Bug 10254 - [Update candidate: urpmi] All Nonfree media sources are enabled when added in MCC
Summary: [Update candidate: urpmi] All Nonfree media sources are enabled when added in...
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 3
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA3-64-OK MGA3-32-OK
Keywords: validated_update
: 10302 (view as bug list)
Depends on:
Blocks: 10373
  Show dependency treegraph
 
Reported: 2013-05-24 13:29 CEST by Gerald
Modified: 2014-05-08 18:06 CEST (History)
8 users (show)

See Also:
Source RPM: urpmi
CVE:
Status comment:


Attachments
urpmi.cfg (7.05 KB, text/plain)
2013-05-24 13:39 CEST, Gerald
Details
Output of urpmi.addmedia --debug (23.15 KB, text/plain)
2013-05-25 05:12 CEST, Dave Hodgins
Details

Description Gerald 2013-05-24 13:29:01 CEST
Description of problem:

All Nonfree media sources are enabled by default when they are added in MCC
(Configure media - Add), including backports and testing media sources.




Reproducible: 

Steps to Reproduce:
Comment 1 Gerald 2013-05-24 13:39:48 CEST
Created attachment 4041 [details]
urpmi.cfg
Comment 2 Manuel Hiebel 2013-05-24 15:59:29 CEST
Is this a new install ? if yes what for media did you use ?

Keywords: (none) => NEEDINFO
Source RPM: (none) => rpmdrake

Comment 3 Gerald 2013-05-24 18:14:58 CEST
(In reply to Manuel Hiebel from comment #2)
> Is this a new install ? if yes what for media did you use ?

Yes, this is a new install from Mageia-3-x86_64-DVD.iso

Keywords: NEEDINFO => (none)

Comment 4 Manuel Hiebel 2013-05-24 19:01:55 CEST
then it is strange was nobody else noticed that on all qa test (or nobody else in the bugzilla)

Status: NEW => UNCONFIRMED
Component: Release (media or process) => RPM Packages
Ever confirmed: 1 => 0

Manuel Hiebel 2013-05-24 20:04:01 CEST

CC: sysadmin-bugs => thierry.vignaud

Thierry Vignaud 2013-05-24 21:34:16 CEST

Status: UNCONFIRMED => ASSIGNED
Ever confirmed: 0 => 1
Source RPM: rpmdrake => urpmi

Comment 5 Philippe Leblanc 2013-05-24 21:53:05 CEST
I can confirm. I did a fresh install from the same media (64bit DVD) and all nonfree repos are selected.

CC: (none) => philippe.l

Comment 6 Thierry Vignaud 2013-05-24 22:00:38 CEST
Fixed in git

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED

Adrien D 2013-05-24 22:14:21 CEST

CC: (none) => adrien_d

Comment 7 Thierry Vignaud 2013-05-24 23:14:20 CEST
Please let in this urpmi update for mga2

Advisory:
==========
This update of urpmi fixes a bug where extra tainted and/or nonfree media (Backports*, Updates Testing) would be enabled if  tainted and/or nonfree packages would be installed (mga#10254).

Status: RESOLVED => REOPENED
Resolution: FIXED => (none)
Assignee: bugsquad => qa-bugs

Thierry Vignaud 2013-05-24 23:14:50 CEST

Summary: All Nonfree media sources are enabled when added in MCC => [Update candidate: urpmi] All Nonfree media sources are enabled when added in MCC

Comment 8 Thierry Vignaud 2013-05-24 23:15:15 CEST
packages are *urpmi*7.22.2*
Comment 9 Adrien D 2013-05-24 23:54:03 CEST
I have updated urpmi.

I have removed medias with urpmi.removemedia -a

I added medias with the GUI => Same problem.
Comment 10 Thierry Vignaud 2013-05-25 00:00:03 CEST
As of urpmi-7.22.2, I cannot reproduce what you say.
I only got the 4 (Tainted|NonFree) (Release|Updates) that got enabled
Comment 11 Dave Hodgins 2013-05-25 05:00:15 CEST
Bug confirmed in a new install of Mageia 3, where I
added the media after installation.

urpmq --list-media active
Core Release
Core Updates
Nonfree Backports
Nonfree Backports Testing
Nonfree Release
Nonfree Updates
Nonfree Updates Testing

I'll attach more output.

CC: (none) => davidwhodgins

Comment 12 Thierry Vignaud 2013-05-25 05:03:40 CEST
We don't need bug confirmation anymore since it's already fixed
Comment 13 Dave Hodgins 2013-05-25 05:12:37 CEST
Created attachment 4048 [details]
Output of urpmi.addmedia --debug

During all prior testing of Mageia 3, I was always able to add my local
mirror using
urpmi.addmedia --distrib http://192.168.10.101/distrib/3/i586
even though my local repo doesn't have the srpms or debug repos.

