edu/pulp/isos/IT_Kickstart/_RHEL7-enterpriseMgmt-template-pup4-01:2:ITS-Department" class="external">https://pulp.college.edu/pulp/isos/IT_Kickstart/_RHEL7-enterpriseMgmt-template-pup4-01:2:ITS-Department</a>
</li>
</ol> Pulp - Story #1588 (CLOSED - WONTFIX): pulp-admin rpm repo list --fields should be able to return...https://pulp.plan.io/issues/15882016-01-27T15:04:34Zkfiresmithkfiresmith@gmail.com
<p>Currently when an admin uses "--fields" to slice output of an RPM repo listing, only "id,description,display_name,content_unit_counts" appear to be able to be used. I believe it would be very useful for pulp-admin to return any of the following fields, which are all displayed when you run the --detail switch:</p>
<p>Id: Display Description: Content Erratum: Package Package Package Rpm: Yum Notes: Importers: Config: Feed: Proxy Proxy SSL SSL SSL Id: Importer Last Repo Scheduled Distributors: Auto Config: Checksum Http: Https: Relative Distributor Id: Last Repo Scheduled Auto Config: Http: Https: Distributor Id: Last Repo Scheduled.</p>
<p>A mockup example of what would be handy follows:</p>
<ol>
<li>pulp-admin rpm repo list --fields="id,display_name,relative_url"<br>
<span><del>--------------------------------------------------------------------</del></span><br>
RPM Repositories<br>
<span><del>--------------------------------------------------------------------</del></span>
</li>
</ol>
<p>Id: EPEL7<br>
Display Name: EPEL7<br>
Relative URL: /epel/7/x86_64/</p>
<p>Id: EPEL6<br>
Display Name: EPEL6<br>
Relative URL: /pub/epel/6/x86_64/</p> Pulp - Issue #1396 (CLOSED - CURRENTRELEASE): RHEL 7 install doc misses RPM, error throws link to...https://pulp.plan.io/issues/13962015-12-04T17:52:53Zkfiresmithkfiresmith@gmail.com
<p>Folks,<br>
The Server installation doc here: <a href="https://pulp.readthedocs.org/en/latest/user-guide/installation.html#server" class="external">https://pulp.readthedocs.org/en/latest/user-guide/installation.html#server</a> misses the required package "qpid-tools". This becomes apparent when one attempts to initialize the Pulp Mongo database:</p>
<pre><code>Halting migrations due to a migration failure.
Migration 0009 did not run because the python package qpidtoollibs is not installed. Please install qpidtoollibs and rerun the migrations. See http://pulp-user-guide.readthedocs.org/en/2.4-release/troubleshooting.html#qpidtoollibs-is-not-installed for more information.
Traceback (most recent call last):
</code></pre>
<p>Unfortunately the link provided in the error (a practice new users like myself greatly appreciate, btw!) is stale and points to 2.4 troubleshooting docs that I have observed won't fix RHEL 7. The "/latest/" docs do however provide the correct guidance on fixing the issue (install qpid-tools).</p>
<p>So I guess my request is kind of twofold:<br>
1. Update the docs to have the user install qpid-tools if using RHEL<br>
2. Update the Pulp source code to use the "/latest/" doc link that provides the fix for this issue: <a href="https://pulp.readthedocs.org/en/latest/user-guide/troubleshooting.html#qpidtoollibs-is-not-installed" class="external">https://pulp.readthedocs.org/en/latest/user-guide/troubleshooting.html#qpidtoollibs-is-not-installed</a></p>
<p>Thanks a bunch!<br>
- Kodiak Firesmith</p> Pulp - Story #1251 (CLOSED - WONTFIX): As a user, I can conveniently define global importer settingshttps://pulp.plan.io/issues/12512015-09-13T20:50:18Zkfiresmithkfiresmith@gmail.com
<p>Pulp RPM importer lacks (IMO) key functionality of a "no_proxy" key-value pair to go alongside the existing proxy-related key-value pairs.</p>
<p>Within enterprises that employ a proxy at the border that doesn't loop back into the border for local traffic, Pulp / Satellite 6 customers have to make the choice of syncing only external content (cdn.redhat.com / epel mirrors) or internal content.</p>
<p>Pulp should allow per-repository proxy values, or should globally employ a "no_proxy = *.mycompany.com" coping scheme to allow those with strict border proxies a way to effectively use Pulp / Satellite 6.1+.</p>