#10007 Please re-sign ELN packages with F35 gpg key
Closed: Fixed by kevin. Opened by praiskup.

The rawhide key has changed, and as I understand it - the old builds are signed by the old keys (Fedora 34). While the normal fedora rawhide packages seem to be re-signed using F35 keys already.


The effect of the problem is that if you install new distribution-gpg-keys package from
updates-testing (e.g. this state is now in Fedora Copr), you are not able to build
the ELN packages - getting these errors:

...
Public key for zlib-1.2.11-24.eln109.x86_64.rpm is not installed. Failing package is: zlib-1.2.11-24.eln109.x86_64
 GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-rawhide-primary
Error: GPG check FAILED

Yeah, we can do this. We are still resigning rawhide tho, so it will be after that is complete.

Metadata Update from @mohanboddu:
- Issue tagged with: medium-gain, medium-trouble, ops

This is now done.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

It seems it did not help, and we continue to see the same GPG issues. Can this be caused by missing compose?

Metadata Update from @praiskup:
- Issue status updated to: Open (was: Closed)

https://copr.fedorainfracloud.org/coprs/sergiomb/Subdownloader/build/2010742/
https://download.copr.fedorainfracloud.org/results/sergiomb/Subdownloader/fedora-eln-x86_64/02010742-subdownloader/builder-live.log.gz

See also https://github.com/fedora-eln/eln/issues/28 and https://bugzilla.redhat.com/show_bug.cgi?id=1931095

All the rpms are signed.

The problem is that there has not been a eln compose with the new packages:

lrwxrwxrwx. 1 odcs-server odcs-server 13 Feb 10 16:21 latest-Fedora-ELN -> ../odcs-11423
lrwxrwxrwx. 1 odcs-server odcs-server 13 Feb 10 16:21 Fedora-ELN-Rawhide-20210210.5 -> ../odcs-11423

There's nothing we can do here, there needs to be a compose as far as I can see.

There's composes now:

[DIR] Fedora-ELN-Rawhide-20210225.0/ 2021-02-25 00:00 -
[DIR] latest-Fedora-ELN/ 2021-02-25 00:00 -

Does this fix up the issue with builds?

Does this fix up the issue with builds?

Likely it would, but two days ago we shipped new mock-core-configs (that accept F34 keys in ELN repo) through infra tags repositories to Copr builders, so it built fine.

https://github.com/rpm-software-management/mock/releases/tag/mock-core-configs-34.2-1

ok, closing this for now then. Let us know if there's anything more to do here.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata