From 646e7987a1bd768fc32c4b52d228129708e9d9f2 Mon Sep 17 00:00:00 2001 From: Craig Comstock Date: Tue, 20 Jan 2026 13:26:02 -0600 Subject: [PATCH 1/2] Adjusted suse build host platform setup to use 3.24.2 CFEngine version We removed support for SuSE in 3.27.0 so 3.24.2 is the most recent LTS we can use with cf-remote install Additionally, 3.24.3 has libcurl 4 which depends on an unavailable version of openssl so we use 3.24.2. Ticket: ENT-13483 Changelog: none --- ci/setup-cfengine-build-host.sh | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/ci/setup-cfengine-build-host.sh b/ci/setup-cfengine-build-host.sh index 1be303a1d..df4f6af67 100755 --- a/ci/setup-cfengine-build-host.sh +++ b/ci/setup-cfengine-build-host.sh @@ -127,11 +127,12 @@ if grep 6.10 /etc/issue; then fi if grep suse /etc/os-release; then + urlget https://cfengine-package-repos.s3.amazonaws.com/pub/gpg.key + rpm --import gpg.key + if grep -i version=\"12 /etc/os-release; then echo "SUSE-12 found, cf-remote cannot be installed here so download directly similar to CentOS-6." if [ ! -x /var/cfengine/bin/cf-agent ]; then - urlget https://cfengine-package-repos.s3.amazonaws.com/pub/gpg.key - rpm --import gpg.key rm -rf cfengine-nova*rpm urlget https://cfengine-package-repos.s3.amazonaws.com/enterprise/Enterprise-3.24.3/agent/agent_suse12_x86_64/cfengine-nova-3.24.3-1.suse12.x86_64.rpm zypper in -y cfengine-nova-3.24.3-1.suse12.x86_64.rpm @@ -173,6 +174,9 @@ if ! /var/cfengine/bin/cf-agent -V; then echo "No existing CFEngine install found, try cf-remote..." if [ -n "$DEBIAN_STRETCH" ]; then _VERSION="--version 3.21.8" + elif grep suse /etc/os-release; then + # here we must use 3.24.2 instead of 3.24.3 because 3.24.3 has libcurl 4 which depends on unavailable OPENSSL_3.2.0 + _VERSION="--version 3.24.2" # we removed suse platforms in 3.27.0 else _VERSION="" fi From 3ad26b6f6a3a180a38fd69feaac70c0149825246 Mon Sep 17 00:00:00 2001 From: Craig Comstock Date: Tue, 20 Jan 2026 13:31:20 -0600 Subject: [PATCH 2/2] Adjusted build host setup script to cleanup previous cf-remote install if needed A -y (--yes) was needed to confirm the uninstall, otherwise the process would hang waiting for user input. Ticket: ENT-13483 Changelog: none --- ci/setup-cfengine-build-host.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ci/setup-cfengine-build-host.sh b/ci/setup-cfengine-build-host.sh index df4f6af67..e319fe602 100755 --- a/ci/setup-cfengine-build-host.sh +++ b/ci/setup-cfengine-build-host.sh @@ -165,7 +165,7 @@ else fi export PATH=/usr/local/bin:$PATH # some pip/pipx use /usr/local/bin -$PIP uninstall cf-remote || true # just in case a previous is there and would cause the install to fail +$PIP uninstall -y cf-remote || true # just in case a previous is there and would cause the install to fail $PIP install cf-remote || true # if this fails we will try to install from source echo "Checking for pre-installed CFEngine (chicken/egg problem)"