Info:
Good news first: nothing was removed. Because allowerasing is now false, dnf stopped safely and left vlim02 as it was. (The changed=2 came from the setup tasks, not from packages.)
What's wrong: it's the same kind of mismatch as openssh, but this time between two Red Hat repos:
- Your repo only has BaseOS packages. Two of them,
perl-libs/perl-interpreterandlibgomp, are newer in the Nov download. - Their partner packages come from AppStream, which isn't in your repo at all:
| Installed (AppStream) | Locked to | New BaseOS version in repo |
|---|---|---|
perl, perl-devel, perl-utils |
perl 5.26.3-423.el8_10 | perl-libs / perl-interpreter -423.el8_10.1 |
gcc |
8.5.0-28 | libgomp 8.5.0-30 |
So dnf can't update the BaseOS half without the AppStream half, and it refuses rather than removing anything.
Step 1: get the full list from every server, so you only fix this once:
cd /etc/ansible/tricycle_ansible_master
ansible all -i inventories/<env>/hosts_<env>.yml --ask-vault-pass -u <mech-id> -b -m shell \
-a "dnf update --assumeno 2>&1 | grep -oE 'package [^ ]+ from @System' | sort -u || echo CLEAN"
Each line names an installed package that needs a newer partner.
Step 2: pick a fix.
- A. Add the matching AppStream packages (recommended if the list is short). Download them from Red Hat the same way you got openssh: the perl ones at
5.26.3-423.el8_10.1, and the gcc ones (such asgccandcpp) at8.5.0-30.el8_10. Copy them into/var/www/html/rhel-8-10-nov2026. Run wizard Step 2 and answeryto "use existing folder". Then repeat the Step 1 check until it says CLEAN. - B. Skip perl and gcc this round. Add them to the playbook's existing "Exclude some packages" list so everything else gets patched. They stay at their current version until next month. This is a playbook change, so it needs your senior engineer's OK.
For RBB-447: the monthly repo needs AppStream as well as BaseOS. Otherwise this will happen every month with different packages. It's the same gap that caused the openssh problem.
Send me the Step 1 output and I'll give you the exact list of files to download.
Comments
Post a Comment