Bug 1212134 - [Build 20230607-1] Package hub signing key verification failure
Summary: [Build 20230607-1] Package hub signing key verification failure
Status: RESOLVED FIXED
Alias: None
Product: PUBLIC SUSE Linux Enterprise Server 15 SP5
Classification: openSUSE
Component: Other (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Marcus Meissner
QA Contact:
URL: https://openqa.suse.de/tests/11276693...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-06-08 08:58 UTC by Sofia Syrianidou
Modified: 2023-10-19 07:46 UTC (History)
2 users (show)

See Also:
Found By: openQA
Services Priority:
Business Priority:
Blocker: Yes
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sofia Syrianidou 2023-06-08 08:58:03 UTC
On SLE 15 SP5 system, while attempting to add the Package Hub repo, results in failure due to errors with the signing key.

---------------------------------------------
New repository or package signing key received:

  Repository:       SUSE-PackageHub-15-SP5-Backports-Pool>  
  Key Fingerprint:  F044 C2C5 07A1 262B 538A AADD 8A49 EB03 25DB 7AE0
  Key Name:         openSUSE:Backports OBS Project <openSUSE:Backports@build.opensuse.org>
  Key Algorithm:    RSA 4096
  Key Created:      Wed May 10 10:46:12 2023
  Key Expires:      Sun May  9 10:46:12 2027
  Rpm Name:         gpg-pubkey-25db7ae0-645bae34



    Note: Signing data enables the recipient to verify that no modifications occurred after the data
    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
    and in extreme cases even to a system compromise.

    Note: A GPG pubkey is clearly identified by its fingerprint. Do not rely on the key's name. If
    you are not sure whether the presented key is authentic, ask the repository provider or check
    their web site. Many providers maintain a web page showing the fingerprints of the GPG keys they
    are using.

Do you want to reject the key, trust temporarily, or trust always? [r/t/a/?] (r): r
Error building the cache:
[SUSE_Package_Hub_15_SP5_x86_64:SUSE-PackageHub-15-SP5-Backports-Pool|https://updates.suse.com/SUSE/Backports/SLE-15-SP5_x86_64/standard?yEFYxb1yeou_H-cSQU90-10PXK8BbguhkssvrPLfgNvmSpgfC9-XtwlrmLqhYTow66Mjhh_6J37eqHiGVPj23yhNrxFAJJROoyo1aS0NdKKRXhKaBlCCsdtqJaKEgJpr_1nqsG35zJo] Valid metadata not found at specified URL
History:
 - Signature verification failed for repomd.xml
 - Can't provide /repodata/repomd.xml

Warning: Skipping repository 'SUSE-PackageHub-15-SP5-Backports-Pool' because of the above error.
Some of the repositories have not been refreshed because of an error.
Loading repository data...
Reading installed packages...
Package 'python3-Django' not found.
--------------------------

Some openQA tests that require installation of packages from Package Hub fail.

Example:
## Observation

openQA test in scenario sle-15-SP5-Server-DVD-Updates-x86_64-generate_dud@64bit fails in
[generate_dud](https://openqa.suse.de/tests/11276693/modules/generate_dud/steps/22)

## Test suite description
The base test suite is used for job templates defined in YAML documents. It has no settings of its own.


## Reproducible

Fails since (at least) Build [20230607-1](https://openqa.suse.de/tests/11275830)


## Expected result

Last good: [20230606-1](https://openqa.suse.de/tests/11267610) (or more recent)


## Further details

Always latest result in this scenario: [latest](https://openqa.suse.de/tests/latest?arch=x86_64&distri=sle&flavor=Server-DVD-Updates&machine=64bit&test=generate_dud&version=15-SP5)
Comment 1 OBSbugzilla Bot 2023-07-04 10:35:02 UTC
This is an autogenerated message for OBS integration:
This bug (1212134) was mentioned in
https://build.opensuse.org/request/show/1096745 15.5 / JeOS
Comment 2 OBSbugzilla Bot 2023-07-04 13:45:04 UTC
This is an autogenerated message for OBS integration:
This bug (1212134) was mentioned in
https://build.opensuse.org/request/show/1096803 15.5:ARM:Images / JeOS
Comment 3 Marcus Meissner 2023-10-19 07:46:03 UTC
we solved this I hope