Skip to content

{Packaging} Update UBI packages before RPM tests - #33983

Open
Naga Nandyala (naga-nandyala) wants to merge 2 commits into
devfrom
fix/rpm-test-expat-mismatch
Open

{Packaging} Update UBI packages before RPM tests#33983
Naga Nandyala (naga-nandyala) wants to merge 2 commits into
devfrom
fix/rpm-test-expat-mismatch

Conversation

@naga-nandyala

@naga-nandyala Naga Nandyala (naga-nandyala) commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

🤖 PR Validation — ️✔️ All clear

Breaking Changes Tests
️✔️ None ️✔️ 130/130

Related command

N/A (RPM packaging CI)

Description

Update UBI packages before installing and testing the Azure CLI RPM.

Red Hat published Python 3.12.14 packages for UBI 8 and UBI 9 that require a newer Expat symbol. The pinned base images still contain older Expat packages, causing every AMD64 and ARM64 RPM test leg for UBI 8/9 to fail when pip imports pyexpat:

undefined symbol: XML_SetBillionLaughsAttackProtectionMaximumAmplification

Running dnf update -y first upgrades Expat to a compatible version before the Azure CLI RPM and test dependencies are installed.

Testing Guide

Reproduced the failure on fresh images without an update:

  • UBI 8.4: Python 3.12.14-1.el8_10 + Expat 2.2.5-4.el8
  • UBI 9.0: Python 3.12.14-1.el9_8 + Expat 2.2.10-12.el9_0.3

Validated the fix on fresh images after dnf update -y:

  • UBI 8.4: Expat 2.5.0-2.el8_10, import pyexpat succeeds
  • UBI 9.0: Expat 2.5.0-6.el9_8.1, import pyexpat succeeds
  • bash -n scripts/release/rpm/test_rpm_in_docker.sh

History Notes

N/A


Copilot AI lite review requested due to automatic review settings August 25, 2026 10:23
@yonzhan

Copy link
Copy Markdown
Collaborator

Thank you for your contribution! We will review the pull request and get back to you soon.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the UBI-based RPM test container flow to ensure OS packages (notably Expat) are upgraded before installing and validating the Azure CLI RPM, preventing pyexpat import failures due to missing newer Expat symbols in older pinned UBI images.

Changes:

  • Add a dnf update -y step before RPM installation in the UBI RPM test script.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread scripts/release/rpm/test_rpm_in_docker.sh Outdated
Comment thread scripts/release/rpm/test_rpm_in_docker.sh Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants