mock -r fedora-eln-x86_64 --init fails

[fweimer-rh]

There seems to be a key mismatch:

warning: /var/lib/mock/fedora-eln-x86_64/root/var/cache/dnf/eln-78c0f68aeb10b59c/packages/alternatives-1.15-2.eln109.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 45719a39: NOKEY
Fedora - ELN - Developmental packages for the next Ent 128 kB/s | 1.6 kB     00:00    
Importing GPG key 0x9867C58F:
 Userid     : "Fedora (35) <fedora-35-primary@fedoraproject.org>"
 Fingerprint: 787E A6AE 1147 EEE5 6C40 B30C DB46 3971 9867 C58F
 From       : /usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-rawhide-primary
Key imported successfully
Import of key(s) didn't help, wrong key(s)?
Public key for alternatives-1.15-2.eln109.x86_64.rpm is not installed. Failing package is: alternatives-1.15-2.eln109.x86_64
 GPG Keys are configured as: file:///usr/share/distribution-gpg-keys/fedora/RPM-GPG-KEY-fedora-rawhide-primary

Seen with:

mock-2.9-1.fc33.noarch
mock-core-configs-34.1-1.fc33.noarch
distribution-gpg-keys-1.48-1.fc33.noarch

I don't see any relevant packages in updates-testing.

[sgallagher]

@mohanboddu Can you look into this, please? It looks like more fallout from the F34->F35 signing issue.

[hroncok]

See also https://pagure.io/releng/issue/10007 (closed). Was there a successful ELN compose since then?

[mohanboddu]

distribution-gpg-keys should be updated to handle https://src.fedoraproject.org/rpms/fedora-repos/c/dac6fcdf6c063f1e049ddc7b33f3b299bb643d7f?branch=rawhide

[mohanboddu]

Filed a bz for it - https://bugzilla.redhat.com/show_bug.cgi?id=1931095

[nirik]

See also https://pagure.io/releng/issue/10007 (closed). Was there a successful ELN compose since then?

Seems not:

lrwxrwxrwx. 1 odcs-server odcs-server 13 Feb 10 16:21 latest-Fedora-ELN -> ../odcs-11423
lrwxrwxrwx. 1 odcs-server odcs-server 13 Feb 10 16:21 Fedora-ELN-Rawhide-20210210.5 -> ../odcs-11423

[xsuchy]

This happens because packages in that repo are signed with fedora-34-primary while mock is configure to use fedora-rawhide-primary which is a symlink pointing to fedora-35-primary. I will try to come with something together with @praiskup tomorrow morning - likely use N and N-1 key in Mock's config.

[praiskup]

Yes, this deserves work-around in mock-core-configs, rpm-software-management/mock#702

[sgallagher]

This happens because packages in that repo are signed with fedora-34-primary while mock is configure to use fedora-rawhide-primary which is a symlink pointing to fedora-35-primary. I will try to come with something together with @praiskup tomorrow morning - likely use N and N-1 key in Mock's config.

Well, the packages in ELN are always meant to be signed with the Rawhide key. The glitch here happened that we forgot to run the re-signing at Branch and then we have also had compose failures since we actually did so. It likely wouldn't hurt for mock-core-configs to be over-protective about this, but the bug really is on our end.

[fweimer-rh]

But is ELN really tracking rawhide at this point. The most recent builds at https://koji.fedoraproject.org/koji/packageinfo?packageID=57 suggest that ELN is following Fedora 34 content.

[sgallagher]

But is ELN really tracking rawhide at this point. The most recent builds at https://koji.fedoraproject.org/koji/packageinfo?packageID=57 suggest that ELN is following Fedora 34 content.

fedora-ci/eln-build-trigger@e06c43a

Looks like someone forgot to update the trigger until two days ago. It should be properly tracking Rawhide at this point.

[mohanboddu]

This happens because packages in that repo are signed with fedora-34-primary while mock is configure to use fedora-rawhide-primary which is a symlink pointing to fedora-35-primary. I will try to come with something together with @praiskup tomorrow morning - likely use N and N-1 key in Mock's config.

But chkconfig-1.15-2.eln109 is signed with both F34 and F35 key.

[sgallagher]

This is working these days, so I'm closing this ticket.