#6273 F28 RPMs are signed with wrong key
Closed: Fixed 6 years ago Opened 6 years ago by ignatenkobrain.

This is from RPM CI on Rawhide....

Step 6/11 : RUN dnf -y update
 ---> Running in 64f20b158b38
Last metadata expiration check: 0:00:29 ago on Mon Aug 21 16:45:53 2017.
Dependencies resolved.
================================================================================
 Package                     Arch   Version                       Repository
                                                                           Size
================================================================================
Upgrading:
 acl                         x86_64 2.2.52-18.fc27                rawhide  78 k
 audit-libs                  x86_64 2.7.7-5.fc27                  rawhide 108 k
 basesystem                  noarch 11-4.fc27                     rawhide 8.9 k
 bash                        x86_64 4.4.12-9.fc27                 rawhide 1.5 M
 bzip2-libs                  x86_64 1.0.6-24.fc27                 rawhide  46 k
 ca-certificates             noarch 2017.2.16-4.fc27              rawhide 452 k
 chkconfig                   x86_64 1.10-3.fc27                   rawhide 186 k
 coreutils                   x86_64 8.27-15.fc28                  rawhide 1.2 M
 coreutils-common            x86_64 8.27-15.fc28                  rawhide 1.9 M
 cracklib                    x86_64 2.9.6-7.fc27                  rawhide  87 k
 cracklib-dicts              x86_64 2.9.6-7.fc27                  rawhide 3.9 M
 crypto-policies             noarch 20170816-1.git2618a6c.fc27    rawhide  37 k
 cryptsetup-libs             x86_64 1.7.5-3.fc27                  rawhide 228 k
 curl                        x86_64 7.55.1-2.fc27                 rawhide 311 k
 cyrus-sasl-lib              x86_64 2.1.26-34.fc27                rawhide 161 k
 dbus                        x86_64 1:1.11.16-4.fc27              rawhide 262 k
 dbus-glib                   x86_64 0.108-4.fc27                  rawhide 124 k
 dbus-libs                   x86_64 1:1.11.16-4.fc27              rawhide 178 k
 deltarpm                    x86_64 3.6-24.fc27                   rawhide  90 k
 device-mapper               x86_64 1.02.142-4.fc27               rawhide 351 k
 device-mapper-libs          x86_64 1.02.142-4.fc27               rawhide 387 k
 diffutils                   x86_64 3.6-3.fc27                    rawhide 354 k
 dnf                         noarch 2.6.3-2.fc28                  rawhide 335 k
 dnf-conf                    noarch 2.6.3-2.fc28                  rawhide  65 k
 dnf-yum                     noarch 2.6.3-2.fc28                  rawhide  46 k
 elfutils-default-yama-scope noarch 0.170-1.fc27                  rawhide  39 k
 elfutils-libelf             x86_64 0.170-1.fc27                  rawhide 204 k
 elfutils-libs               x86_64 0.170-1.fc27                  rawhide 283 k
 emacs-filesystem            noarch 1:25.2-7.fc27                 rawhide  66 k
 expat                       x86_64 2.2.3-1.fc27                  rawhide  92 k
 fedora-release              noarch 28-0.1                        rawhide  25 k
 fedora-repos                noarch 28-0.1                        rawhide  94 k
 fedora-repos-rawhide        noarch 28-0.1                        rawhide 7.4 k
 file-libs                   x86_64 5.31-9.fc28                   rawhide 509 k
 filesystem                  x86_64 3.3-3.fc27                    rawhide 1.1 M
 gawk                        x86_64 4.1.4-5.fc27                  rawhide 1.1 M
 gdbm                        x86_64 1.13-3.fc27                   rawhide 157 k
 glib2                       x86_64 2.53.5-1.fc27                 rawhide 2.4 M
 glibc                       x86_64 2.26.90-4.fc28                rawhide 3.6 M
 glibc-common                x86_64 2.26.90-4.fc28                rawhide 874 k
 glibc-langpack-en           x86_64 2.26.90-4.fc28                rawhide 305 k
 gmp                         x86_64 1:6.1.2-6.fc27                rawhide 280 k
 gnupg2                      x86_64 2.1.22-1.fc27                 rawhide 2.3 M
 gnupg2-smime                x86_64 2.1.22-1.fc27                 rawhide 275 k
 gnutls                      x86_64 3.5.14-3.fc27                 rawhide 759 k
 gpgme                       x86_64 1.9.0-6.fc28                  rawhide 230 k
 grep                        x86_64 3.1-3.fc27                    rawhide 270 k
 gzip                        x86_64 1.8-4.fc27                    rawhide 160 k
 info                        x86_64 6.4-5.fc27                    rawhide 192 k
 iptables-libs               x86_64 1.6.1-4.fc27                  rawhide  90 k
 keyutils-libs               x86_64 1.5.10-3.fc27                 rawhide  32 k
 kmod-libs                   x86_64 24-3.fc27                     rawhide  62 k
 krb5-libs                   x86_64 1.15.1-22.fc28                rawhide 757 k
 langpacks-en                noarch 1.0-10.fc27                   rawhide 7.7 k
 libacl                      x86_64 2.2.52-18.fc27                rawhide  33 k
