[PATCH 3/4] DNFpayload: disable all NSS operations in RPM.

akozumpl at redhat.com akozumpl at redhat.com
Wed Sep 11 11:19:09 UTC 2013


From: Ales Kozumplik <ales at redhat.com>

Due to a serious problem with NSS and fork() the Payload will have to do without
crypto.

Related:RhBug:1006280
---
 pyanaconda/packaging/dnfpayload.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pyanaconda/packaging/dnfpayload.py b/pyanaconda/packaging/dnfpayload.py
index b394950..bc8eb0a 100644
--- a/pyanaconda/packaging/dnfpayload.py
+++ b/pyanaconda/packaging/dnfpayload.py
@@ -139,6 +139,10 @@ class DNFPayload(packaging.PackagePayload):
         conf.installroot = constants.ROOT_PATH
         conf.releasever = self._getReleaseVersion(None)
 
+        # NSS won't survive the forking we do to shield out chroot during
+        # transaction, disable it in RPM:
+        conf.tsflags.append('nocrypto')
+
         conf.reposdir = REPO_DIRS
         log.info('Loading repositories config on the filesystem.')
         self._base.read_all_repos()
-- 
1.8.3.1



More information about the anaconda-patches mailing list