
(Not sure if hackers is the right place for this, but I'm not subscribed 
to all the lists!)

The distributed 7.3.4 RPMs for RH 7.3 require libcrypto.so.3 and 
libssl.so.3, but there does not appear to be any official RH update for 
7.3 containing these libs. I do have the latest RH openssl updates 
installed, but it only provides libssl.so.2 and libcrypto.so.2 and many 
many things break if I attempt to upgrade :-(, which is presumably why 
RH chose to backpatch security fixes rather than upgrade for this platform.

I know building RPMs can be a major pain, but ISTM that builds should be 
published that don't break on vanilla installations. I'm prepared to 
help with fixing this if necessary. For now I've upgraded to 7.3.3 (the 
RPMs for this don't suffer the same problem on RH7.3).

cheers

andrew



Mon, 04 Aug 2003 11:41:06 -0400
Andrew Dunstan <andrew@dunslane.net>
problem with RH7.3 Pg7.3.4 binaries
Andrew Dunstan wrote:
> I know building RPMs can be a major pain, but ISTM that builds should be 
> published that don't break on vanilla installations. I'm prepared to 
> help with fixing this if necessary. For now I've upgraded to 7.3.3 (the 
> RPMs for this don't suffer the same problem on RH7.3).
> 

Sorry, that's my fault, not Lamar's. I built the 7.3 RPMs for him. 
Unfortunately I don't have a plain vanilla installation available -- I 
had forgotten that I upgraded ssl to something non-standard :(

Perhaps if you have a vanilla 7.3 machine available, you could build new 
7.3 RPMs from the source RPM and give them to Lamar for distribution?

Joe


Mon, 04 Aug 2003 08:53:24 -0700
Joe Conway <mail@joeconway.com>
Re: problem with RH7.3 Pg7.3.4 binaries
On Monday 04 August 2003 11:53, Joe Conway wrote:
> Andrew Dunstan wrote:
> > I know building RPMs can be a major pain, but ISTM that builds should be
> > published that don't break on vanilla installations. I'm prepared to
> > help with fixing this if necessary. For now I've upgraded to 7.3.3 (the
> > RPMs for this don't suffer the same problem on RH7.3).

> Sorry, that's my fault, not Lamar's. I built the 7.3 RPMs for him.
> Unfortunately I don't have a plain vanilla installation available -- I
> had forgotten that I upgraded ssl to something non-standard :(

> Perhaps if you have a vanilla 7.3 machine available, you could build new
> 7.3 RPMs from the source RPM and give them to Lamar for distribution?

Until vanilla-built RH7.3 RPMs are available, I've removed them from the FTP 
site.  I don't have an RH7.3 installation readily available for building.

Joe, the RHAS binaries won't have this problem, right?

To prevent this in the future, I'm going to state that anyone who wants to 
build RPMs for distribution needs to do so with a fully up to date vanilla 
installation of the target OS.  Since I do this myself for whatever RPMs I'm 
personally building, it was an easy assumption to make that everyone would do 
this.  My apologies.

A minor rant: I seem to vacillate between providing only one set of RPMs 
versus providing whatever sets people can build for me.  There is a definite 
tradeoff between having lots of sets available and having only good sets 
available.  While I do my best to ensure only good sets are available, I am 
not able to test every set that is built.  That is one reason I've not begun 
GPG-signing my RPMs -- if you want certified RPMs build them yourself.  It 
isn't that hard.  And when people are so impatient for RPMsets, then complain 
that the set didn't work -- well, it isn't the most encouraging thing in the 
world.  You want guaranteed RPMs that will install on your machine the day of 
the release?  You have three choices: build them yourself, pay someone to 
build them, or wait until the official set is available.  My rate for 
building RPMs under those conditions is $100 per hour. (and I have been paid 
that rate before.)  But the official set will only get uploaded once I've had 
the time to build it and test it.
-- 
Lamar Owen
Director of Information Technology
Pisgah Astronomical Research Institute

Mon, 4 Aug 2003 12:56:13 -0400
Lamar Owen <lowen@pari.edu>
Re: problem with RH7.3 Pg7.3.4 binaries
Lamar Owen wrote:
> Joe, the RHAS binaries won't have this problem, right?

I don't think so -- the server I built those on is very much vanilla 
RHAS. But then this raises a question in my mind -- is vanilla a fully 
updated vanilla or "off the original CDs" vanilla?

> To prevent this in the future, I'm going to state that anyone who wants to 
> build RPMs for distribution needs to do so with a fully up to date vanilla 
> installation of the target OS.  Since I do this myself for whatever RPMs I'm 
> personally building, it was an easy assumption to make that everyone would do 
> this.  My apologies.

Sorry -- I'll be more cognizant of that in the future.

