Skip to content

[backport] Fix fedora-42 and opensuse-leap-15 CI failures (cherry-pick from #15902)#15932

Merged
johnmccrae merged 3 commits intochef-18from
jfm/chef18-kitchen-test-fedora-opensuse
Apr 21, 2026
Merged

[backport] Fix fedora-42 and opensuse-leap-15 CI failures (cherry-pick from #15902)#15932
johnmccrae merged 3 commits intochef-18from
jfm/chef18-kitchen-test-fedora-opensuse

Conversation

@johnmccrae
Copy link
Copy Markdown
Contributor

@johnmccrae johnmccrae commented Apr 21, 2026

Summary

Cherry-pick of CI fixes from #15902 onto the chef-18 branch. Excludes changes to lib/chef/resource/build_essential.rb.

Issue

CHEF-33518

Changes

  • Modified: cspell.json — added 'libopenssl' and 'userland' to spell-check word list
  • Modified: kitchen-tests/cookbooks/end_to_end/recipes/_packages.rb — skip ltrace on aarch64 (no Debian/Ubuntu package exists)
  • Modified: kitchen-tests/cookbooks/end_to_end/recipes/_zypper.rb — guard nginx block for x86_64 only; pin nginx to
    1.26.3 to avoid OpenSSL 3.2+ dependency on Leap 15.x
  • Modified: kitchen-tests/kitchen.dokken.yml — mask apt background services on ubuntu-22.04 and ubuntu-24.04 to prevent unattended-upgrades from holding the dpkg lock during converge
  • Modified: Knife Gemfile -- The version of bigdecimal wasn't pinned correctly and was pulling in a new version that caused Centos 7 to blow up. This version pin matches what is in the /Chef folder already.

Risk & Mitigations

Risk Classification: Low
Rationale: CI/test infrastructure changes only; no production Chef Infra library code modified.
Mitigation: All changes are additive guards or version pins that keep existing x86_64 behavior intact.
Rollback Strategy: git revert c1d86e4

DCO

All commits signed off with Developer Certificate of Origin.

This work was completed with AI assistance following Progress AI policies.

Description

Related Issue

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Chore (non-breaking change that does not add functionality or fix an issue)

Checklist:

  • I have read the CONTRIBUTING document.
  • I have run the pre-merge tests locally and they pass.
  • I have updated the documentation accordingly.
  • I have added tests to cover my changes.
  • If Gemfile.lock has changed, I have used --conservative to do it and included the full output in the Description above.
  • All new and existing tests passed.
  • All commits have been signed-off for the Developer Certificate of Origin.

@johnmccrae johnmccrae requested review from a team and jaymzh as code owners April 21, 2026 13:12
johnmccrae and others added 3 commits April 21, 2026 21:02
- cspell.json: add 'libopenssl' and 'userland' to word list
- _packages.rb: skip ltrace on aarch64 (no Debian/Ubuntu package)
- _zypper.rb: guard nginx block for x86_64 only; pin nginx to 1.26.3
- kitchen.dokken.yml: mask apt background services on ubuntu-22.04/24.04
  to prevent unattended-upgrades from holding the dpkg lock

Excludes changes to lib/chef/resource/build_essential.rb.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Signed-off-by: John McCrae <john.mccrae@progress.com>
Signed-off-by: John McCrae <john.mccrae@progress.com>
Signed-off-by: John McCrae <john.mccrae@progress.com>
@johnmccrae johnmccrae force-pushed the jfm/chef18-kitchen-test-fedora-opensuse branch from 6b4b7d6 to bd07468 Compare April 21, 2026 15:02
@sonarqubecloud
Copy link
Copy Markdown

@johnmccrae johnmccrae merged commit 84348f7 into chef-18 Apr 21, 2026
72 checks passed
@johnmccrae johnmccrae deleted the jfm/chef18-kitchen-test-fedora-opensuse branch April 21, 2026 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants