DLPX-94873 [Backport of DLPX-94862] CRA not working on engines upgraded to 2025.4.0.0 #361
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The
pam-challenge-response
package, in its entire history, has always had version1.0.1, as the package's version was set in a debian changelog file that has
never been updated. As such, it has never been upgraded through any engine
upgrade process, as the apt upgrade process will not upgrade a package whose
new version is identical to its current version (regardless of package
contents). This is the reason why the changes made to this package for the
24.04 Ubuntu update are not applied on upgrade, and why CRA doesn't work once a
system is upgraded to 2025.4.0.0 (because it will still have the previous
pam-challenge-response
package that doesn't work on Ubuntu 24.04).The solution is to ensure that the package version gets updated with each build
by leveraging the linux-pkg functionality that is designed to do just that.
Testing
ab-pre-push: https://selfservice-jenkins.eng-tools-prd.aws.delphixcloud.com/job/appliance-build-orchestrator-pre-push/11748/
Installed an external 2025.3.0.1 engine (which has CRA enabled), and upgraded to the upgrade image generated by the above ab-pre-push job. The upgrade was successful and CRA was functional post upgrade: