Hi Peter, On Sat, 2025-03-01 at 10:01 +0000, Marko, Peter wrote: > I believe that this patch is causing problem with the database never expiring. > I was wondering why valkyrie reports for master (but not other branches) > started lagging behind reality and this may be the root-cause. > Currently it's off by 1 for kernel CVEs and it's also missing puzzles CVEs. > And this commit is the only one in addition to styhead branch. > > NVD update code is checking database file timestamp when deciding if > partial or full update is required, so that code always decides for partial > update due to this file touch, rendering the logic non-working. > And we know that partial updates are inaccurate, and we need to do full update > from time to time to fix wrong/missing entries. > > From this point of view this commit is wrong and should be reverted. > Or rather replaced by something different. > Maybe we could add release name to the database file instead so that > old branches with different sqlite version are not allowed to modify it?
I think we saw issues even after this change so we can probably revert it to be honest. That said, there are deeper issues here if that is a problem. I'd note that the updates to the database should also ideally be fixed but I know there are API issues in doing that. We did try changing the location for some releases but not others and the corruption issue persists which is suggestive of some bad interaction with NFS at this point. We are hacking around this server/autobuilder side right now and ultimately I think we need to move away from the sqlite database format/usage like this. I wish I could find help to try and fix issues properly but everyone just wants to bandaid their particular problem :/. Cheers, Richard
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#212095): https://lists.openembedded.org/g/openembedded-core/message/212095 Mute This Topic: https://lists.openembedded.org/mt/110179038/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
