Other relevant data:
Result of running # dnf update command -
Problem 1: cannot install the best update candidate for package pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch
both package tomcat-el-3.0-api-1:9.0.62-12.el8.noarch and tomcat-lib-1:9.0.62-12.el8.noarch obsolete pki-servlet-engine
package tomcat-jsp-2.3-api-1:9.0.62-12.el8.noarch requires tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can be installed
package tomcat-lib-1:9.0.62-12.el8.noarch requires tomcat-servlet-4.0-api = 1:9.0.62-12.el8, but none of the providers can be installed
package tomcat-servlet-4.0-api-1:9.0.62-12.el8.noarch is filtered out by modular filtering
Problem 2: package rubygem-openscap-0.4.9-8.el8.noarch requires openscap < 1.3.8, but none of the providers can be installed
openscap-1.3.7-1.el8.i686 has inferior architecture
openscap-1.3.4-5.el8.i686 has inferior architecture
openscap-1.3.5-10.el8.i686 has inferior architecture
openscap-1.3.5-2.el8.i686 has inferior architecture
openscap-1.3.5-4.el8.i686 has inferior architecture
openscap-1.3.5-5.el8.i686 has inferior architecture
openscap-1.3.5-6.el8.i686 has inferior architecture
openscap-1.3.5-9.el8.i686 has inferior architecture
openscap-1.3.6-3.el8.i686 has inferior architecture
openscap-1.3.6-4.el8.i686 has inferior architecture
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.7-1.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.4-5.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.5-10.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.5-2.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.5-4.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.5-5.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.5-6.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.5-9.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.6-3.el8.x86_64
cannot install both openscap-1.3.8-1.el8.x86_64 and openscap-1.3.6-4.el8.x86_64
cannot install the best update candidate for package rubygem-openscap-0.4.9-8.el8.noarch
cannot install the best update candidate for package openscap-1.3.7-1.el8.x86_64
(try to add ââallowerasingâ to command line to replace conflicting packages or ââskip-brokenâ to skip uninstallable packages or âânobestâ to use not only best candidate packages)
I would suggest removing the i686 version of openscap first of all.
Also seems you have packages I do not have even though we have a similar setup.
Using AlmaLinux 8 Foreman 3.6.1/Katello 4.8.4:
dnf module list --enabled
Last metadata expiration check: 3:25:56 ago on Mon 04 Sep 2023 06:08:45 AM UTC.
AlmaLinux 8 - AppStream
Name Stream Profiles Summary
ant 1.10 [d][e] common [d] Java build tool
httpd 2.4 [d][e] common [d], devel, minimal Apache HTTP Server
javapackages-runtime 201801 [d][e] common [d] Basic runtime utilities to support Java applications
maven 3.5 [d][e] common [d] Java project management and project comprehension tool
perl 5.26 [d][e] common [d], minimal Practical Extraction and Report Language
perl-IO-Socket-SSL 2.066 [d][e] common [d] Perl library for transparent TLS
perl-libwww-perl 6.34 [d][e] common [d] A Perl interface to the World-Wide Web
pki-core 10.6 [e] PKI Core module for PKI 10.6 or later
pki-deps 10.6 [e] PKI Dependencies module for PKI 10.6 or later
postgresql 12 [e] client, server [d] PostgreSQL server and client module
python36 3.6 [d][e] build, common [d] Python programming language, version 3.6
python38 3.8 [d][e] build, common [d] Python programming language, version 3.8
python39 3.9 [d][e] build, common [d] Python programming language, version 3.9
redis 6 [e] common [d] Redis persistent key-value database
ruby 2.7 [e] common [d] An interpreter of object-oriented scripting language
virt rhel [d][e] common [d] Virtualization module
Foreman 3.6
Name Stream Profiles Summary
foreman el8 [e] installer Foreman module
Katello 4.8
Name Stream Profiles Summary
katello el8 [e] installer Katello module
pulpcore: Fetch, Upload, Organize, and Distribute Software Packages.
Name Stream Profiles Summary
pulpcore el8 [e] Pulpcore module
Thanks for the reply Paul!
I have tried the âallowerasing, and nobestâ switch with no success. In fact the nobest switch breaks https and am unable to access Foreman after that. Iâll try removing the i686 version and see what happens.
