#486 Investigate a loop condition in SIG signing
Closed: Fixed with Explanation 2 years ago by arrfab. Opened 2 years ago by arrfab.

It seems we suffered from a small issue yesterday for a particular tag when pkgs were tagged to -release and pkgs were downloaded from koji, signed and reimported in koji but koji was still answering that pkg weren't signed, so causing a loop when query koji.
That particular process was cancelled and signing resumed for other tags in the queue, but it needs investigation


Metadata Update from @arrfab:
- Issue assigned to arrfab

2 years ago

Metadata Update from @arrfab:
- Issue tagged with: cbs, centos-common-infra, high-gain, medium-trouble

2 years ago

Problem happened because gpg was confused for new created keys and was trying to use the secondary one, instead of the primary one, meaning that when koji was called to find unsigned pkgs, it wasn't matching, creating a loop in signing process.

It's all fixed by ensuring that we'll use the primary key.
From man gpg :

   When using gpg an exclamation mark (!) may be appended to force using the specified primary or secondary key
   and not to try and calculate which primary or secondary key to use.

Metadata Update from @arrfab:
- Issue close_status updated to: Fixed with Explanation
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata
Boards 2
CBS Status: Backlog