Foreman-installer-develop-package-release 2015 failed

[jenkins]

foreman-installer package release pipeline failed:

https://ci.theforeman.org/job/foreman-installer-develop-package-release/2015/

[ekohl]

This is an unexpected failure:

/usr/bin/kafo-export-params -c config/foreman.yaml -f asciidoc -o /builddir/build/BUILD/foreman-installer-3.15.0-develop/_build/foreman-options.asciidoc
D, [2025-04-22T13:34:18.181423 #428] DEBUG -- : Using ./_build/parser_cache/foreman.yaml cache with parsed modules
D, [2025-04-22T13:34:18.182669 #428] DEBUG -- : Registering extended data type Apache::LogLevel
D, [2025-04-22T13:34:18.182886 #428] DEBUG -- : Registering extended data type Apache::ModProxyProtocol
D, [2025-04-22T13:34:18.185141 #428] DEBUG -- : Registering extended data type Apache::OIDCSettings
D, [2025-04-22T13:34:18.185314 #428] DEBUG -- : Registering extended data type Apache::OnOff
D, [2025-04-22T13:34:18.185475 #428] DEBUG -- : Registering extended data type Apache::ServerTokens
D, [2025-04-22T13:34:18.185669 #428] DEBUG -- : Registering extended data type Apache::Vhost::Priority
D, [2025-04-22T13:34:18.186046 #428] DEBUG -- : Registering extended data type Apache::Vhost::ProxyPass
D, [2025-04-22T13:34:18.186280 #428] DEBUG -- : Registering extended data type Apt::Auth_conf_entry
D, [2025-04-22T13:34:18.186387 #428] DEBUG -- : Registering extended data type Apt::Proxy
D, [2025-04-22T13:34:18.186451 #428] DEBUG -- : Registering extended data type Apt::Proxy_Per_Host
D, [2025-04-22T13:34:18.186485 #428] DEBUG -- : Registering extended data type Candlepin::LogLevel
D, [2025-04-22T13:34:18.186546 #428] DEBUG -- : Registering extended data type Dhcp::DhcpPool
D, [2025-04-22T13:34:18.186584 #428] DEBUG -- : Registering extended data type Dhcp::Macaddress
D, [2025-04-22T13:34:18.186687 #428] DEBUG -- : Registering extended data type Dhcp::Range
D, [2025-04-22T13:34:18.186746 #428] DEBUG -- : Registering extended data type Dhcp::StaticRoute
D, [2025-04-22T13:34:18.186808 #428] DEBUG -- : Registering extended data type Dns::Dnssec_policy_key
D, [2025-04-22T13:34:18.186863 #428] DEBUG -- : Registering extended data type Dns::Forwarder
D, [2025-04-22T13:34:18.187018 #428] DEBUG -- : Registering extended data type Dns::UpdatePolicy
D, [2025-04-22T13:34:18.187058 #428] DEBUG -- : Registering extended data type Foreman_proxy::ListenOn
D, [2025-04-22T13:34:18.187090 #428] DEBUG -- : Registering extended data type Foreman_proxy::Sshloglevel
D, [2025-04-22T13:34:18.187198 #428] DEBUG -- : Registering extended data type Postgresql::Pg_hba_rule
D, [2025-04-22T13:34:18.187267 #428] DEBUG -- : Registering extended data type Postgresql::Pg_hba_rule_address
D, [2025-04-22T13:34:18.187306 #428] DEBUG -- : Registering extended data type Postgresql::Pg_hba_rule_type
D, [2025-04-22T13:34:18.187337 #428] DEBUG -- : Registering extended data type Postgresql::Pg_hba_rules
D, [2025-04-22T13:34:18.187365 #428] DEBUG -- : Registering extended data type Postgresql::Pg_password_encryption
D, [2025-04-22T13:34:18.187395 #428] DEBUG -- : Registering extended data type Pulpcore::ChecksumTypes
D, [2025-04-22T13:34:18.187427 #428] DEBUG -- : Registering extended data type Pulpcore::Logger
D, [2025-04-22T13:34:18.187456 #428] DEBUG -- : Registering extended data type Pulpcore::LogLevel
D, [2025-04-22T13:34:18.187487 #428] DEBUG -- : Registering extended data type Puppet::Custom_trusted_oid_mapping
D, [2025-04-22T13:34:18.187525 #428] DEBUG -- : Registering extended data type Redis::LogLevel
D, [2025-04-22T13:34:18.187601 #428] DEBUG -- : Registering extended data type Redis::MemoryPolicy
D, [2025-04-22T13:34:18.187640 #428] DEBUG -- : Registering extended data type Redis::RedisUrl
D, [2025-04-22T13:34:18.187672 #428] DEBUG -- : Registering extended data type Stdlib::Absolutepath
D, [2025-04-22T13:34:18.187702 #428] DEBUG -- : Registering extended data type Stdlib::Base32
