Repository navigation
fix(rpm): resolve Fedora 43 install and runtime failures - #2
Closed
maxamillion wants to merge 1 commit into
Closed
maxamillion wants to merge 1 commit into
maxamillion wants to merge 1 commit into
Conversation
Three issues discovered during comprehensive RPM testing on Fedora 43: 1. Set OPENSHELL_IMAGE_TAG=midstream at RPM build time so the CLI references container images that exist in the LobsterTrap GHCR registry (the default 'dev' tag does not exist). 2. Ship /etc/modules-load.d/openshell.conf to load legacy iptables kernel modules required by k3s flannel CNI. Modern Fedora loads only nf_tables by default, but k3s bundles its own iptables-legacy binary for flannel networking. Also add nftables kube-proxy mode detection to the cluster entrypoint as a forward-looking improvement for when k3s gains native nftables flannel support. 3. Change python3-openshell dependencies from Requires to Recommends because Fedora 43 ships grpcio 1.48 and protobuf 3.19, which are too old for the SDK (needs >=1.60 and >=4.25 respectively).
itdove
pushed a commit
to itdove/OpenShell
that referenced
this pull request
Apr 6, 2026
Openshell podman
maxamillion
pushed a commit
that referenced
this pull request
May 14, 2026
* docs(rfc): Add gateway configuration RFC * Update RFC to handle config directories docs(rfc): address conf.d pattern and remove stale scratch branch reference Closes out open question #2 with a conf.d-style directory loader as a planned follow-on to the v1 single-file approach. Documents the three design decisions needed before implementation. Removes reference to scratch/server-config-file branch which does not exist. * docs(rfc): sync gateway config RFC with current repo state Resync RFC 0002 with the gateway code as it stands today: drop already-implemented framing, restructure the schema so each compute driver owns its [openshell.drivers.<name>] table, add the missing OIDC, metrics-listener, docker, and podman sections, and exclude database_url and ssh_handshake_secret from the file schema (env/CLI only). * docs(rfc): renumber gateway configuration RFC to 0003 RFC 0002 was claimed by the agent-driven policy management RFC that landed first. Move the gateway configuration proposal to the next available number. * Update rfc/0003-gateway-configuration/README.md Co-authored-by: Drew Newberry <anewberry@nvidia.com> --------- Co-authored-by: Drew Newberry <anewberry@nvidia.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fixes three issues discovered during comprehensive RPM testing on a fresh Fedora 43 (x86_64) instance with Podman 5.8.1, testing both rootful and rootless container runtimes.
Changes
Fix 1: Default image tag
devdoes not exist (Critical)The RPM binary compiled by COPR defaults
OPENSHELL_IMAGE_TAGtodevat build time, but the LobsterTrap GHCR registry only publishesmidstreamtags. This causesopenshell gateway startto fail with a 404 on image pull.export OPENSHELL_IMAGE_TAG=midstreamto the spec's%buildsectionFix 2: Legacy iptables modules not loaded on Fedora 43 (High)
k3s bundles its own
iptables-legacybinary for flannel CNI networking. Fedora 43 only loadsnf_tablesby default and does not auto-load the legacyip_tables,iptable_nat,iptable_filter, andiptable_manglekernel modules. Without these, flannel fails to writesubnet.envand no pods can be scheduled./etc/modules-load.d/openshell.confin the RPM to load legacy modules at bootFix 3:
python3-openshelluninstallable on Fedora 43 (Medium)Fedora 43 ships
python3-grpcio 1.48.4(need >= 1.60) andpython3-protobuf 3.19.6(need >= 4.25). The version gap is too large to work around.RequirestoRecommendsso the package can be installed; users needing the SDK can install grpcio/protobuf via pip/uvTesting
Full test matrix on Fedora 43 (x86_64), Podman 5.8.1:
openshell)mise run pre-commitpassesChecklist