Bug 2123415

Summary:	Pulling images from registry.access.redhat.com fails to find RPM-GPG-KEY-redhat-beta keys
Product:	Red Hat Enterprise Linux 8	Reporter:	Anoop C S <anoopcs>
Component:	containers-common	Assignee:	Jindrich Novy <jnovy>
Status:	CLOSED ERRATA	QA Contact:	Yuhui Jiang <yujiang>
Severity:	high	Docs Contact:
Priority:	high
Version:	CentOS Stream	CC:	bstinson, jligon, jnovy, jwboyer, lsm5, ypu
Target Milestone:	rc	Keywords:	Reopened, Triaged
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	containers-common-1-41.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-16 08:20:37 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Anoop C S 2022-09-01 15:34:03 UTC

Description of problem:
When trying to pull images from registry.access.redhat.com using podman it fails find /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta resulting in a failure.

Version-Release number of selected component (if applicable):
podman version 4.2.0
containers-common-1-40.module_el8.7.0+1196+721f4eb0.x86_64

How reproducible:
Always

Steps to Reproduce:
Try to pull any image from registry.access.redhat.com

Actual results:
# podman pull registry.access.redhat.com/ubi9/ubi-minimal:latest
Trying to pull registry.access.redhat.com/ubi9/ubi-minimal:latest...
Error: copying system image from manifest list: Source image rejected: None of the signatures were accepted, reasons: open /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta: no such file or directory; open /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta: no such file or directory; open /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta: no such file or directory; open /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta: no such file or directory; open /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta: no such file or directory; open /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta: no such file or directory

Expected results:
# podman pull registry.access.redhat.com/ubi9/ubi-minimal:latest
Trying to pull registry.access.redhat.com/ubi9/ubi-minimal:latest...
Getting image source signatures
Checking if image destination supports signatures
Copying blob 743b2fff6512 done  
Copying blob 961425e673a7 done  
Copying config 4a8128b051 done  
Writing manifest to image destination
Storing signatures
4a8128b051b8bfafcc6bd540db324a5244aff1ef7bd9f6dda7ecd10680c4fbbe

Comment 1 Anoop C S 2022-09-06 07:53:36 UTC

This is causing some of our upstream CentOS CI jobs[1][2] to fail. Can we get this resolved soon?

[1] https://jenkins-samba.apps.ocp.ci.centos.org/job/samba_sink-mini-k8s-1.22-clustered/372/console
[2] https://jenkins-samba.apps.ocp.ci.centos.org/job/samba_sink-mini-k8s-1.23-clustered/537/console

Comment 2 Jindrich Novy 2022-09-06 10:04:36 UTC


*** This bug has been marked as a duplicate of bug 2123611 ***

Comment 10 errata-xmlrpc 2023-05-16 08:20:37 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: container-tools:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2023:2758