Granted, I was using cauldron, not 3.

Now it's failing with no metadata found for medium "Nonfree Backports Debug"

So I temporarily edited distrib/3/i586/media/media_info/media.cfg on my
local repo, removing the srpm  and debug repos, after which I was able to
add the repos, but then found all existing Nonfree repos were enabled.

So something is triggering trying to activate media that shouldn't be activated,
which, if not present, is preventing the addition of the repos.

This was a new install (lxde) using the i586 dvd.

Note that I never saw this during qa testing of the iso images, and currently
have no idea what is triggering it.
Comment 14 Dave Hodgins 2013-05-25 05:17:36 CEST
After installing the urpmi update, removing all media, and readding
my local repo ...

urpmq --list-media active
Core Release
Core Updates
Nonfree Release
Nonfree Updates

Testing complete on Magiea 3 i586.

I'll test x86_64 shortly.
Comment 15 Dave Hodgins 2013-05-25 05:35:46 CEST
Testing complete on Mageia 3 x86_64

Could someone from the sysadmin team push the srpm
urpmi-7.27.2-1.mga3.src.rpm
from Mageia 3 Core Updates Testing to Core Updates.

Advisory: This update of urpmi fixes a bug where extra tainted and/or nonfree media (Backports*, Updates Testing) would be enabled if  tainted and/or nonfree packages would be installed (mga#10254).

https://bugs.mageia.org/show_bug.cgi?id=10254

Keywords: (none) => validated_update
Hardware: x86_64 => All
Whiteboard: (none) => MGA3-64-OK MGA3-32-OK
CC: (none) => sysadmin-bugs

Comment 16 Thomas Backlund 2013-05-25 20:06:41 CEST
Oh, this one can bite us hard for all of mga3 lifetime :/

Update pushed:
https://wiki.mageia.org/en/Support/Advisories/MGAA-2013-0022

Status: REOPENED => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED

Comment 17 Thomas Backlund 2013-05-26 11:37:49 CEST
I wonder if this update would have been better if it in %post would have disabled all the:

Backports
Backports Testing
Updates Testing

medias to save all users that dont check what happends when they install an update...
Comment 18 Thierry Vignaud 2013-05-26 21:45:07 CEST
Yeah I though about that too, but after pushing this.
Should a %triggerpost though.
We can still push another one...
Comment 19 Thomas Backlund 2013-05-26 22:04:15 CEST
I think we should do it, or we will end up with a lot of endusers getting packages installed that normally only QA or advanced users installs...
and that will flood us with bugreports...

I do realize that some wants the testing & other medias enabled, and this will make some of them have to enable those medias again, but I think thats the better alternative.
Comment 20 Nicolas Vigier 2013-05-26 22:06:23 CEST
Yes, it looks like a good thing to do.

CC: (none) => boklm

Comment 21 Manuel Hiebel 2013-05-27 00:39:55 CEST
*** Bug 10302 has been marked as a duplicate of this bug. ***

CC: (none) => isolde

Comment 22 Dave Hodgins 2013-05-27 05:28:56 CEST
(In reply to Thomas Backlund from comment #19)
> I think we should do it, or we will end up with a lot of endusers getting
> packages installed that normally only QA or advanced users installs...
> and that will flood us with bugreports...
> 
> I do realize that some wants the testing & other medias enabled, and this
> will make some of them have to enable those medias again, but I think thats
> the better alternative.

If we do, please include a README.upgrade.urpmi,
explaining that they are being disabled, to
ensure anyone who does want them enabled will
know to re-enable them.
Comment 23 Sander Lepik 2013-05-27 10:49:13 CEST
(In reply to Dave Hodgins from comment #22)
> If we do, please include a README.upgrade.urpmi,
> explaining that they are being disabled, to
> ensure anyone who does want them enabled will
> know to re-enable them.

I don't think such README is needed. Most users don't need such repos and wouldn't enable them anyway. This README is just confusing for them. We should do this as one-time-operation only. Disable medias that we enabled and touch some marker file to check on next urpmi update to not do it again if user has enabled some medias again.

CC: (none) => sander.lepik

Thierry Vignaud 2013-05-31 12:39:54 CEST

Blocks: (none) => 10373

Nicolas Vigier 2014-05-08 18:06:42 CEST

CC: boklm => (none)


Note You need to log in before you can comment on or make changes to this bug.