Werk #17093: Use SHA256 digest when baking RPMs

Component

Agent bakery

Title

Use SHA256 digest when baking RPMs

Date

Aug 20, 2024

Level

Trivial Change

Class

New Feature

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.4.0b1	Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0p15	Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

The agent bakery now uses SHA256 for digests in the package header when creating RPM packages.

Specifically, this means rpmbuild is now invoked with the macros

%_source_filedigest_algorithm 8
%_binary_filedigest_algorithm 8

where 8 signifies SHA256. See man rpmsign for further information.

Compatibility

This change breaks compatibility with some very old host OSes that use rpm < 4.6, such as SLES11.4 and older. On these systems, installation of the agent will fail with an error similar to:

Output from rpm:
  error: Failed dependencies:
        rpmlib(FileDigests) <= 4.6.0-1 is needed by check-mk-agent-[...]

Failed installing Checkmk agent: Error during installation of package.

If you can, update rpm to resolve the issue.

To the list of all Werks