#10007 Please re-sign ELN packages with F35 gpg key
Closed: Fixed 3 years ago by kevin. Opened 3 years ago by praiskup.

The rawhide key has changed, and as I understand it - the old builds are signed by the old keys (Fedora 34). While the normal fedora rawhide packages seem to be re-signed using F35 keys already.


The effect of the problem is that if you install new distribution-gpg-keys package from
updates-testing (e.g. this state is now in Fedora Copr), you are not able to build
the ELN packages - getting these errors:

...
Public key for zlib-1.2.11-24.eln109.x86_64.rpm is not installed. Failing package is: zlib-1.2.11-24.eln109.x86_64
 GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-rawhide-primary
Error: GPG check FAILED

Yeah, we can do this. We are still resigning rawhide tho, so it will be after that is complete.

Metadata Update from @mohanboddu:
- Issue tagged with: medium-gain, medium-trouble, ops

3 years ago

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

It seems it did not help, and we continue to see the same GPG issues. Can this be caused by missing compose?

Metadata Update from @praiskup:
- Issue status updated to: Open (was: Closed)

3 years ago

All the rpms are signed.

The problem is that there has not been a eln compose with the new packages:

lrwxrwxrwx. 1 odcs-server odcs-server 13 Feb 10 16:21 latest-Fedora-ELN -> ../odcs-11423
lrwxrwxrwx. 1 odcs-server odcs-server 13 Feb 10 16:21 Fedora-ELN-Rawhide-20210210.5 -> ../odcs-11423

There's nothing we can do here, there needs to be a compose as far as I can see.

There's composes now:

[DIR] Fedora-ELN-Rawhide-20210225.0/ 2021-02-25 00:00 -
[DIR] latest-Fedora-ELN/ 2021-02-25 00:00 -

Does this fix up the issue with builds?

Does this fix up the issue with builds?

Likely it would, but two days ago we shipped new mock-core-configs (that accept F34 keys in ELN repo) through infra tags repositories to Copr builders, so it built fine.

ok, closing this for now then. Let us know if there's anything more to do here.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata
Boards 1
Ops Status: Backlog