D, [2025-04-22T13:34:18.187730 #428] DEBUG -- : Registering extended data type Stdlib::Base64
D, [2025-04-22T13:34:18.187773 #428] DEBUG -- : Registering extended data type Stdlib::CreateResources
D, [2025-04-22T13:34:18.187807 #428] DEBUG -- : Registering extended data type Stdlib::Datasize
D, [2025-04-22T13:34:18.187845 #428] DEBUG -- : Registering extended data type Stdlib::Dns::Zone
D, [2025-04-22T13:34:18.187892 #428] DEBUG -- : Registering extended data type Stdlib::Email
D, [2025-04-22T13:34:18.187975 #428] DEBUG -- : Registering extended data type Stdlib::Ensure::File::Directory
D, [2025-04-22T13:34:18.188020 #428] DEBUG -- : Registering extended data type Stdlib::Ensure::File::File
D, [2025-04-22T13:34:18.188057 #428] DEBUG -- : Registering extended data type Stdlib::Ensure::File::Link
D, [2025-04-22T13:34:18.188095 #428] DEBUG -- : Registering extended data type Stdlib::Ensure::File
D, [2025-04-22T13:34:18.188149 #428] DEBUG -- : Registering extended data type Stdlib::Ensure::Package
D, [2025-04-22T13:34:18.188187 #428] DEBUG -- : Registering extended data type Stdlib::Ensure::Service
D, [2025-04-22T13:34:18.188226 #428] DEBUG -- : Registering extended data type Stdlib::Filemode
D, [2025-04-22T13:34:18.188271 #428] DEBUG -- : Registering extended data type Stdlib::Filesource
D, [2025-04-22T13:34:18.188307 #428] DEBUG -- : Registering extended data type Stdlib::Fqdn
D, [2025-04-22T13:34:18.188338 #428] DEBUG -- : Registering extended data type Stdlib::Host
D, [2025-04-22T13:34:18.188457 #428] DEBUG -- : Registering extended data type Stdlib::Http::Method
D, [2025-04-22T13:34:18.188495 #428] DEBUG -- : Registering extended data type Stdlib::Http::Status
D, [2025-04-22T13:34:18.188545 #428] DEBUG -- : Registering extended data type Stdlib::HttpStatus
D, [2025-04-22T13:34:18.188576 #428] DEBUG -- : Registering extended data type Stdlib::HTTPSUrl
D, [2025-04-22T13:34:18.188604 #428] DEBUG -- : Registering extended data type Stdlib::HTTPUrl
D, [2025-04-22T13:34:18.188639 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::CIDR
D, [2025-04-22T13:34:18.188678 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::Nosubnet
D, [2025-04-22T13:34:18.188715 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V4::CIDR
D, [2025-04-22T13:34:18.188750 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V4::Nosubnet
D, [2025-04-22T13:34:18.188791 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V4
D, [2025-04-22T13:34:18.188905 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Alternative
D, [2025-04-22T13:34:18.189023 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::CIDR
D, [2025-04-22T13:34:18.189103 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Compressed
D, [2025-04-22T13:34:18.189160 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Full
D, [2025-04-22T13:34:18.189253 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Nosubnet::Alternative
D, [2025-04-22T13:34:18.189353 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Nosubnet::Compressed
D, [2025-04-22T13:34:18.189401 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Nosubnet::Full
D, [2025-04-22T13:34:18.189448 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6::Nosubnet
D, [2025-04-22T13:34:18.189496 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address::V6
D, [2025-04-22T13:34:18.189532 #428] DEBUG -- : Registering extended data type Stdlib::IP::Address
D, [2025-04-22T13:34:18.189572 #428] DEBUG -- : Registering extended data type Stdlib::MAC
D, [2025-04-22T13:34:18.189601 #428] DEBUG -- : Registering extended data type Stdlib::ObjectStore::GSUri
D, [2025-04-22T13:34:18.189654 #428] DEBUG -- : Registering extended data type Stdlib::ObjectStore::S3Uri
D, [2025-04-22T13:34:18.189689 #428] DEBUG -- : Registering extended data type Stdlib::ObjectStore
D, [2025-04-22T13:34:18.189718 #428] DEBUG -- : Registering extended data type Stdlib::Port::Dynamic
D, [2025-04-22T13:34:18.189745 #428] DEBUG -- : Registering extended data type Stdlib::Port::Ephemeral
