Skip to content

Unrot the libapparmor1 and libexpat1 qemu pins - #21

Open
buyemune-sys wants to merge 1 commit into
pg83:mainfrom
buyemune-sys:fix/unrot-qemu-pins-2
Open

buyemune-sys wants to merge 1 commit into
pg83:mainfrom
buyemune-sys:fix/unrot-qemu-pins-2

Conversation

@buyemune-sys

Copy link
Copy Markdown

The problem

Fetch x86_64 fails on a cold corpus cache, on main (run 36595278054) and on every open PR:

FAIL $(B)/tst/packages/libapparmor1_4.0.1really4.0.1-0ubuntu0.24.04.7_amd64.deb: command exited 1: ...
urllib.error.HTTPError: HTTP Error 404: Not Found

Ubuntu's pool keeps only the version a release currently ships, and security updates have replaced two of the qemu boot test's pins since they were set:

package pinned pool now
libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.7 4.0.1really4.0.1-0ubuntu0.24.04.9
libexpat1 2.6.1-2ubuntu0.4 2.6.1-2ubuntu0.6

Once the fetch fails, every x86-64 job that depends on it is skipped; aarch64 carries no such pins and stays green.

The fix

Both pins in build.py move to the versions noble-updates ships now, as the comment above qemu_ubuntu_pool prescribes. The other twelve pins are still served.

Verification

  • a HEAD request against every URL in build.py: these two were the only non-200 answers;
  • the new SHA256s match dists/noble-updates/main/binary-amd64/Packages;
  • tst/download.py fetches and verifies both new files.

Security updates replaced libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.7
with .9 and libexpat1 2.6.1-2ubuntu0.4 with ubuntu0.6, and the pool kept
only the new files, so the cold-cache Fetch x86_64 job answers 404 and
every x86-64 job behind it is skipped. Both pins move to the versions
noble-updates ships now; their SHA256s match the archive's Packages index.
The other twelve pins are still served.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant