Jira (PUP-1613) Puppet parsing rpm versions incorrectly, uses downgrade which causes Multilib errors

[John Simpson (JIRA)]

Title: Message Title

John Simpson commented on PUP-1613   Re: Puppet parsing rpm versions incorrectly, uses downgrade which causes Multilib errors I'm not 100% sure if this is the same issue, but it feels like it's closely related. Error: /Stage[main]/Base/Util::Packagemin[openssl]/Package[openssl]/ensure: change from 1.0.1e-42.el6 to 1.0.1e-42.el6_7.1 failed: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y install openssl-1.0.1e-42.el6_7.1' returned 1: Error: Multilib version problems found. This often means that the root cause is something else and multilib version checking is just pointing out that there is a problem. Eg.:   1. You have an upgrade for openssl which is missing some dependency that another package requires. Yum is trying to solve this by installing an older version of openssl of the different architecture. If you exclude the bad architecture yum will tell you what the root cause is (which package requires what). You can try redoing the upgrade with --exclude openssl.otherarch ... this should give you an error message showing the root cause of the problem.   2. You have multiple architectures of openssl installed, but yum can only see an upgrade for one of those arcitectures. If you don't want/need both architectures anymore then you can remove the one with the missing update and everything will work.   3. You have duplicate versions of openssl installed already. You can use "yum check" to get yum show these errors.   ...you can also use --setopt=protected_multilib=false to remove this checking, however this is almost never the correct thing to do as something else is very likely to go wrong (often causing much more problems).   Protected multilib versions: openssl-1.0.1e-42.el6_7.1.x86_64 != openssl-1.0.1e-42.el6.i686 This happened with OSP 3.7.2, both server and agent running on CentOS 6 x86_64. I've since worked around it by manually running yum update openssl on all the machines, but having to write something like "for s in $( cat servers ) ; do echo "===== $s =====" ; ssh root@$s yum update openssl ; done" just feels dirty somehow, y'know? Add Comment   This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.