 libarchive                  x86_64 3.3.1-3.fc27                  rawhide 355 k
 libassuan                   x86_64 2.4.3-6.fc27                  rawhide  76 k
 libattr                     x86_64 2.4.47-21.fc27                rawhide  25 k
 libblkid                    x86_64 2.30.1-5.fc27                 rawhide 196 k
 libcap                      x86_64 2.25-7.fc27                   rawhide  54 k
 libcap-ng                   x86_64 0.7.8-5.fc27                  rawhide  30 k
 libcom_err                  x86_64 1.43.5-2.fc27                 rawhide  46 k
 libcomps                    x86_64 0.1.8-6.fc28                  rawhide  78 k
 libcrypt-nss                x86_64 2.26.90-4.fc28                rawhide  65 k
 libcurl                     x86_64 7.55.1-2.fc27                 rawhide 272 k
 libdb                       x86_64 5.3.28-26.fc27                rawhide 753 k
 libdb-utils                 x86_64 5.3.28-26.fc27                rawhide 144 k
 libdnf                      x86_64 0.9.3-7.fc28                  rawhide 126 k
 libfdisk                    x86_64 2.30.1-5.fc27                 rawhide 243 k
 libffi                      x86_64 3.1-14.fc27                   rawhide  34 k
 libgcc                      x86_64 7.1.1-7.fc27.1                rawhide  89 k
 libgcrypt                   x86_64 1.8.0-1.fc27                  rawhide 452 k
 libgpg-error                x86_64 1.27-3.fc27                   rawhide 183 k
 libidn                      x86_64 1.33-4.fc27                   rawhide 234 k
 libidn2                     x86_64 2.0.3-1.fc27                  rawhide  98 k
 libksba                     x86_64 1.3.5-5.fc27                  rawhide 132 k
 libmetalink                 x86_64 0.1.3-4.fc27                  rawhide  30 k
 libmount                    x86_64 2.30.1-5.fc27                 rawhide 218 k
 libnghttp2                  x86_64 1.25.0-1.fc28                 rawhide  73 k
 libpcap                     x86_64 14:1.8.1-6.fc27               rawhide 150 k
 libpsl                      x86_64 0.18.0-1.fc27                 rawhide  50 k
 libpwquality                x86_64 1.4.0-3.fc27                  rawhide 100 k
 librepo                     x86_64 1.7.20-9.fc28                 rawhide  76 k
 libreport-filesystem        x86_64 2.9.1-4.fc27                  rawhide  51 k
 libseccomp                  x86_64 2.3.2-5.fc27                  rawhide  61 k
 libsecret                   x86_64 0.18.5-5.fc27                 rawhide 158 k
 libselinux                  x86_64 2.7-1.fc27                    rawhide 173 k
 libsemanage                 x86_64 2.7-1.fc27                    rawhide 156 k
 libsepol                    x86_64 2.7-1.fc27                    rawhide 331 k
 libsigsegv                  x86_64 2.11-3.fc27                   rawhide  28 k
 libsmartcols                x86_64 2.30.1-5.fc27                 rawhide 159 k
 libsolv                     x86_64 0.6.28-8.fc27                 rawhide 370 k
 libssh2                     x86_64 1.8.0-4.fc27                  rawhide  95 k
 libsss_idmap                x86_64 1.15.3-2.fc27                 rawhide  85 k
 libsss_nss_idmap            x86_64 1.15.3-2.fc27                 rawhide  82 k
 libtasn1                    x86_64 4.12-3.fc27                   rawhide  74 k
 libunistring                x86_64 0.9.7-3.fc27                  rawhide 408 k
 libusbx                     x86_64 1.0.21-4.fc27                 rawhide  68 k
 libutempter                 x86_64 1.1.6-11.fc27                 rawhide  30 k
 libuuid                     x86_64 2.30.1-5.fc27                 rawhide  82 k
 libverto                    x86_64 0.2.6-11.fc27                 rawhide  21 k
 libxkbcommon                x86_64 0.7.1-5.fc27                  rawhide 113 k
 libxml2                     x86_64 2.9.4-4.fc27                  rawhide 693 k
 lua-libs                    x86_64 5.3.4-5.fc27                  rawhide 115 k
 lz4-libs                    x86_64 1.7.5-6.fc27                  rawhide  48 k
 mpfr                        x86_64 3.1.5-5.fc27                  rawhide 216 k
 ncurses                     x86_64 6.0-13.20170722.fc27          rawhide 369 k
 ncurses-base                noarch 6.0-13.20170722.fc27          rawhide  77 k
 ncurses-libs                x86_64 6.0-13.20170722.fc27          rawhide 326 k
 nettle                      x86_64 3.3-5.fc27                    rawhide 286 k
 npth                        x86_64 1.5-3.fc27                    rawhide  24 k
 nspr                        x86_64 4.16.0-1.fc27                 rawhide 138 k
 nss                         x86_64 3.32.0-2.fc27                 rawhide 856 k
 nss-pem                     x86_64 1.0.3-5.fc27                  rawhide  77 k
 nss-softokn                 x86_64 3.32.0-4.fc27                 rawhide 389 k
 nss-softokn-freebl          x86_64 3.32.0-4.fc27                 rawhide 224 k
 nss-sysinit                 x86_64 3.32.0-2.fc27                 rawhide  62 k
 nss-tools                   x86_64 3.32.0-2.fc27                 rawhide 507 k
