Items blocking PHP update in RHEL 8

[mhhall3]

I am trying to help my development team to upgrade NagiosXI from RedHat Enterprise Linux 7
to RHEL 8. I am trying to patch a security issue related to PHP. There appear to be two
non-RHEL RPMs that have dependancies on the old modules.

Can someone help me to identify a source for these particular RPMs? (listed below).



rpm -Uvh php*.rpm
error: Failed dependencies:
php(api) = 20170718-64 is needed by (installed) php-pecl-ssh2-1.2-2.el8.x86_64
php(zend-abi) = 20170718-64 is needed by (installed) php-pecl-ssh2-1.2-2.el8.x86_64
php-common < 7.3 is needed by (installed) php-imap-7.2.11-1.el8.x86_64

Thanks for your assistance.

[ssax]

In-place upgrading your system from EL7 to EL8 isn't supported (if that's what you're doing), too many things get broken from doing that. You will need to migrate to a new server to stay in a supported configuration.

What is the output of these commands:

Code: Select all

rpm -qa | grep php-
rpm -qa | grep el7
yum repolist
uname -a
cat /etc/*release

The XI backup/restore process makes migration pretty easy:

The process is this:
- Spin up new server running EL7/EL8 latest

- Install the exact same version of XI that the old server has on the new server, no need to configure it, just install it and go through the initial setup (do not try to restore over different versions of XI you will cause issues)

https://assets.nagios.com/downloads/nag ... -Linux.pdf

- If you have a RAMDisk installed, are using RRDCacheD, or are running Mod_Gearman on the old system, set them up before restoring:

https://assets.nagios.com/downloads/nag ... giosXI.pdf
https://assets.nagios.com/downloads/nag ... ios-XI.pdf
https://assets.nagios.com/downloads/nag ... ios_XI.pdf

- Backup the old/transfer to new/restore to the new

- Follow the After The Restore section from the backup/restore guide completely

- Since you're changing OS versions, run the restore_repair script from the backup/restore guide

https://assets.nagios.com/downloads/nag ... ios-XI.pdf

- If you are monitoring vmware/oracle you'll need to reinstall the proper supporting packages on the new server again following these guides:

https://assets.nagios.com/downloads/nag ... ios-XI.pdf
https://assets.nagios.com/downloads/nag ... ios-XI.pdf

- Shutdown (or re-IP) the old, set the old IP on the new system so you don't have to update agent configs/FW rules

https://support.nagios.com/kb/article/c ... s-549.html

That's pretty much it. Please be aware of what a single XI license entitles you to:

https://support.nagios.com/kb/article.php?id=145

Then apply configuration and upgrade the new server to the latest XI version.

[mhhall3]

Understand the issues with going from RHEL 7 and RHEL 8 for Nagios.
Seems to be a partial install on the new RHEL 8 server.
I've provided the current PHP configuration info on server.
Would like to get PHP updated to satisfy a requirement that we have all things "patched" before getting an "Approval To Operate".
Trying not to undo work already done to install NagiosXI (or disable PHP in process).

Seems like php-imap and php-pecl-ssh2 need to updated as well, but I'm having issues getting those modules (or need a pointer to obtain them.

Currently installed PHP modules:

Code: Select all

php-pecl-ssh2-1.2-2.el8.x86_64
php-odbc-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-imap-7.2.11-1.el8.x86_64
php-ldap-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-pear-1.10.5-9.module+el8.1.0+3202+af5476b9.noarch
php-mbstring-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-pgsql-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-mysqlnd-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-fpm-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-process-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-xml-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-devel-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-gd-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-snmp-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-json-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-pdo-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-cli-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64
php-common-7.2.24-1.module+el8.2.0+4601+7c76a223.x86_64

[root@server ~]# yum repolist
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

repo id repo name
nagios-base Nagios
nagiosxi-deps Nagios XI Dependencies
repo RHEL 8 - x86_64
[root@server ~]#


When trying to update PHP using following RPMs, I'm having the originally reported dependency problem.
Seems likely that there's a repo that needs to be turned back on, but it would be helpful to know which one.