D, [2025-04-22T13:34:18.189772 #428] DEBUG -- : Registering extended data type Stdlib::Port::Privileged
D, [2025-04-22T13:34:18.189800 #428] DEBUG -- : Registering extended data type Stdlib::Port::Registered
D, [2025-04-22T13:34:18.189829 #428] DEBUG -- : Registering extended data type Stdlib::Port::Unprivileged
D, [2025-04-22T13:34:18.189861 #428] DEBUG -- : Registering extended data type Stdlib::Port::User
D, [2025-04-22T13:34:18.189892 #428] DEBUG -- : Registering extended data type Stdlib::Port
D, [2025-04-22T13:34:18.190007 #428] DEBUG -- : Registering extended data type Stdlib::Syslogfacility
D, [2025-04-22T13:34:18.190049 #428] DEBUG -- : Registering extended data type Stdlib::Unixpath
D, [2025-04-22T13:34:18.190093 #428] DEBUG -- : Registering extended data type Stdlib::Windowspath
D, [2025-04-22T13:34:18.190138 #428] DEBUG -- : Registering extended data type Stdlib::Yes_no
D, [2025-04-22T13:34:18.190211 #428] DEBUG -- : Registering extended data type Systemd::CoredumpSettings
D, [2025-04-22T13:34:18.190267 #428] DEBUG -- : Registering extended data type Systemd::Dropin
D, [2025-04-22T13:34:18.190304 #428] DEBUG -- : Registering extended data type Systemd::JournaldSettings::Ensure
D, [2025-04-22T13:34:18.190579 #428] DEBUG -- : Registering extended data type Systemd::JournaldSettings
D, [2025-04-22T13:34:18.190650 #428] DEBUG -- : Registering extended data type Systemd::LogindSettings::Ensure
D, [2025-04-22T13:34:18.191033 #428] DEBUG -- : Registering extended data type Systemd::LogindSettings
D, [2025-04-22T13:34:18.191161 #428] DEBUG -- : Registering extended data type Systemd::MachineInfoSettings
D, [2025-04-22T13:34:18.191267 #428] DEBUG -- : Registering extended data type Systemd::OomdSettings
D, [2025-04-22T13:34:18.191674 #428] DEBUG -- : Registering extended data type Systemd::ServiceLimits
D, [2025-04-22T13:34:18.191735 #428] DEBUG -- : Registering extended data type Systemd::Unit::Amount
D, [2025-04-22T13:34:18.191788 #428] DEBUG -- : Registering extended data type Systemd::Unit::AmountOrPercent
D, [2025-04-22T13:34:18.191860 #428] DEBUG -- : Registering extended data type Systemd::Unit::Install
D, [2025-04-22T13:34:18.192157 #428] DEBUG -- : Registering extended data type Systemd::Unit::Path
D, [2025-04-22T13:34:18.192209 #428] DEBUG -- : Registering extended data type Systemd::Unit::Percent
D, [2025-04-22T13:34:18.192259 #428] DEBUG -- : Registering extended data type Systemd::Unit::Service::Exec
D, [2025-04-22T13:34:18.193581 #428] DEBUG -- : Registering extended data type Systemd::Unit::Service
D, [2025-04-22T13:34:18.193899 #428] DEBUG -- : Registering extended data type Systemd::Unit::Slice
D, [2025-04-22T13:34:18.194547 #428] DEBUG -- : Registering extended data type Systemd::Unit::Socket
D, [2025-04-22T13:34:18.194709 #428] DEBUG -- : Registering extended data type Systemd::Unit::Timer
D, [2025-04-22T13:34:18.194754 #428] DEBUG -- : Registering extended data type Systemd::Unit::Timespan
D, [2025-04-22T13:34:18.195272 #428] DEBUG -- : Registering extended data type Systemd::Unit::Unit
D, [2025-04-22T13:34:18.195337 #428] DEBUG -- : Registering extended data type Systemd::Unit
** Execute /builddir/build/BUILD/foreman-installer-3.15.0-develop/_build/foreman-installer.8.asciidoc
Writing combined manual page to /builddir/build/BUILD/foreman-installer-3.15.0-develop/_build/foreman-installer.8.asciidoc
** Execute /builddir/build/BUILD/foreman-installer-3.15.0-develop/_build/foreman-installer.8
a2x -d manpage -f manpage /builddir/build/BUILD/foreman-installer-3.15.0-develop/_build/foreman-installer.8.asciidoc -L
a2x: ERROR: "xsltproc"  --stringparam callout.graphics 0 --stringparam navig.graphics 0 --stringparam admon.textlabel 1 --stringparam admon.graphics 0  "/etc/asciidoc/docbook-xsl/manpage.xsl" "/builddir/build/BUILD/foreman-installer-3.15.0-develop/_build/foreman-installer.8.xml" returned non-zero exit status -11