#dnf module list --enabled
CentOS Stream 8 - AppStream
Name Stream Profiles Summary
ant 1.10 [d][e] common [ Java build tool
d]
container-tools rhel8 [d][e] common [ Most recent (rolling) versions of po
d] dman, buildah, skopeo, runc, conmon,
runc, conmon, CRIU, Udica, etc as w
ell as dependencies such as containe
r-selinux built and tested together,
and updated as frequently as every
12 weeks.
httpd 2.4 [d][e] common [ Apache HTTP Server
d], deve
l, minim
al
javapackages-runtime 201801 [d][e] common [ Basic runtime utilities to support J
d] ava applications
maven 3.5 [d][e] common [ Java project management and project
d] comprehension tool
perl 5.26 [d][e] common [ Practical Extraction and Report Lang
d], mini uage
mal
perl-IO-Socket-SSL 2.066 [d][e] common [ Perl library for transparent TLS
d]
perl-libwww-perl 6.34 [d][e] common [ A Perl interface to the World-Wide W
d] eb
pki-core 10.6 [e] PKI Core module for PKI 10.6 or late
r
pki-deps 10.6 [e] PKI Dependencies module for PKI 10.6
or later
postgresql 12 [e] client, PostgreSQL server and client module
server [
d]
python39 3.9 [d][e] build, c Python programming language, version
ommon [d 3.9
]
redis 6 [e] common [ Redis persistent key-value database
d]
ruby 2.7 [e] common [ An interpreter of object-oriented sc
d] ripting language
virt rhel [d][e] common [ Virtualization module
d]
Foreman 3.6
Name Stream Profiles Summary
foreman el8 [e] installe Foreman module
r
Katello 4.8
Name Stream Profiles Summary
katello el8 [e] installe Katello module
r
pulpcore: Fetch, Upload, Organize, and Distribute Software Packages.
Name Stream Profiles Summary
pulpcore el8 [e] Pulpcore module
First, I have reached out to and am working with the Tomcat maintainers to try to fix this. The issue is not as much with the Tomcat packages which are designed to replace pki-servlet-engine but with the challenges of modularity.
The workaround for the Tomcat issue is not âprettyâ and please read the steps carefully especially the end. Luckily, if you donât do the last part, dnf update will bomb out anyway from my testing.
Open the AppStream repository file (/etc/yum.repos.d/CentOS-Stream-AppStream.repo) and add module_hotfixes=1. You MUST remove this at the end.
dnf update tomcat â a full dnf update will not work, it must be a targeted update
Open the AppStream repository file (/etc/yum.repos.d/CentOS-Stream-AppStream.repo) and REMOVE module_hotfixes=1.
I followed your instructions, but after running dnf update after disabling module_hotfixes I receive the âoppositeâ error (require pki-servlet-engine instead of tomcat):
# dnf update --allowerasing
...
Error:
Problem: cannot install the best update candidate for package candlepin-4.3.1-1.el8.noarch
- problem with installed package candlepin-4.3.1-1.el8.noarch
- package candlepin-4.3.1-1.el8.noarch from @System requires pki-servlet-engine, but none of the providers can be installed
- package tomcat-1:9.0.62-14.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM conflicts with pki-servlet-engine <= 1:9.0.50 provided by tomcat-1:9.0.62-12.el8.noarch from @System
- cannot install both tomcat-1:9.0.62-14.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM and tomcat-1:9.0.62-12.el8.noarch from @System
- package tomcat-1:9.0.62-14.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM conflicts with pki-servlet-engine <= 1:9.0.50 provided by pki-servlet-engine-1:9.0.30-1.module_el8.4.0+595+e59c9af2.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM
- package tomcat-1:9.0.62-14.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM conflicts with pki-servlet-engine <= 1:9.0.50 provided by pki-servlet-engine-1:9.0.30-3.module_el8.5.0+854+e1c92b81.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM
- package tomcat-1:9.0.62-10.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM is filtered out by modular filtering
- package tomcat-1:9.0.62-12.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM is filtered out by modular filtering
- package tomcat-el-3.0-api-1:9.0.62-10.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM is filtered out by modular filtering
- package tomcat-jsp-2.3-api-1:9.0.62-10.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM is filtered out by modular filtering
- package tomcat-lib-1:9.0.62-10.el8.noarch from ORG_PRODUCT-EL8-X86_64-CENTOS_STREAM_REPO-EL8-X86_64-CENTOS_STREAM_APPSTREAM is filtered out by modular filtering
- cannot install the best update candidate for package tomcat-1:9.0.62-12.el8.noarch
- problem with installed package tomcat-1:9.0.62-12.el8.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
Am I correct in assuming this will remain an issue until the packaging issue is worked out with the Tomcat package maintainers?