Code: Select all

-rw-r--r-- 1 mhhall3 users 1593797 Dec 13 09:46 php-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users 3216353 Dec 13 09:46 php-cli-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  719301 Dec 13 09:46 php-common-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  745713 Dec 13 09:46 php-devel-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users 1681117 Dec 13 09:46 php-fpm-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users   86857 Dec 13 09:46 php-gd-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  197437 Dec 13 09:46 php-intl-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users   75917 Dec 13 09:46 php-json-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users   88017 Dec 13 09:46 php-ldap-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  495285 Dec 13 09:46 php-mbstring-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  197389 Dec 13 09:46 php-mysqlnd-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users   91877 Dec 13 09:46 php-odbc-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  125981 Dec 13 09:46 php-pdo-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  369569 Dec 13 09:46 php-pear-1.10.12-1.module+el8.3.0+6678+b09f589e.noarch.rpm
-rw-r--r-- 1 mhhall3 users  121041 Dec 13 09:46 php-pgsql-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users   87161 Dec 13 09:46 php-process-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users   76189 Dec 13 09:52 php-snmp-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm
-rw-r--r-- 1 mhhall3 users  177809 Dec 13 09:46 php-xml-7.4.19-1.module+el8.5.0+11143+cc873159.x86_64.rpm

Linux server 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 8 13:30:15 EST 2021 x86_64 x86_64 x86_64 GNU/Linux

Red Hat Enterprise Linux release 8.5 (Ootpa)

[ssax]

What does this show? (I don't have a RHEL system with subscription to validate on)

Code: Select all

yum repolist all

You'll need these enabled:

Code: Select all

yum -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms

[mhhall3]

Repo list is below.
Attaching system to RHEL repo (vice our local version still did not appear to find updates for php-imap and php-pecl-ssh2.
Requested repo list is below. Did see an update on epel-release from 8-7 to 8-13.

Code: Select all

[root@server yum.repos.d]# yum repolist all
Updating Subscription Management repositories.

This system is registered with an entitlement server, but is not receiving updates. You can use subscription-manager to assign subscriptions.

repo id                                      repo name                                                                                status
bigfix                                       BigFix NetOps client and config repo                                                     disabled
epel                                         Extra Packages for Enterprise Linux 8 - x86_64                                           enabled
epel-debuginfo                               Extra Packages for Enterprise Linux 8 - x86_64 - Debug                                   enabled
epel-modular                                 Extra Packages for Enterprise Linux Modular 8 - x86_64                                   enabled
epel-modular-debuginfo                       Extra Packages for Enterprise Linux Modular 8 - x86_64 - Debug                           disabled
epel-modular-source                          Extra Packages for Enterprise Linux Modular 8 - x86_64 - Source                          disabled
epel-playground                              Extra Packages for Enterprise Linux 8 - Playground - x86_64                              enabled
epel-playground-debuginfo                    Extra Packages for Enterprise Linux 8 - Playground - x86_64 - Debug                      disabled
epel-playground-source                       Extra Packages for Enterprise Linux 8 - Playground - x86_64 - Source                     disabled
epel-source                                  Extra Packages for Enterprise Linux 8 - x86_64 - Source                                  enabled
epel-testing                                 Extra Packages for Enterprise Linux 8 - Testing - x86_64                                 disabled
epel-testing-debuginfo                       Extra Packages for Enterprise Linux 8 - Testing - x86_64 - Debug                         disabled
epel-testing-modular                         Extra Packages for Enterprise Linux Modular 8 - Testing - x86_64                         disabled
epel-testing-modular-debuginfo               Extra Packages for Enterprise Linux Modular 8 - Testing - x86_64 - Debug                 disabled
epel-testing-modular-source                  Extra Packages for Enterprise Linux Modular 8 - Testing - x86_64 - Source                disabled
epel-testing-source                          Extra Packages for Enterprise Linux 8 - Testing - x86_64 - Source                        disabled
nagios-base                                  Nagios                                                                                   enabled
nagiosxi-deps                                Nagios XI Dependencies                                                                   enabled
repo                                         RHEL 8 - x86_64                                                                          enabled
[root@server yum.repos.d]#

[ssax]

Did you run this one?

Code: Select all

subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms

What is the output of these?

Code: Select all

subscription-manager list --available
yum list installed | awk '{print $NF}' | grep '^\@' | sort -u

[mhhall3]

Have enabled codeready-builder-for-rhel-8-x86_64-rpms

Output of "yum list installed | awk '{print $NF}' | grep '^\@' | sort -u" list follows:

Code: Select all

@anaconda
@AppStream
@bigfix
@@commandline
@pe_repo
@repo
@rhel-8-for-x86_64-appstream-rpms
@System

Output from "subscription-manager list --available"
Output runs 1666 lines. Provided first 500 here.
Still not seeing the two missing modules (php-imap or php-pecl-ssh2) in my "yum list" output.

[ssax]

Please create a ticket for this and include a link back to this forum thread so we can get a remote session setup:

https://support.nagios.com/tickets/

Thank you!

[ssax]

Locking thread, ticket received, we will continue support through the ticket.

Thank you!