Project

Profile

Help

Test #4357

Updated by bherring about 5 years ago

h2. Problem 

 When running nightly rhel76-fips testing, there were 500 errors [0]    on jenkins tests since 1/23 and issues in journalctl with django [1]. 

 After talking with asmacdo and daviddavis, it appears this may be a django being pulled from EPEL and not from our Pulp 2 repos on build [2][3] 

 h2. Testing 

 It was determined this was the result of EPEL django precedence over the pulp.repo version that was built. This issue has been seen before. 

 Forced installation of the *python2-django-1.11.17-1* from the fedorapeople repo [3] and restart of services (or with a hammer of *shutdown now -r*) resulted in a functioning pulp install. 

 <pre> 
 [root@rhel76-fips ~]# journalctl -f 
 -- Logs begin at Mon 2019-01-28 12:33:13 EST. -- 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: kombu.transport.qpid:INFO: Connected to qpid with SASL mechanism ANONYMOUS 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424) Internal Server Error: /pulp/api/v2/status/ 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424) Traceback (most recent call last): 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424)     File "/usr/lib/python2.7/site-packages/django/core/handlers/base.py", line 131, in get_response 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424)       response = middleware_method(request, response) 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424)     File "/usr/lib/python2.7/site-packages/django/middleware/http.py", line 23, in process_response 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424)       set_response_etag(response) 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424)     File "/usr/lib/python2.7/site-packages/django/utils/cache.py", line 109, in set_response_etag 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424)       response['ETag'] = quote_etag(hashlib.md5(response.content).hexdigest()) 
 Jan 28 12:34:38 rhel76-fips pulp[5046]: django.request:ERROR: (5046-27424) ValueError: error:060800A3:digital envelope routines:EVP_DigestInit_ex:disabled for fips 
 </pre> 

 h2. Actions 

 Pulp-dev determined this issue as a low priority issue where documentation exercise may happen as a result of this issue. 

 For QE, this is a critical breakage of CI as the ansible install fails on FIPS installation and puts the box into a non-testable state. QE will be opening a related Urgent test tracker to fix the issue in the pulp-ci installer to fix mission critical work. 

 h2. References 

 [0] - https://paste.fedoraproject.org/paste/bPRtYPa4ZCLShrZ7VUMqMQ 
 [1] - https://pulp-jenkins.rhev-ci-vms.eng.rdu2.redhat.com/view/Pulp%202%20-%20Master/job/pulp-2-master-dev-rhel7-fips/228/ 
 [2]    - https://paste.fedoraproject.org/paste/6eHTS1Uc3NkC0hohvKe-TA    [from the affected 2.19a1-nightly box under test 
 [3] - 2.11.17-1 https://repos.fedorapeople.org/repos/pulp/pulp/v2/testing/automation/2.19/stage/7Server/x86_64/ 
 [4] - https://wiki.centos.org/PackageManagement/Yum/Priorities

Back