 nss-util                    x86_64 3.32.0-2.fc27                 rawhide  88 k
 openldap                    x86_64 2.4.45-3.fc27                 rawhide 359 k
 openssl-libs                x86_64 1:1.1.0f-9.fc27               rawhide 1.3 M
 p11-kit                     x86_64 0.23.8-1.fc27                 rawhide 263 k
 p11-kit-trust               x86_64 0.23.8-1.fc27                 rawhide 133 k
 pam                         x86_64 1.3.0-5.fc27                  rawhide 748 k
 pcre                        x86_64 8.41-1.fc27.2                 rawhide 204 k
 pinentry                    x86_64 0.9.7-4.fc27                  rawhide  82 k
 popt                        x86_64 1.16-11.fc27                  rawhide  59 k
 publicsuffix-list-dafsa     noarch 20170809-1.fc27               rawhide  45 k
 python3                     x86_64 3.6.2-8.fc27                  rawhide  65 k
 python3-dbus                x86_64 1.2.4-8.fc27                  rawhide 121 k
 python3-dnf                 noarch 2.6.3-2.fc28                  rawhide 449 k
 python3-gpg                 x86_64 1.9.0-6.fc28                  rawhide 225 k
 python3-hawkey              x86_64 0.9.3-7.fc28                  rawhide  52 k
 python3-iniparse            noarch 0.4-26.fc28                   rawhide  47 k
 python3-libcomps            x86_64 0.1.8-6.fc28                  rawhide  49 k
 python3-librepo             x86_64 1.7.20-9.fc28                 rawhide  44 k
 python3-libs                x86_64 3.6.2-8.fc27                  rawhide 1.6 M
 python3-pip                 noarch 9.0.1-11.fc27                 rawhide 1.7 M
 python3-rpm                 x86_64 4.13.90-0.git14002.6.fc28     rawhide 115 k
 python3-setuptools          noarch 36.2.0-6.fc28                 rawhide 596 k
 python3-six                 noarch 1.10.0-11.fc28                rawhide  36 k
 qrencode-libs               x86_64 3.4.4-3.fc27                  rawhide  57 k
 readline                    x86_64 7.0-7.fc27                    rawhide 217 k
 rootfiles                   noarch 8.1-21.fc27                   rawhide  12 k
 rpm                         x86_64 4.13.90-0.git14002.6.fc28     rawhide 528 k
 rpm-build-libs              x86_64 4.13.90-0.git14002.6.fc28     rawhide 140 k
 rpm-libs                    x86_64 4.13.90-0.git14002.6.fc28     rawhide 320 k
 rpm-plugin-selinux          x86_64 4.13.90-0.git14002.6.fc28     rawhide  64 k
 rpm-plugin-systemd-inhibit  x86_64 4.13.90-0.git14002.6.fc28     rawhide  65 k
 sed                         x86_64 4.4-3.fc27                    rawhide 288 k
 setup                       noarch 2.10.7-1.fc28                 rawhide 176 k
 shadow-utils                x86_64 2:4.5-4.fc27                  rawhide 1.2 M
 shared-mime-info            x86_64 1.8-5.fc27                    rawhide 319 k
 sqlite-libs                 x86_64 3.20.0-1.fc27                 rawhide 469 k
 sssd-client                 x86_64 1.15.3-2.fc27                 rawhide 138 k
 system-python               x86_64 3.6.2-8.fc27                  rawhide  57 k
 system-python-libs          x86_64 3.6.2-8.fc27                  rawhide 6.9 M
 systemd                     x86_64 234-5.fc27                    rawhide 3.4 M
 systemd-libs                x86_64 234-5.fc27                    rawhide 460 k
 systemd-pam                 x86_64 234-5.fc27                    rawhide 177 k
 tar                         x86_64 2:1.29-7.fc27                 rawhide 815 k
 trousers                    x86_64 0.3.13-9.fc27                 rawhide 149 k
 trousers-lib                x86_64 0.3.13-9.fc27                 rawhide 164 k
 tzdata                      noarch 2017b-2.fc27                  rawhide 422 k
 ustr                        x86_64 1.0.4-24.fc27                 rawhide 101 k
 util-linux                  x86_64 2.30.1-5.fc27                 rawhide 2.4 M
 vim-minimal                 x86_64 2:8.0.946-1.fc27              rawhide 527 k
 xkeyboard-config            noarch 2.21-2.fc27                   rawhide 799 k
 xz-libs                     x86_64 5.2.3-4.fc27                  rawhide  91 k
 zlib                        x86_64 1.2.11-4.fc27                 rawhide  99 k
Installing dependencies:
 pcre2                       x86_64 10.30-1.fc27                  rawhide 233 k
 platform-python             x86_64 3.6.2-12.fc28                 rawhide  20 k
 platform-python-dnf         noarch 2.6.3-2.fc28                  rawhide 448 k
 platform-python-gpg         x86_64 1.9.0-6.fc28                  rawhide 224 k
 platform-python-hawkey      x86_64 0.9.3-7.fc28                  rawhide  52 k
 platform-python-iniparse    noarch 0.4-26.fc28                   rawhide  47 k
 platform-python-libcomps    x86_64 0.1.8-6.fc28                  rawhide  49 k
 platform-python-librepo     x86_64 1.7.20-9.fc28                 rawhide  44 k
 platform-python-libs        x86_64 3.6.2-12.fc28                 rawhide 6.9 M
 platform-python-rpm         x86_64 4.13.90-0.git14002.6.fc28     rawhide 115 k
 platform-python-six         noarch 1.10.0-11.fc28                rawhide  35 k

