fedora-infrastructure

#6649 fedpkg build fails with "ActionNotAllowed: policy violation (build_from_srpm)"
Closed: Fixed Opened by ueno.

Closed: Fixed
Reopen Issue

I have tried to build the nspr package in rawhide, and got this error:

$ fedpkg build
Building nspr-4.18.0-1.fc28 for rawhide
Created task: 24373347
Task info: https://koji.fedoraproject.org/koji/taskinfo?taskID=24373347
Watching tasks (this may be safely interrupted)...
24373347 build (rawhide, /rpms/nspr:d3308208899fd57ca23074b3d2be6a65f7b753f0): free
24373347 build (rawhide, /rpms/nspr:d3308208899fd57ca23074b3d2be6a65f7b753f0): free -> open (buildvm-ppc64le-07.ppc.fedoraproject.org)
24373347 build (rawhide, /rpms/nspr:d3308208899fd57ca23074b3d2be6a65f7b753f0): open (buildvm-ppc64le-07.ppc.fedoraproject.org) -> FAILED: ActionNotAllowed: policy violation (build_from_srpm)
  0 free  0 open  0 done  1 failed

I am using:

fedpkg-1.30-4.fc26.noarch
koji-1.14.0-1.fc26.noarch

Source: git+git://pkgs.fedoraproject.org/rpms/nspr?#d3308208899fd57ca23074b3d2be6a65f7b753f0

You shouldn't have that url

Can you do a new 'fedpkg clone' (non anon) and do the build there? It looks like you might have an anon checkout?

Thanks. I have tried a fresh checkout with fedpkg clone, but still got the same error:

https://koji.fedoraproject.org/koji/taskinfo?taskID=24390996

It is for sure not an anonymous checkout, as I have the following in .git/config

$ cat .git/config
[core]
    repositoryformatversion = 0
    filemode = true
    bare = false
    logallrefupdates = true
[remote "origin"]
    url = ssh://ueno@pkgs.fedoraproject.org/rpms/nspr
    fetch = +refs/heads/*:refs/remotes/origin/*
[branch "master"]
    remote = origin
    merge = refs/heads/master
[bz]
    default-tracker = bugzilla.redhat.com
    default-product = Fedora
    default-version = rawhide
    default-component = nspr
[sendemail]
    to = nspr-owner@fedoraproject.org

As my local UID is not "ueno", I used fedpkg --user ueno for both clone and build but that didn't help.

Check that you don't have /etc/rpkg/fedpkg.conf.rpmnew and in case you have, update your /etc/rpkg/fedpkg.conf according to fedpkg.conf.rpmnew. In case you are not aware of any changes you did yourself manually in /etc/rpkg/fedpkg.conf, you can just replace fedpkg.conf with fedpkg.conf.repmnew.
Edited by jkaluza

Yes, that did fix it; thank you a lot for your help!

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Was having the same issue.
Current version of fedpkg is - fedpkg-1.30-4.fc27.noarch. It possibly happened during the update from FC26 to FC27

I was not doing any manual changes to the file, but still this file was installed as rpmnew instead of the simply conf.

This is the diff between the two files. Issue probably related to switch from old pkgdb to new pagure src services.

diff -ru /etc/rpkg/fedpkg.conf /etc/rpkg/fedpkg.conf.rpmnew                             
--- /etc/rpkg/fedpkg.conf       2017-02-27 09:31:39.000000000 +0000                                      
+++ /etc/rpkg/fedpkg.conf.rpmnew        2017-11-09 03:31:19.000000000 +0000                              
@@ -3,10 +3,9 @@                                    
 lookasidehash = sha512                             
 lookaside_cgi = https://src.fedoraproject.org/repo/pkgs/upload.cgi                                      
 gitbaseurl = ssh://%(user)s@pkgs.fedoraproject.org/%(module)s                                           
-anongiturl = git://pkgs.fedoraproject.org/%(module)s                                                    
-tracbaseurl = https://%(user)s:%(password)s@fedorahosted.org/rel-eng/login/xmlrpc                       
+anongiturl = https://src.fedoraproject.org/%(module)s.git                                               
 branchre = f\d$|f\d\d$|el\d$|olpc\d$|master$       
-kojiconfig = /etc/koji.conf                        
+kojiprofile = koji                                 
 build_client = koji                                
 clone_config =                                     
   bz.default-tracker bugzilla.redhat.com           
@@ -14,8 +13,8 @@                                   
   bz.default-version rawhide                       
   bz.default-component %(module)s                  
   sendemail.to %(module)s-owner@fedoraproject.org  
-  push.default simple                              
 distgit_namespaced = True                          
+lookaside_namespaced = True                        
 kerberos_realms = FEDORAPROJECT.ORG                
 [fedpkg.bodhi]                                     
@@ -28,5 +27,10 @@                                  
 # bodhi, and production is used without providing --staging.                                            
 staging = False                                    
-[fedpkg.pkgdb]                                     
-url = https://admin.fedoraproject.org/pkgdb/       
+[fedpkg.mbs]                                       
+auth_method = oidc                                 
+api_url = https://mbs.fedoraproject.org/module-build-service/1/                                         
+oidc_id_provider = https://id.fedoraproject.org/openidc/                                                
+oidc_client_id = mbs-authorizer                    
+oidc_client_secret = notsecret                     
+oidc_scopes = openid,https://id.fedoraproject.org/scope/groups,https://mbs.fedoraproject.org/oidc/submit-build
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.