#1958 Fedora - ELN PGP key failure: openssl-libs
Closed: Fixed 2 years ago by praiskup. Opened 2 years ago by minfrin.

Fedora ELN builds are failing as follows:

Fedora - ELN - Developmental packages for the n 1.6 MB/s | 1.6 kB 00:00
GPG key at file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-rawhide-primary (0x9867C58F) is already installed
Fedora - ELN - Developmental packages for the n 1.6 MB/s | 1.6 kB 00:00
GPG key at file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-35-primary (0x9867C58F) is already installed
Fedora - ELN - Developmental packages for the n 1.6 MB/s | 1.6 kB 00:00
GPG key at file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-34-primary (0x45719A39) is already installed
The GPG keys listed for the "Fedora - ELN - Developmental packages for the next Enterprise Linux release" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: openssl-libs-1:3.0.0-1.fc36.aarch64
GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-rawhide-primary, file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-35-primary, file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-34-primary
Error: GPG check FAILED

Copr build error: Mock build failed


Thank you for the report, though this needs to be reported against ELN project (we only use the ELN repositories that appear to be broken at this moment):
https://github.com/fedora-eln/eln/issues

Metadata Update from @praiskup:
- Issue close_status updated to: Invalid
- Issue status updated to: Closed (was: Open)

2 years ago

Is this an ELN issue?

In the error message it says that the ELN provided packages, which I assume are signed by an ELN key, are being validated against the rawhide, fedora35 and fedora34 keys, which I expect would fail.

Are these keys coming out of the ELN distro, or copr?

Metadata Update from @minfrin:
- Issue status updated to: Open (was: Closed)

2 years ago

Is this an ELN issue?

I think yes.

In the error message it says that the ELN provided packages, which I assume are signed by an ELN key,

Yes.

are being validated against the rawhide, fedora35 and fedora34 keys, which I expect would fail.

Because "rawhide" is sort of floating chroot in mock-core-configs.rpm configuration, we use three GPG keys but that's expected - any of those, if OK, would succeed the build.
ELN packages are signed by the Rawhide key most of the time (the last fedora, FC36 now).
Or has anything changed with this?

Are these keys coming out of the ELN distro, or copr?

From distribution-gpg-keys, as mock-core-configs package depends on that.

I think distribution-gpg-keys may not have been updated at the Fedora 35/36 branch point. When Rawhide changes its signing key, so does ELN.

@sgallagh Though all Copr builders are on F34 for now. And contrary to ELN, Rawhide builds fine...

Hm, aha. eln_rawhide_releasever is still set to F35 ... bug in mock-core-configs, I'll take care of this, thanks

Update is in Bodhi. I deployed this to copr production.

Metadata Update from @praiskup:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata