Bug 1847201

Summary: Flatpak can't install from registry.redhat.io
Product: Red Hat Enterprise Linux 8 Reporter: Owen Taylor <otaylor>
Component: flatpakAssignee: David King <dking>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.2CC: jkoten, mkrajnak, tpelka, tpopela
Target Milestone: rcKeywords: ZStream
Target Release: 8.0Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: flatpak-1.6.2-3.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1847909 (view as bug list) Environment:
Last Closed: 2020-11-04 04:05:43 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1847909    

Description Owen Taylor 2020-06-15 21:32:49 UTC
Now that we have the Flatpak runtime/SDK on registry.redhat.io, we are hitting a couple of problems:

 * GNOME Software doesn't honor the Authenticator key in the https://flatpaks.redhat.io/rhel.flatpakrepo. This is a GNOME Software bug, but is worked around by a change already in the master branch of Flatpak - to use the OCI authenticator by default for OCI remotes.

(The symptom is that attempts to use the created remote give "error: No authenticator configured for remote `rhel`")

 * Flatpak doesn't correctly handle OCI authentication for system remotes (apparently we only tested authenticator to registry.redhat.io for user remotes.) There were two bugs here, one already fixed in master and one now fixed in master ( https://github.com/flatpak/flatpak/pull/3677)

https://github.com/flatpak/flatpak/pull/3686/ is a backport to the 1.6.x branch of the relevant changes. I've tested that with these changes, we can correctly install rhel.flatpakrepo through GNOME Sofwtare and then install com.redhat.Platform and com.redhat.SDK through the command line.

Comment 2 David King 2020-06-17 10:29:33 UTC
Upstream changes build fine locally.

Comment 6 Martin Krajnak 2020-07-21 12:21:12 UTC
I can install com.redhat.Platform from oci+https://flatpaks.redhat.io/rhel/ with the remote configured as system or user remote.

The GNOME software auth will be verified as soon as we have the appstream data available.

Comment 9 errata-xmlrpc 2020-11-04 04:05:43 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (flatpak bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4814