Re: Warning: DNF is unprotected
Am Fr., 25. Aug. 2023 um 08:21 Uhr schrieb Adam Williamson : > > On Thu, 2023-08-24 at 21:23 +0200, Tomasz Torcz wrote: > > On Thu, Aug 24, 2023 at 07:39:07PM +0200, Robert-André Mauchin wrote: > > > Hello, > > > > > > Just a heads-up: for the upgrade to DNF5 in F39, we unprotected the DNF > > > package, which leaves all of our users vulnerable to a removal of DNF. > > > > > > > > > We have one affected user here: > > > https://bsd.network/@claudiom/110944941506724767 > > > > Not just on, #fedora-qa: > > 101441 I've just notice my rawhide system is without `dnf` > > command, and this ling dnf-automatic timers do not work. There is `dnf5` > > command available, though > > That's likely not the result of lack of protection, but just of running > Rawhide. If you ran Rawhide through the period when dnf5 was made the > provider of /usr/bin/dnf , then you didn't automatically get dnf > installed back when you updated to the post-revert versions. This is by > design, or rather, it's unfortunate but it would be rather icky to try > and 'fix' it, so folks decided not to. You're expected to be able to do > 'dnf5 install dnf' if you run Rawhide and want it back. Not really. On my Fedora 38 with updates, `/etc/dnf/protected.d/dnf.conf` looks like this: ``` # DNF is obsoleted in Fedora 39 by DNF 5 and should no longer be marked as protected. # dnf ``` It's the result of an update on 05/23 (or just before) which unprotected dnf, protected python3-dnf and with the following diff in dnf related packages: ``` -dnf-data,noarch,dnf-data-4.15.0-1.fc38 -dnf,noarch,dnf-4.15.0-1.fc38 -dnf-plugins-core,noarch,dnf-plugins-core-4.4.0-1.fc38 -dnf-utils,noarch,dnf-utils-4.4.0-1.fc38 +dnf-data,noarch,dnf-data-4.15.1-1.fc38 +dnf,noarch,dnf-4.15.1-1.fc38 +dnf-plugins-core,noarch,dnf-plugins-core-4.4.1-1.fc38 +dnf-utils,noarch,dnf-utils-4.4.1-1.fc38 -libdnf,x86_64,libdnf-0.70.0-1.fc38 +libdnf,x86_64,libdnf-0.70.1-1.fc38 -python3-dnf,noarch,python3-dnf-4.15.0-1.fc38 -python3-dnf-plugins-core,noarch,python3-dnf-plugins-core-4.4.0-1.fc38 +python3-dnf,noarch,python3-dnf-4.15.1-1.fc38 +python3-dnf-plugins-core,noarch,python3-dnf-plugins-core-4.4.1-1.fc38 -python3-libdnf,x86_64,python3-libdnf-0.70.0-1.fc38 +python3-libdnf,x86_64,python3-libdnf-0.70.1-1.fc38 -yum,noarch,yum-4.15.0-1.fc38 +yum,noarch,yum-4.15.1-1.fc38 ``` [Yes, I store this info redantly on purpose for easy diffing/splitting.] Currently my dnf is at dnf-4.16.2-1.fc38.noarch, config is unchanged, and it would happily remove itself. (I also installed dnf5 recently, it didn't change that config and is not aliased.) Michael ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Warning: DNF is unprotected
On Thu, 2023-08-24 at 21:23 +0200, Tomasz Torcz wrote: > On Thu, Aug 24, 2023 at 07:39:07PM +0200, Robert-André Mauchin wrote: > > Hello, > > > > Just a heads-up: for the upgrade to DNF5 in F39, we unprotected the DNF > > package, which leaves all of our users vulnerable to a removal of DNF. > > > > > > We have one affected user here: > > https://bsd.network/@claudiom/110944941506724767 > > Not just on, #fedora-qa: > 101441 I've just notice my rawhide system is without `dnf` command, > and this ling dnf-automatic timers do not work. There is `dnf5` command > available, though That's likely not the result of lack of protection, but just of running Rawhide. If you ran Rawhide through the period when dnf5 was made the provider of /usr/bin/dnf , then you didn't automatically get dnf installed back when you updated to the post-revert versions. This is by design, or rather, it's unfortunate but it would be rather icky to try and 'fix' it, so folks decided not to. You're expected to be able to do 'dnf5 install dnf' if you run Rawhide and want it back. -- Adam Williamson (he/him/his) Fedora QA Fedora Chat: @adamwill:fedora.im | Mastodon: @ad...@fosstodon.org https://www.happyassassin.net ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Re: Warning: DNF is unprotected
On Thu, Aug 24, 2023 at 07:39:07PM +0200, Robert-André Mauchin wrote: > Hello, > > Just a heads-up: for the upgrade to DNF5 in F39, we unprotected the DNF > package, which leaves all of our users vulnerable to a removal of DNF. > > > We have one affected user here: > https://bsd.network/@claudiom/110944941506724767 Not just on, #fedora-qa: 101441 I've just notice my rawhide system is without `dnf` command, and this ling dnf-automatic timers do not work. There is `dnf5` command available, though -- Tomasz Torcz 72->| 80->| to...@pipebreaker.pl 72->| 80->| ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
Warning: DNF is unprotected
Hello, Just a heads-up: for the upgrade to DNF5 in F39, we unprotected the DNF package, which leaves all of our users vulnerable to a removal of DNF. And since the delaying of DNF5, we haven't re-protected it. https://github.com/rpm-software-management/dnf/commit/352b174a0b4ce2048ef1a25b785f20449e2addc2 On a F38 system: $ cat /etc/dnf/protected.d/dnf.conf # DNF is obsoleted in Fedora 39 by DNF 5 and should no longer be marked as protected. # dnf We have one affected user here: https://bsd.network/@claudiom/110944941506724767 I've filed: https://github.com/rpm-software-management/dnf/issues/1982 If anyone can fix this quickly, that would be neat. I'm not sure if the config(noreplace) should be brought back in the SPEC so I leave this to the specialists. Thanks. Robert-André ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
