From d5202a0613b5ba1d2f80a4fcebee6275c26e5867 Mon Sep 17 00:00:00 2001 From: Zenghui Shi Date: Wed, 11 Dec 2024 00:15:48 +0800 Subject: [PATCH] OCPBUGS-43498: pin libreswan version to 4.6 in rhcos extension This change installes libreswan-4.6-3.el9_0.3 via ipsec extension as a mitigation step to address the ipsec connection issue tracked in https://issues.redhat.com/browse/OCPBUGS-41823. This change can be reverted once a final fix in libreswan is ready to be consumed by openshift JIRA: https://issues.redhat.com/browse/OCPBUGS-43498 --- extensions-ocp-rhel-9.4.yaml | 4 +++- extensions-ocp-rhel-9.6.yaml | 4 +++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/extensions-ocp-rhel-9.4.yaml b/extensions-ocp-rhel-9.4.yaml index 81ad4cc9..b4b534e3 100644 --- a/extensions-ocp-rhel-9.4.yaml +++ b/extensions-ocp-rhel-9.4.yaml @@ -15,7 +15,9 @@ extensions: # https://github.com/coreos/fedora-coreos-tracker/issues/1504 ipsec: packages: - - libreswan + # pin to 4.6 for now for https://issues.redhat.com/browse/OCPBUGS-43498 + # we can revert once that's fixed in latest libreswan + - libreswan-4.6 - NetworkManager-libreswan # https://github.com/coreos/fedora-coreos-tracker/issues/326 usbguard: diff --git a/extensions-ocp-rhel-9.6.yaml b/extensions-ocp-rhel-9.6.yaml index 3dd8bc15..f58f002c 100644 --- a/extensions-ocp-rhel-9.6.yaml +++ b/extensions-ocp-rhel-9.6.yaml @@ -18,7 +18,9 @@ extensions: # https://github.com/coreos/fedora-coreos-tracker/issues/1504 ipsec: packages: - - libreswan + # pin to 4.6 for now for https://issues.redhat.com/browse/OCPBUGS-43498 + # we can revert once that's fixed in latest libreswan + - libreswan-4.6 - NetworkManager-libreswan # https://github.com/coreos/fedora-coreos-tracker/issues/326 usbguard: