Bug 1896185
| Summary: | Image builder uses CDN repositories when host is registered to Satellite | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Brian Smith <briasmit> | |
| Component: | osbuild-composer | Assignee: | Martin Sehnoutka <msehnout> | |
| Status: | CLOSED ERRATA | QA Contact: | Release Test Team <release-test-team-automation> | |
| Severity: | urgent | Docs Contact: | Eliane Ramos Pereira <elpereir> | |
| Priority: | urgent | |||
| Version: | --- | CC: | atodorov, bcygan, cbesson, elpereir, hartsjc, jcastran, jrusz, jscheibe, jswanson, ktordeur, mhillis, msehnout, obudai, parmstro, pdwyer, risantam, saydas, sbarcomb, spurrier, tgunders | |
| Target Milestone: | rc | Keywords: | Reproducer, Triaged, ZStream | |
| Target Release: | 8.0 | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | osbuild-composer-31-1.el8 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 1973034 (view as bug list) | Environment: | ||
| Last Closed: | 2021-11-09 18:46:58 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1973034 | |||
|
Description
Brian Smith
2020-11-09 22:26:52 UTC
Is therea workaround to this bugzilla? Where can the satellite hostname be inserted to replace the cdn target? You can do the following: mkdir -p /etc/osbuild-composer/repositories cp /usr/share/osbuild-composer/repositories/rhel-8.json /etc/osbuild-composer/repositories/ Now, open /etc/osbuild-composer/repositories/rhel-8.json and edit the baseurls. I've modified the rhel-8.json base URLs to point to the satellite server, I get a 403 error in messages. Same behavior. has the workaround been validated? Just added another case.
Originally I opened another rhbz#1945670 but this is a clone.
We also reproduced that issue internally, with "custom repos" (those of the Sat server) defined in /etc/osbuild-composer/repositories/rhel-8.json, and symlinked the cacert (/etc/rhsm/ca/redhat-uep.pem -> /etc/rhsm/ca/katello-server-ca.pem).
Issue is the same.
Stracing osbuild shows it reads a wrong key/cert pair from /etc/pki/entitlement.
Please note that overwriting the specific key/cert pair used (in my case /etc/pki/entitlement/8048553451084698847{-key}.pem) by the debug cert of the Satellite server fixes the issue.
Please also note the issue has been reproduced by defining other custom repos (for 3rd parties): ~~~ # dnf repolist Updating Subscription Management repositories. repo id repo name DefaultOrganization_CustomProduct2_CustomRepo2 CustomRepo2 DefaultOrganization_CustomProduct3_CustomRepo3 CustomRepo3 DefaultOrganization_CustomProduct_CustomRepo1 CustomRepo1 rhel-8-for-x86_64-appstream-rpms Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs) rhel-8-for-x86_64-baseos-rpms Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs) ~~~ I guess it could work without them (only one key/cert pair in /etc/pki/entitlement). *** Bug 1945670 has been marked as a duplicate of this bug. *** *** Bug 1982253 has been marked as a duplicate of this bug. *** The upstream PR[1] that fixed this bug contained also regression tests for this specific bug. These tests are passing therefore I consider this PR preverified. [1]: https://github.com/osbuild/osbuild-composer/pull/1405 @Paul, ping, see comment #32. Are you able to test with the latest osbuild-composer ? Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (osbuild bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:4273 |