PackageKit refresh(?) is wiping out local repositories and changing owner to root

[Sandro Mani]

Hi,

Today it happened a handful of times that my local rpm repository got 
wiped out (except for the repodata folder), and owner/group changed to 
root/root (including the repodata folder). After playing around a bit, I 
noticed that a

$ pkcon refresh

will consistently wipe out my local repository [1]. Putting an audit 
watch on an rpm on the repo will actually confirm that PackageKit 
removed the file, see below [2]. However, the odd thing is that 
PackageKit was last updated Nov 18 on my system, and also downgrading to 
PackageKit-1.0.1-1.fc22 from Oct 21 does not help, so I'm wondering 
whether it is really PackageKit who is responsible. Updates of yesterday 
and today do not really seem to be of any relevance.

Anyone else seeing this? Any ideas how to debug this?

Thanks,
Sandro

--------------------------------
[1] If it matters, repo file is

$ cat /etc/yum.repos.d/local.repo
[local]
name=Local
baseurl=file:///home/sandro/rpmbuild/repo
enabled=1
gpgcheck=0
metadata_expire=0

[local-source]
name=Local - Source
baseurl=file:///home/sandro/rpmbuild/SRPMS
enabled=0
metadata_expire=0
gpgcheck=0

--------------------------------
[2] $ sudo ausearch -f 
/home/sandro/rpmbuild/repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm -i
----
type=CONFIG_CHANGE msg=audit(30.11.2014 01:15:48.332:497) : auid=unset 
ses=unset op="updated rules" 
path=/home/sandro/rpmbuild/repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm 
key=repo list=exit res=yes
----
type=PROCTITLE msg=audit(30.11.2014 01:15:48.332:498) : 
proctitle=/usr/libexec/packagekitd
type=PATH msg=audit(30.11.2014 01:15:48.332:498) : item=1 
name=/home/sandro/rpmbuild/repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm 
inode=5505054 dev=08:03 mode=file,664 ouid=sandro ogid=sandro rdev=00:00 
obj=unconfined_u:object_r:user_home_t:s0 nametype=DELETE
type=PATH msg=audit(30.11.2014 01:15:48.332:498) : item=0 
name=/home/sandro/rpmbuild/repo/ inode=5513217 dev=08:03 mode=dir,775 
ouid=sandro ogid=sandro rdev=00:00 
obj=unconfined_u:object_r:user_home_t:s0 nametype=PARENT
type=CWD msg=audit(30.11.2014 01:15:48.332:498) :  cwd=/
type=SYSCALL msg=audit(30.11.2014 01:15:48.332:498) : arch=x86_64 
syscall=unlink success=yes exit=0 a0=0x7fd7401f88e0 a1=0xffffffff 
a2=0x7fd7401f8801 a3=0x7fd763e53970 items=2 ppid=1 pid=1902 auid=unset 
uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root 
fsgid=root tty=(none) ses=unset comm=PK-Backend 
exe=/usr/libexec/packagekitd (deleted) subj=system_u:system_r:rpm_t:s0 
key=repo

[M. Edward (Ed) Borasky]

Yes! I have the exact same problem or a very similar one. My local repo is
already maintained by 'root' It's on '/opt/LocalYumRepo' and when the
"magic" happens, it gets copied to '/opt/LocalYumRepo.tmp'. but the RPMs in
*both* directories are deleted!

I don't know, however, if this is new to Fedora 21 or even a 'bug'. I
hacked up a workaround - disable the repo except when I'm actively using
it. Have you done a Bugzilla search for this? Do you know what part of the
package maintenance chain is actually messing with the local repos?

On Sat, Nov 29, 2014 at 4:20 PM, Sandro Mani  wrote:
> Hi,
>
> Today it happened a handful of times that my local rpm repository got
> wiped out (except for the repodata folder), and owner/group changed to
> root/root (including the repodata folder). After playing around a bit, I
> noticed that a
>
> $ pkcon refresh
>
> will consistently wipe out my local repository [1]. Putting an audit watch
> on an rpm on the repo will actually confirm that PackageKit removed the
> file, see below [2]. However, the odd thing is that PackageKit was last
> updated Nov 18 on my system, and also downgrading to
> PackageKit-1.0.1-1.fc22 from Oct 21 does not help, so I'm wondering whether
> it is really PackageKit who is responsible. Updates of yesterday and today
> do not really seem to be of any relevance.
>
> Anyone else seeing this? Any ideas how to debug this?
>
> Thanks,
> Sandro
>
> [1] If it matters, repo file is
>
> $ cat /etc/yum.repos.d/local.repo
> [local]
> name=Local
> baseurl=file:///home/sandro/rpmbuild/repo
> enabled=1
> gpgcheck=0
> metadata_expire=0
>
> [local-source]
> name=Local - Source
> baseurl=file:///home/sandro/rpmbuild/SRPMS
> enabled=0
> metadata_expire=0
> gpgcheck=0
>
> [2] $ sudo ausearch -f /home/sandro/rpmbuild/repo/
> mingw32-qtspell-0.4.0-1.fc22.noarch.rpm -i
>
> type=CONFIG_CHANGE msg=audit(30.11.2014 01:15:48.332:497) : auid=unset
> ses=unset op="updated rules" path=/home/sandro/rpmbuild/
> repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm key=repo list=exit res=yes
>
> type=PROCTITLE msg=audit(30.11.2014 01:15:48.332:498) :
> proctitle=/usr/libexec/packagekitd
> type=PATH msg=audit(30.11.2014 01:15:48.332:498) : item=1
> name=/home/sandro/rpmbuild/repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm
> inode=5505054 dev=08:03 mode=file,664 ouid=sandro ogid=sandro rdev=00:00
> obj=unconfined_u:object_r:user_home_t:s0 nametype=DELETE
> type=PATH msg=audit(30.11.2014 01:15:48.332:498) : item=0
> name=/home/sandro/rpmbuild/repo/ inode=5513217 dev=08:03 mode=dir,775
> ouid=sandro ogid=sandro rdev=00:00 obj=unconfined_u:object_r:user_home_t:s0
> nametype=PARENT
> type=CWD msg=audit(30.11.2014 01:15:48.332:498) :  cwd=/
> type=SYSCALL msg=audit(30.11.2014 01:15:48.332:498) : arch=x86_64
> syscall=unlink success=yes exit=0 a0=0x7fd7401f88e0 a1=0xffffffff
> a2=0x7fd7401f8801 a3=0x7fd763e53970 items=2 ppid=1 pid=1902 auid=unset
> uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root
> fsgid=root tty=(none) ses=unset comm=PK-Backend
> exe=/usr/libexec/packagekitd (deleted) subj=system_u:system_r:rpm_t:s0
> key=repo
> --
> devel mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/devel
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[M. Edward (Ed) Borasky]

P.S.: I think it's caching the RPMs somewhere in /var - I can go look if it
matters.

On Sat, Nov 29, 2014 at 6:40 PM, M. Edward (Ed) Borasky 
wrote:
> Yes! I have the exact same problem or a very similar one. My local repo is
> already maintained by 'root' It's on '/opt/LocalYumRepo' and when the
> "magic" happens, it gets copied to '/opt/LocalYumRepo.tmp'. but the RPMs in
> *both* directories are deleted!
>
> I don't know, however, if this is new to Fedora 21 or even a 'bug'. I
> hacked up a workaround - disable the repo except when I'm actively using
> it. Have you done a Bugzilla search for this? Do you know what part of the
> package maintenance chain is actually messing with the local repos?
>
> On Sat, Nov 29, 2014 at 4:20 PM, Sandro Mani  wrote:
> > Hi,
> >
> > Today it happened a handful of times that my local rpm repository got
> > wiped out (except for the repodata folder), and owner/group changed to
> > root/root (including the repodata folder). After playing around a bit, I
> > noticed that a
> >
> > $ pkcon refresh
> >
> > will consistently wipe out my local repository [1]. Putting an audit
> > watch on an rpm on the repo will actually confirm that PackageKit removed
> > the file, see below [2]. However, the odd thing is that PackageKit was last
> > updated Nov 18 on my system, and also downgrading to
> > PackageKit-1.0.1-1.fc22 from Oct 21 does not help, so I'm wondering whether
> > it is really PackageKit who is responsible. Updates of yesterday and today
> > do not really seem to be of any relevance.
> >
> > Anyone else seeing this? Any ideas how to debug this?
> >
> > Thanks,
> > Sandro
> >
> > [1] If it matters, repo file is
> >
> > $ cat /etc/yum.repos.d/local.repo
> > [local]
> > name=Local
> > baseurl=file:///home/sandro/rpmbuild/repo
> > enabled=1
> > gpgcheck=0
> > metadata_expire=0
> >
> > [local-source]
> > name=Local - Source
> > baseurl=file:///home/sandro/rpmbuild/SRPMS
> > enabled=0
> > metadata_expire=0
> > gpgcheck=0
> >
> > [2] $ sudo ausearch -f /home/sandro/rpmbuild/repo/
> > mingw32-qtspell-0.4.0-1.fc22.noarch.rpm -i
> >
> > type=CONFIG_CHANGE msg=audit(30.11.2014 01:15:48.332:497) : auid=unset
> > ses=unset op="updated rules" path=/home/sandro/rpmbuild/
> > repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm key=repo list=exit res=yes
> >
> > type=PROCTITLE msg=audit(30.11.2014 01:15:48.332:498) :
> > proctitle=/usr/libexec/packagekitd
> > type=PATH msg=audit(30.11.2014 01:15:48.332:498) : item=1
> > name=/home/sandro/rpmbuild/repo/mingw32-qtspell-0.4.0-1.fc22.noarch.rpm
> > inode=5505054 dev=08:03 mode=file,664 ouid=sandro ogid=sandro rdev=00:00
> > obj=unconfined_u:object_r:user_home_t:s0 nametype=DELETE
> > type=PATH msg=audit(30.11.2014 01:15:48.332:498) : item=0
> > name=/home/sandro/rpmbuild/repo/ inode=5513217 dev=08:03 mode=dir,775
> > ouid=sandro ogid=sandro rdev=00:00 obj=unconfined_u:object_r:user_home_t:s0
> > nametype=PARENT
> > type=CWD msg=audit(30.11.2014 01:15:48.332:498) :  cwd=/
> > type=SYSCALL msg=audit(30.11.2014 01:15:48.332:498) : arch=x86_64
> > syscall=unlink success=yes exit=0 a0=0x7fd7401f88e0 a1=0xffffffff
> > a2=0x7fd7401f8801 a3=0x7fd763e53970 items=2 ppid=1 pid=1902 auid=unset
> > uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root
> > fsgid=root tty=(none) ses=unset comm=PK-Backend
> > exe=/usr/libexec/packagekitd (deleted) subj=system_u:system_r:rpm_t:s0
> > key=repo
> > --
> > devel mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/devel
> > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
>
> --
> Twitter: http://twitter.com/znmeb; Computational Journalism on a Stick
> http://j.mp/CompJournoStickOverview
>
> Remember, if you're traveling to Bactria, Hump Day is Tuesday and Thursday.

