You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@bigtop.apache.org by "iwasakims (via GitHub)" <gi...@apache.org> on 2025/05/04 06:55:28 UTC

[PR] BIGTOP-4417. Fix failure of importing package signining keys on Rocky [bigtop]

iwasakims opened a new pull request, #1344:
URL: https://github.com/apache/bigtop/pull/1344

   https://issues.apache.org/jira/browse/BIGTOP-4417
   
   Importing package signing keys fails since [RHEL 9 deprecated DHA-1 for signing](https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted-rhel-9).
   
   This PR updates the manifest for calling `update-crypto-policies --set LEGACY` before importing the KEYS as a temporal fix. Since the update-crypto-policies is not available on Fedora 40 and openEuler 22.03, it is in the conditional.
   
   KEYS should be updated before majority of OS distros deprecate the SHA-1 as package signing key.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@bigtop.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] BIGTOP-4417. Fix failure of importing package signining keys on Rocky [bigtop]

Posted by "iwasakims (via GitHub)" <gi...@apache.org>.
iwasakims commented on PR #1344:
URL: https://github.com/apache/bigtop/pull/1344#issuecomment-2869905922

   I merged this to master and branch-3.4. Thanks, @sekikn.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@bigtop.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] BIGTOP-4417. Fix failure of importing package signining keys on Rocky [bigtop]

Posted by "iwasakims (via GitHub)" <gi...@apache.org>.
iwasakims merged PR #1344:
URL: https://github.com/apache/bigtop/pull/1344


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@bigtop.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] BIGTOP-4417. Fix failure of importing package signining keys on Rocky [bigtop]

Posted by "iwasakims (via GitHub)" <gi...@apache.org>.
iwasakims commented on PR #1344:
URL: https://github.com/apache/bigtop/pull/1344#issuecomment-2849046037

   I tested this against the packages uploaded for preparing release of Bigtop 3.4.0.
   
   ```
   ./docker-hadoop.sh \
       --create 1 \
       --image bigtop/puppet:3.4.0-rockylinux-9 \
       --memory 16g \
       --repo http://repos.bigtop.apache.org/releases/3.4.0/rockylinux/9/x86_64 \
       --stack zookeeper \
       --smoke-tests zookeeper
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@bigtop.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] BIGTOP-4417. Fix failure of importing package signining keys on Rocky [bigtop]

Posted by "sekikn (via GitHub)" <gi...@apache.org>.
sekikn commented on PR #1344:
URL: https://github.com/apache/bigtop/pull/1344#issuecomment-2869771532

   +1, thanks @iwasakims.
   
   Before applying patch:
   ```
   $ cd provisioner/docker
   $ ./docker-hadoop.sh -d -dcp -C config_rockylinux-9.yaml -F docker-compose-cgroupv2.yml -L -r file:///bigtop-home/output -k zookeeper -c 1
   $ ./docker-hadoop.sh -dcp -e 1 update-crypto-policies --show
   DEFAULT
   ```
   
   After:
   ```
   $ cd -                                                                                                                   
   $ curl -sL https://github.com/apache/bigtop/pull/1344.diff | git apply
   $ cd -
   $ ./docker-hadoop.sh -d -dcp -C config_rockylinux-9.yaml -F docker-compose-cgroupv2.yml -L -r file:///bigtop-home/output -k zookeeper -c 1
   $ ./docker-hadoop.sh -dcp -e 1 update-crypto-policies --show
   LEGACY
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@bigtop.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org