Drag our CI to this decade

[pmatilai]

Been stuck on Fedora 32 for too long anyhow, but for debugedit we need
at least 35. Kick out a BDB remnant while at it.

[dmnks]

OK, so this is strange. The dnf update command in the image fails with getaddrinfo() thread failed to start, see the CI logs below. I can reproduce this locally, but with Docker only. With Podman, it works fine.

[cgwalters]

OK, so this is strange. The dnf update command in the image fails with getaddrinfo() thread failed to start, see the CI logs below. I can reproduce this locally, but with Docker only.

https://bugzilla.redhat.com/show_bug.cgi?id=1958474 probably.

[pmatilai]

But isn't that supposed to be fixed in F35 already?

(and btw, thanks guys for looking into it)

[wuyuoss]

Hey @pmatilai, wondering how does this CI upgrading from Fedora 32 to Fedora 35 go, any updates?
(we are working on rpmsign fsverity support which will depend on at least Fedora 35)

[pmatilai]

So this is indeed strange. I just noticed that debugedit happens to be available on F34 too now, and on that version things pass just fine 😲

librepo is same on both, libcurl differs (7.76 vs 7.78 at the baseline I think), plus of course a million other things. F34 is plenty newer than F32 and testsuite passes, I take what I get...

[pmatilai]

Ookkay, this seems right on the money: https://pascalroeleven.nl/2021/09/09/ubuntu-21-10-and-fedora-35-in-docker/

Doesn't do much good for us though:

$ docker build --security-opt seccomp=unconfined -t rpm -f ci/Dockerfile .
ERRO[0000] Can't add file /home/runner/rpm/.git/objects/info/commit-graph to tar: io: read/write on closed pipe
ERRO[0000] Can't close tar writer: io: read/write on closed pipe
Error response from daemon: The daemon on this platform does not support setting security options on build

So unless Docker in Ubuntu (this really is quite mad 🤪 ) gets a fix for this issue, F34 is the last Fedora we can upgrade the CI to. We may better start packing... 🛄