[Sandro Mani]

On 30.11.2014 03:40, M. Edward (Ed) Borasky wrote:
> Yes! I have the exact same problem or a very similar one. My local 
> repo is already maintained by 'root' It's on '/opt/LocalYumRepo' and 
> when the "magic" happens, it gets copied to '/opt/LocalYumRepo.tmp'. 
> but the RPMs in *both* directories are deleted!

Did you also start noticing this only in the past day or two, or also 
before? Trying to figure out who is the culprit...

Sandro

[Richard Hughes]

On 30 November 2014 at 00:20, Sandro Mani  wrote:
> Today it happened a handful of times that my local rpm repository got wiped
> out (except for the repodata folder), and owner/group changed to root/root
> (including the repodata folder).

That sounds like a libhif bug. What are we supposed to do for file://
repos? I think it's possibly metadata_expire=0 that's confusing
things. Can someone file a bug against libhif please here:
https://github.com/hughsie/libhif/

Richard.

[Sandro Mani]

On 30.11.2014 14:24, Richard Hughes wrote:
> On 30 November 2014 at 00:20, Sandro Mani  wrote:
> > Today it happened a handful of times that my local rpm repository got wiped
> > out (except for the repodata folder), and owner/group changed to root/root
> > (including the repodata folder).
>
> That sounds like a libhif bug. What are we supposed to do for file://
> repos? I think it's possibly metadata_expire=0 that's confusing
> things. Can someone file a bug against libhif please here:
> https://github.com/hughsie/libhif/

Done [1]. Tried increasing metadata_expire, but didn't spot any difference.

Thanks,
Sandro

[1] https://github.com/hughsie/libhif/issues/12

[Remi Collet]

Le 30/11/2014 01:20, Sandro Mani a écrit :
> Hi,
>
> Today it happened a handful of times that my local rpm repository got
> wiped out (except for the repodata folder), and owner/group changed to
> root/root (including the repodata folder). After playing around a bit, I
> noticed that a

Same bug affects me :(

An update to libhif 1.6-2 in testing seems to improve things

But I still see a empty folder created by root

Repo definition:

baseurl=file:///home/rpmbuild/site/rpms/fedora/$releasever/remi/$basearch/

Dir created (yes, with the $ sign):
/home/rpmbuild/site/rpms/fedora/$releasever/remi/$basearch/

Remi.

P.S. for now I have simply remove libhif, PackageKit, apper and deps
(I really don't need them)