Project

Profile

Help

Issue #3585

closed

Pulp sync/publish relies on unique filenames per repo, corrupting repository

Added by dekimsey almost 6 years ago. Updated almost 5 years ago.

Status:
CLOSED - WONTFIX
Priority:
Normal
Assignee:
-
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
3. High
Version:
2.12.2
Platform Release:
OS:
RHEL 7
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:

Description

We have an upstream vendor, Centrify, that releases unique (nevra) packages in their published yum repo but reuses the filename in their yum repo. Effectively unpublishing the old copy. While this is poor practice on their part, it's breaking Pulp's rpm content management.

On publish, Pulp doesn't maintain these packages as separate entities, symlinks and metadata do not match. They are stored correctly on sync in pulp's content/units/rpm directory tree. However, the published symlinks use the upstream filename and not a computed nevra. This results in "content does not match metadata" errors from yum and a general corruption of the repository. Not only are multiple versions not only accessible but the sync process doesn't seem to handle this gracefully either. New metadata, old package on disk.

# Sync'd content organized by digest (yay).
# sync'd filenames aren't nevra (whatevs, we got us some digests)
[root@katello ~]$ find /var/lib/pulp/content/units/rpm -name 'CentrifyDC-5.4.3-*x86_64.rpm'
/var/lib/pulp/content/units/rpm/56/0e778319ec52a6aa75e7b72345bfd1fa11a91f4b112b36d30ed2c256ce15e5/CentrifyDC-5.4.3-rhel5.x86_64.rpm
/var/lib/pulp/content/units/rpm/a4/39ee653ddd3a4203ec949de3c8ff69494b5bf5d00798536bbbbd5eaeb46863/CentrifyDC-5.4.3-rhel5.x86_64.rpm
[root@katello ~]$ find /var/lib/pulp/content/units/rpm -name 'CentrifyDC-5.4.3-*x86_64.rpm' -execdir rpm -qp {} +
CentrifyDC-5.4.3-905.x86_64
CentrifyDC-5.4.3-887.x86_64

# Published content symlinks are named by filename (boo)
[root@katello ~]# sudo find -L /var/lib/pulp/published/yum/https/repos/Trustwave/Library -name 'CentrifyDC-5.4.3*.x86_64.rpm'
/var/lib/pulp/published/yum/https/repos/Trustwave/Library/custom/centrify/centrify-centrifydc-rpms/Packages/c/CentrifyDC-5.4.3-rhel5.x86_64.rpm
[root@katello ~]# readlink /var/lib/pulp/published/yum/https/repos/Trustwave/Library/custom/centrify/centrify-centrifydc-rpms/Packages/c/CentrifyDC-5.4.3-rhel5.x86_64.rpm
/var/lib/pulp/content/units/rpm/56/0e778319ec52a6aa75e7b72345bfd1fa11a91f4b112b36d30ed2c256ce15e5/CentrifyDC-5.4.3-rhel5.x86_64.rpm
[root@katello ~]# rpm -qp /var/lib/pulp/published/yum/https/repos/Trustwave/Library/custom/centrify/centrify-centrifydc-rpms/Packages/c/CentrifyDC-5.4.3-rhel5.x86_64.rpm
CentrifyDC-5.4.3-905.x86_64

# Example yum repoquery attempt (though this only shows two versions, sorry)
[root@sandbox ~]# repoquery --location -a CentrifyDC
https://smartproxy.com/pulp/repos/Trustwave/development/ccv-biz-portal-el7/custom/centrify/centrify-centrifydc-rpms/Packages/c/CentrifyDC-5.4.1-rhel4.i386.rpm
https://smartprox.com/pulp/repos/Trustwave/development/ccv-biz-portal-el7/custom/centrify/centrify-centrifydc-rpms/Packages/c/CentrifyDC-5.4.3-rhel5.x86_64.rpm
[root@sandbox ~]# repoquery -a CentrifyDC
CentrifyDC-0:5.4.1-455.i386
CentrifyDC-0:5.4.3-905.x86_64

While I've reported the issue to Centrify, Pulp should not be depending on correct package naming standards from third-parties. I think published content should have symlinks renamed to "$nevra.rpm" to ensure correctness.

In our case, this has caused our content to become inaccessible. I don't know when content from the units directory will be removed. But we've basically lost access to the older packages and yum cannot handle the upgrading since the published files are incorrect packages.

In case anyone else runs into this with Centrify, feel free to reference the case we filed, "180419-159679: rpm repo doesn't use unique rpm names for packages".

Actions #1

Updated by dekimsey almost 6 years ago

Just some version information for posterity.

$ cat /etc/redhat-release
CentOS Linux release 7.3.1611 (Core)
$ rpm -q katello
katello-3.4.2-1.el7.noarch
$ rpm -qa | grep pulp | sort
pulp-admin-client-2.12.2-1.el7.noarch
pulp-client-1.0-3.noarch
pulp-docker-plugins-2.3.0-1.el7.noarch
pulp-katello-1.0.2-1.el7.noarch
pulp-puppet-plugins-2.12.2-1.el7.noarch
pulp-puppet-tools-2.12.2-1.el7.noarch
pulp-rpm-admin-extensions-2.12.2-1.el7.noarch
pulp-rpm-plugins-2.12.2-1.el7.noarch
pulp-selinux-2.12.2-1.el7.noarch
pulp-server-2.12.2-1.el7.noarch
python-isodate-0.5.0-4.pulp.el7.noarch
python-kombu-3.0.33-6.pulp.el7.noarch
python-pulp-bindings-2.12.2-1.el7.noarch
python-pulp-client-lib-2.12.2-1.el7.noarch
python-pulp-common-2.12.2-1.el7.noarch
python-pulp-docker-common-2.3.0-1.el7.noarch
python-pulp-oid_validation-2.12.2-1.el7.noarch
python-pulp-puppet-common-2.12.2-1.el7.noarch
python-pulp-repoauth-2.12.2-1.el7.noarch
python-pulp-rpm-common-2.12.2-1.el7.noarch
python-pulp-streamer-2.12.2-1.el7.noarch
rubygem-smart_proxy_pulp-1.3.0-1.el7.noarch
Actions #2

Updated by dekimsey almost 6 years ago

Looking up the packages for CentrifyDC-5.4.3-887

$ curl https://katello.trustwave.com//katello/api/packages/40d9a24c-b9c4-48e4-a9b2-6a56a31f0e94
{
id: 96963,
uuid: "40d9a24c-b9c4-48e4-a9b2-6a56a31f0e94",
name: "CentrifyDC",
version: "5.4.3",
release: "887",
arch: "x86_64",
epoch: "0",
summary: "Centrify DirectControl Agent",
filename: "CentrifyDC-5.4.3-rhel5.x86_64.rpm",
sourcerpm: "CentrifyDC-5.4.3-887.src.rpm",
checksum: "cec7c8d4f67fdf40e76cc42e6c59452d46f59d2d",
nvrea: "CentrifyDC-5.4.3-887.x86_64",
nvra: "CentrifyDC-5.4.3-887.x86_64",
hosts_available_count: 0,
hosts_applicable_count: 0,
description: "RPM to install Centrify DirectControl on Linux x86 platforms.",
license: "BSD with portions copyright (c) Centrify Corporation 2006-2017 and licensed under Centrify End User License Agreement",
buildhost: "build75-rhel5-x86-64.centrify.com",
vendor: null,
relativepath: "CentrifyDC-5.4.3-rhel5.x86_64.rpm",
children: { },
checksumtype: "sha1",
size: 22285042,
url: "http://www.centrify.com/",
build_time: 1512566040,
group: "Applications/System",
requires: [],
provides: [
"CentrifyDC-5.4.3-887"
],
files: [],
human_readable_size: "21.3 MB"
}

Looking up the packages for CentrifyDC-5.4.3-905

$ curl https://katello.trustwave.com/katello/api/packages/05ee84d8-8328-4646-83d3-d4869f4f9efe
{
id: 101950,
uuid: "05ee84d8-8328-4646-83d3-d4869f4f9efe",
name: "CentrifyDC",
version: "5.4.3",
release: "905",
arch: "x86_64",
epoch: "0",
summary: "Centrify DirectControl Agent",
filename: "CentrifyDC-5.4.3-rhel5.x86_64.rpm",
sourcerpm: "CentrifyDC-5.4.3-905.src.rpm",
checksum: "5a7806d50b6847d4b6b713ca25dde8d71aa32012",
nvrea: "CentrifyDC-5.4.3-905.x86_64",
nvra: "CentrifyDC-5.4.3-905.x86_64",
hosts_available_count: 111,
hosts_applicable_count: 813,
description: "RPM to install Centrify DirectControl on Linux x86 platforms.",
license: "BSD with portions copyright (c) Centrify Corporation 2006-2017 and licensed under Centrify End User License Agreement",
buildhost: "build75-rhel5-x86-64.centrify.com",
vendor: null,
relativepath: "CentrifyDC-5.4.3-rhel5.x86_64.rpm",
children: { },
checksumtype: "sha1",
size: 22267710,
url: "http://www.centrify.com/",
build_time: 1522287156,
group: "Applications/System",
requires: [],
provides: [],
files: [],
human_readable_size: "21.2 MB"
}
Actions #3

Updated by dalley almost 6 years ago

  • Triaged changed from No to Yes
Actions #4

Updated by bmbouter almost 5 years ago

  • Status changed from NEW to CLOSED - WONTFIX

Pulp 2 is approaching maintenance mode, and this Pulp 2 ticket is not being actively worked on. As such, it is being closed as WONTFIX. Pulp 2 is still accepting contributions though, so if you want to contribute a fix for this ticket, please reopen or comment on it. If you don't have permissions to reopen this ticket, or you want to discuss an issue, please reach out via the developer mailing list.

Actions #5

Updated by bmbouter almost 5 years ago

  • Tags Pulp 2 added

Also available in: Atom PDF