Joe


Mon, 04 Aug 2003 10:00:45 -0700
Joe Conway <mail@joeconway.com>
Re: problem with RH7.3 Pg7.3.4 binaries
On Monday 04 August 2003 13:00, Joe Conway wrote:
> I don't think so -- the server I built those on is very much vanilla
> RHAS. But then this raises a question in my mind -- is vanilla a fully
> updated vanilla or "off the original CDs" vanilla?

I've thus far used the definition that it is a fully-updated install, using 
the OS vendor's update packages that are dependencies of PostgreSQL.  
Updating to, say, a later KDE, or GNUcash, or whatnot is OK.  But core 
libraries that PostgreSQL uses need to stay vanilla-updated.

> Sorry -- I'll be more cognizant of that in the future.

Hey, don't worry about it.  I should have checked: that IS my responsibility.
-- 
Lamar Owen
Director of Information Technology
Pisgah Astronomical Research Institute

Mon, 4 Aug 2003 13:13:00 -0400
Lamar Owen <lowen@pari.edu>
Re: problem with RH7.3 Pg7.3.4 binaries
Lamar Owen wrote:
> On Monday 04 August 2003 13:00, Joe Conway wrote:
> 
>>I don't think so -- the server I built those on is very much vanilla
>>RHAS. But then this raises a question in my mind -- is vanilla a fully
>>updated vanilla or "off the original CDs" vanilla?
> 
> I've thus far used the definition that it is a fully-updated install, using 
> the OS vendor's update packages that are dependencies of PostgreSQL.  
> Updating to, say, a later KDE, or GNUcash, or whatnot is OK.  But core 
> libraries that PostgreSQL uses need to stay vanilla-updated.

I'll have to check, but I'd guess that the RHAS I built on was pretty 
close to "off the original CDs", i.e. not updated. I'll let you know.

Joe



Mon, 04 Aug 2003 10:13:36 -0700
Joe Conway <mail@joeconway.com>
Re: problem with RH7.3 Pg7.3.4 binaries

I agree with the definition of "vanilla install" below.

I can't use the machine I was upgrading to build, unfortunately. Its a 
production machine I am prepping, (and is missing stuff the build 
process needs even if I wanted to monkey with it), which is precisely 
why I wanted to install from RPMs rather than just saying "screw it" and 
installing from a source tarball.

I will see if I can get the old machine currently mouldering away in my 
attic to run 7.3 and build with it, maybe some time this week. (It's 
time like these you appreciate having lots of bandwidth to download ISOs).

andrew


Lamar Owen wrote:

>On Monday 04 August 2003 13:00, Joe Conway wrote:
>  
>
>>I don't think so -- the server I built those on is very much vanilla
>>RHAS. But then this raises a question in my mind -- is vanilla a fully
>>updated vanilla or "off the original CDs" vanilla?
>>    
>>
>
>I've thus far used the definition that it is a fully-updated install, using 
>the OS vendor's update packages that are dependencies of PostgreSQL.  
>Updating to, say, a later KDE, or GNUcash, or whatnot is OK.  But core 
>libraries that PostgreSQL uses need to stay vanilla-updated.
>
>  
>


Mon, 04 Aug 2003 13:40:14 -0400
Andrew Dunstan <andrew@dunslane.net>
Re: problem with RH7.3 Pg7.3.4 binaries
Joe Conway wrote:
> Lamar Owen wrote:
>> I've thus far used the definition that it is a fully-updated install, 
>> using the OS vendor's update packages that are dependencies of 
>> PostgreSQL.  Updating to, say, a later KDE, or GNUcash, or whatnot is 
>> OK.  But core libraries that PostgreSQL uses need to stay 
>> vanilla-updated.
> 
> I'll have to check, but I'd guess that the RHAS I built on was pretty 
> close to "off the original CDs", i.e. not updated. I'll let you know.

I just checked, and the RHAS that I built the RPMs on is pretty close to 
original, other than kernel and some driver updates. I'll let you decide 
whether to pull them or not, but they don't meet your "fully-updated 
install" criterion.

Joe





Mon, 04 Aug 2003 10:57:09 -0700
Joe Conway <mail@joeconway.com>
Re: problem with RH7.3 Pg7.3.4 binaries
On Monday 04 August 2003 13:57, Joe Conway wrote:
> I just checked, and the RHAS that I built the RPMs on is pretty close to
> original, other than kernel and some driver updates. I'll let you decide
> whether to pull them or not, but they don't meet your "fully-updated
> install" criterion.

Hmmm... Tough call, but I think I'll leave them be, since they will install on 
a fully-updated installation.  Although I can't imagine an RHAS install not 
updated, but that's a different topic.
-- 
Lamar Owen
Director of Information Technology
Pisgah Astronomical Research Institute

Mon, 4 Aug 2003 19:04:53 -0400
Lamar Owen <lowen@pari.edu>
Re: problem with RH7.3 Pg7.3.4 binaries