On my repo. after #yum update.
new kernel cannot get reboot because of initramfs failed to generate.
1 2 3 4 5 6 |
@ Non-fatal POSTTRANS scriptlet failure in rpm package @ kernel...... @ E: Failed to install /usr/lib64/libfreebl3.chk @ mkinitrd failed @ warning: %posttrans(kernel......x86_64) scriptlet @ failed, exit status 1 |
If this time reboot the os, kernel will fail anyway.
because /usr/lib64/libfreebl3.chk is not yet provided in new kernel.
Temp fix is to use old version nss-softokn-freebl for now.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 |
workaround: 1) manually download RPMs from uln: nss-softokn-3.14.3-18.el6_6.i686.rpm nss-softokn-3.14.3-18.el6_6.x86_64.rpm nss-softokn-freebl-3.14.3-18.el6_6.i686.rpm nss-softokn-freebl-3.14.3-18.el6_6.x86_64.rpm unpack: for i in nss*rpm do rpm2cpio ${i} |cpio -idmv done 2) check current packages: nss-softokn-freebl-3.14.3-19.el6_6.i686 nss-softokn-3.14.3-19.el6_6.x86_64 nss-softokn-3.14.3-19.el6_6.i686 nss-softokn-freebl-3.14.3-19.el6_6.x86_64 delete these files by force: # rpm -qa| grep softokn|xargs rpm -e --nodeps 3) copy all files generate in step 1) to orig. # as rpm cmd will fail. 4) as we already have those dependency files. re-run rpm inst install nss-softokn-freebl-3.14.3-18* # rpm -ivh nss* --force --nodeps --nosignature 5) after this step, to ensure the changes. reinstall the 2 packs, which will refresh the local db. # yum reinstall nss-softokn-freebl nss-softokn # yum reinstall kernel-2.6.32-504.3.3.el6.x86_64 6) Don't run #yum update for now before a fix. or , add these packages into exclude list: #vi /etc/yum.conf exclude=nss-softokn* |
update: Mon Jan 19 14:23:26 CST 2015
I filed oracle bug#20369394, CentOS bug#0008083
For upStream bug#
Bug 1182297 – nss-softokn prevents dracut from building the initrd
Waiting for a fix in
1 |
nss-softokn-freebl-3.14.3-20 |
=======================================================
update: Fri Jan 30 17:07:57 CST 2015
Bug Fix Advisory nss-softokn bug fix update
Bug is now fixed in : nss-softokn-freebl-3.14.3-22.el6_6.x86_64.rpm
Also oracle has new el-errata
[El-errata] ELBA-2015-0110 Oracle Linux 6 nss-softokn bug fix update
It was very late for me. System was mounting in read only mode and throwing more errors than time which can be spent to reinstall CentOS on my new, clean VPS. However, thank you for answer.
Hey flashbag,
thanks for the update.
I also failed on a whole ORACLE RAC cluster. and cost half day to recover the environment.
I dont know how to quick updating more guys. but they should put off the package 3.14.3-19 from repo. at least for now…
As version 19 did only fix some app corruption issues, but involves more serious problems.
Thanks,
-suse
Another W/R:
1.) fresh install os.
2.) yum update kernel # which will run on old nss-softokn version and will be fine.
3.) yum update # after this step, os will not need to rebuild initramfs. System will not crash .
4.) wait for nss-softokn version 20, and #yum update.
Thanks,
-suse
From upstream bug#
https://bugzilla.redhat.com/show_bug.cgi?id=1182297
————————————————————–
Vincent S. Cojot 2015-01-20 12:39:49 EST
The package still isn’t released on RHN.
I worked around the issue by doing this:
# dracut -f
E: Failed to install /usr/lib64/libfreebl3.chk
# cd /usr/lib64/
# /usr/lib64/nss/unsupported-tools/shlibsign -v -i libfreebl3.so
moduleSpec configdir=” certPrefix=” keyPrefix=” secmod=” flags=noCertDB, noModDB
Generate a DSA key pair …
Library File: ../../lib64/libfreebl3.so 12776 bytes
Check File: ../../lib64/libfreebl3.chk
Link: libfreebl3.chk
hash: 32 bytes
[….]
This allowed dracut to run..