Pulp

04/09/2021

• 
  ggainey Pulp

  10:32 PM · Closed issue

  Closed as dup 8540 Issue #8539 (CLOSED - DUPLICATE): pulpcore 3.7 branch needs PyYAML dep raised to include 5.4.x to fix CVE-2020-14343

  CVE-2020-14343 (Improper Input Validation in PyYAML)
  * https://github.com/advisories/GHSA-8q59-q68h-6hv4
  * https://nvd.nist.gov/vuln/detail/CVE-2020-14343
  * https://github.com/yaml/pyyaml/issues/420#issuecomment-663673966
  pulpcore...
• 
  ggainey Pulp

  06:36 PM · Closed issue

  Applied in changeset commit:pulpcore|575f9713a7ab979309515b6208ae4d0c40cff0f3. Backport #8485 (MODIFIED): Backport to 3.7 artifact stage fixes which affect pulp 2to3 migration

  Fixes to backport:
  https://pulp.plan.io/issues/7876
  https://pulp.plan.io/issues/8377
  https://pulp.plan.io/issues/8489 (this is important only together with 8377)
  Cherry-pick is clean is they are performed in the order.
• 
  ggainey Pulp

  06:36 PM · Committed changeset

  backports #8489
  https://pulp.plan.io/issues/8489
  closes #8485
  https://pulp.plan.io/issues/8485
  (cherry picked from commit 47e5cc2a69464caaefbb50f994de03d72fb780e4) Revision 575f9713 (pulpcore): Teach artifact_stages:_needed_remote_artifacts() to not return dupes.
• 
  ggainey Pulp

  06:36 PM · Committed changeset

  Only encountered when 2to3-migrating specific content in specific orders.
  backports #8377
  https://pulp.plan.io/issues/8377
  re #8485
  https://pulp.plan.io/issues/8485
  (cherry picked from commit b23c9294b9ed555078053b4968ed5b933ab1e9c9) Revision 94a0c35b (pulpcore): Fixed artifact_stages edge case for multi-artifact/multi-remote batches.
• 
  ggainey Debian Support

  04:45 PM · Created issue

  Issue #8533 (NEW): PackageReleaseComponentSerializer - package and release-component use identical queries

  See the code here : https://github.com/pulp/pulp_deb/blob/main/pulp_deb/app/serializers/content_serializers.py#L551-L567
  Looks like 'package' is a cut-and-paste of 'release_component', which I suspect is Bad.

04/08/2021

• 
  ggainey Pulp

  10:23 PM · Commented on issue

  @amblikmees,
  This feels like it's https://pulp.plan.io/issues/8377, which will be released in pulpcore-3.12 'Real Soon Now' Issue #8514: Foreman Katello: Unable to migrate pulp2 to pulp3

  Hello!
  Im trying to migrate Foreman Katello content from pulp2 to pulp3 and it seems that there might be a pulp3 issue.
  Here is the migration log from dynflow console:
  ~~~ python
  2: Actions::Pulp3::ContentMigration (skipped) [ ...
• 
  ggainey Migration Plugin

  10:12 PM · Commented on issue

  See testing-document here: https://hackmd.io/@ggainey/Pulp3-FIPS-matrix Task #7782: Ensure migration plugin runs in FIPS mode and respects the ALLOWED_CONTENT_CHECKSUMS configuraiton

  Katello needs to run in a FIPS-enabled environment with the migration plugin.
  The prerequisite for this task would be pulpcore, pulp_file, pulp_container and pulp_rpm being able to function in the FIPS environment.
  
• 
  ggainey Migration Plugin

  09:51 PM · Edited issue

  Issue #8453 (ASSIGNED): Functional tests fail when FIPS is enabled

  ~~~ text
  pulp_2to3_migration/tests/functional/file_base.py:72: in run_migration
  task = monitor_task(mp_run_response.task)
  _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ...
• 
  ggainey "[digital envelope routines: EVP_DigestInit_ex] disabled for FIPS" is what we get when running an unpatched Django, in a FIPS environment. We need to apply this patch:
  https://github.com/theforeman/pulpcore-packaging/blob/rpm/3.7/pac...

  09:51 PM · Commented on issue
• 
  ggainey Pulp

  05:32 PM · Closed issue

  This is a symptom of a problem in pulpcore that has been in fixed and will be in the 3.12 release of pulpcore Issue #8518 (CLOSED - DUPLICATE): Can't browse rpm repo listing

  After updating from pulpcore 3.9 to 3.11 I can no longer browse the list of repositories in Pulp. Trying to access '/pulp/content/' results in a 500 error with following error from pulpcore-content service:
  ~~~
  [2021-04-07 06:14:26 +...