Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GPG Signing Fails For RHEL Installer Packages #905

Closed
steelhead31 opened this issue May 15, 2024 · 1 comment · Fixed by #906
Closed

GPG Signing Fails For RHEL Installer Packages #905

steelhead31 opened this issue May 15, 2024 · 1 comment · Fixed by #906
Assignees

Comments

@steelhead31
Copy link
Contributor

All, following the bump to Fedora 40 in the dockerfiles for the RHEL JDK & JRE RPM package builds, the process now fails with the following error when GPG signing is enabled ( the error doesnt present when signing is not enabled ):gpg: enabled compatibility flags:
gpg: using pgp trust model
gpg: no running keyboxd - starting '/usr/libexec/keyboxd'
gpg: waiting for the keyboxd to come up ... (5s)
gpg: connection to the keyboxd established
gpg: Note: database_open 134217901 waiting for lock (held by 9) ...Having done some testing and investigation around this, the process works fine until Fedora 39, ( Fedora 38 doesn't exhibit this problem ) Known Issue in Fedora 39:
https://discussion.fedoraproject.org/t/gpg-hang-on-fedora-silverblue-39/103262 , which still appears to be present in Fedora 40.

Two potential fixes.. to keep using Fedora 40

  1. Comment Out: use-keyboxd in .gnupg/common.conf.
  2. Remove any .lock files prior to running the sign

Fix 1, doesnt work inside the docker container, Fix 2 does, and allows the rpms to be signed correctly

Alternatively reverting the docker containers to use a Fedora 38 base image would also work.

@steelhead31 steelhead31 self-assigned this May 15, 2024
@steelhead31
Copy link
Contributor Author

Following discussions at PMC, decision was made to revert RHEL build dockerfiles to Fedora 38, to prevent this bug, and then do additional test using non-fedora images, such as ubi-8 and ubi-9 to determine a path forward.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
No open projects
Status: Done
Development

Successfully merging a pull request may close this issue.

1 participant