rake aborted!

Unsure why this failed now without diving in deeper.

[m-bucher]

Seems like CVE-fix in libxslt is to blame for it no longer working: CVE-2024-55549
It worked in the version before the fix came in.

Tried to run the command manually gives realloc failed, and since the CVE fixes a use-after-free, it is likely related

# a2x -v -d manpage -f manpage -D build/ foreman-debug.8.asciidoc 
a2x: args: ['-v', '-d', 'manpage', '-f', 'manpage', '-D', 'build/', 'foreman-debug.8.asciidoc']
a2x: resource files: []
a2x: resource directories: ['/etc/asciidoc/images', '/etc/asciidoc/stylesheets']
a2x: executing: "/usr/bin/asciidoc.py" --backend docbook -a "a2x-format=manpage"  --doctype manpage --verbose  --out-file "/root/build/foreman-debug.8.xml" "/root/foreman-debug.8.asciidoc"

asciidoc: reading: /etc/asciidoc/asciidoc.conf
asciidoc: reading: /root/foreman-debug.8.asciidoc
asciidoc: reading: /etc/asciidoc/docbook45.conf
asciidoc: reading: /etc/asciidoc/filters/graphviz/graphviz-filter.conf
asciidoc: reading: /etc/asciidoc/filters/source/source-highlight-filter.conf
asciidoc: reading: /etc/asciidoc/filters/code/code-filter.conf
asciidoc: reading: /etc/asciidoc/lang-en.conf
asciidoc: writing: /root/build/foreman-debug.8.xml

a2x: executing: "xmllint" --nonet --noout --valid "/root/build/foreman-debug.8.xml"


a2x: chdir /root/build
a2x: executing: "xsltproc"  --stringparam callout.graphics 0 --stringparam navig.graphics 0 --stringparam admon.textlabel 1 --stringparam admon.graphics 0  "/etc/asciidoc/docbook-xsl/manpage.xsl" "/root/build/foreman-debug.8.xml"

realloc failed !

a2x: ERROR: "xsltproc"  --stringparam callout.graphics 0 --stringparam navig.graphics 0 --stringparam admon.textlabel 1 --stringparam admon.graphics 0  "/etc/asciidoc/docbook-xsl/manpage.xsl" "/root/build/foreman-debug.8.xml" returned non-zero exit status -11

a2x: chdir /root

I doubt there is something wrong in the Foreman’s asciidoc files, though.

tldr: reverting libxslt to the version without the CVE-fix fixes the issue. On AlmaLinux9 this would be libxslt-1.1.34-9.el9_5.1.

[maximilian]

There’s a patched package: https://access.redhat.com/errata/RHBA-2025:4245