Transaction Summary
================================================================================
Install   11 Packages
Upgrade  170 Packages

Total download size: 76 M
Downloading Packages:
--------------------------------------------------------------------------------
Total                                            11 MB/s |  76 MB     00:06     
warning: /var/cache/dnf/rawhide-2d95c80a1fa0a67d/packages/platform-python-3.6.2-12.fc28.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 9db62fb1: NOKEY
Importing GPG key 0xF5282EE4:
 Userid     : "Fedora 27 (27) <fedora-27@fedoraproject.org>"
 Fingerprint: 860E 19B0 AFA8 00A1 7518 81A6 F55E 7430 F528 2EE4
 From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-x86_64
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: 


Public key for platform-python-3.6.2-12.fc28.x86_64.rpm is not installedFailing package is: platform-python-3.6.2-12.fc28.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-x86_64

The command '/bin/sh -c dnf -y update' returned a non-zero code: 1

Probably it can be solved somehow differently... not sure.. probably just by re-spinning docker image..

You need to update fedora-release and fedora-repos to the 28 versions (that were in this transaction) first, then after that they should see the right key. So, if you just updated those the rest would have/should have worked.

I'm not sure how to make these transitions better, but thats likely best discussed with releng.

@kevin I think we just need to do re-spin of docker image so users who use fedora:rawhide image in their CI are not affected...

Where did you get that image? official docker registery?

@maxamillion what can we do here ^

seems like docker image got already updated, so problem disappears.. Thanks!

Metadata Update from @ignatenkobrain:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

6 years ago

Login to comment on this ticket.

Metadata