Bug 2178130

Verified with osbuild-81-1.el9_2.1.noarch and osbuild-composer-76-2.el9_2.2.x86_64, fixed.

[root@yih-rhel92 rhel-edge]# rpm -qa|grep osbuild
osbuild-composer-dnf-json-76-2.el9_2.2.x86_64
osbuild-composer-core-76-2.el9_2.2.x86_64
python3-osbuild-81-1.el9_2.1.noarch
osbuild-selinux-81-1.el9_2.1.noarch
osbuild-81-1.el9_2.1.noarch
osbuild-luks2-81-1.el9_2.1.noarch
osbuild-lvm2-81-1.el9_2.1.noarch
osbuild-ostree-81-1.el9_2.1.noarch
osbuild-composer-worker-76-2.el9_2.2.x86_64
osbuild-composer-76-2.el9_2.2.x86_64

Verify steps and output:
1. Create a minimal blueprint with the Red Hat openssl image embedded and referenced by digest:
name = "ostree"
description = "A base ostree image"
version = "0.0.1"
modules = []
groups = []
[[packages]]
name = "python3"
version = "*"
[[containers]]
source = "registry.access.redhat.com/ubi8/openssl@sha256:9e743d947be073808f7f1750a791a3dbd81e694e37161e8c6c6057c2c342d671"

2. Build an edge-commit from that blueprint on a RHEL8.7 machine, deploy a machine with that edge-commit.

3. On the deployed machine, run `sudo podman images`:
[admin@vm-1 ~]$ sudo podman images
REPOSITORY                               TAG         IMAGE ID      CREATED       SIZE        R/O
quay.io/fedora/fedora                    latest      c9bfca6d0ac2  8 days ago    196 MB      true
registry.access.redhat.com/ubi8/openssl  <none>      7ee48a73504f  5 months ago  42.1 MB     true

4. Try to start a container with that image:
[admin@vm-1 ~]$ sudo podman run -it registry.access.redhat.com/ubi8/openssl@sha256:9e743d947be073808f7f1750a791a3dbd81e694e37161e8c6c6057c2c342d671 help
Standard commands
asn1parse         ca                ciphers           cms               
crl               crl2pkcs7         dgst              dhparam           
dsa               dsaparam          ec                ecparam           
enc               engine            errstr            gendsa            
genpkey           genrsa            help              list              
nseq              ocsp              passwd            pkcs12            
pkcs7             pkcs8             pkey              pkeyparam         
pkeyutl           prime             rand              rehash            
req               rsa               rsautl            s_client          
s_server          s_time            sess_id           smime             
speed             spkac             srp               storeutl          
ts                verify            version           x509              

Message Digest commands (see the `dgst' command for more details)
blake2b512        blake2s256        gost              md2               
md4               md5               rmd160            sha1              
sha224            sha256            sha3-224          sha3-256          
sha3-384          sha3-512          sha384            sha512            
sha512-224        sha512-256        shake128          shake256          
sm3               

Cipher commands (see the `enc' command for more details)
aes-128-cbc       aes-128-ecb       aes-192-cbc       aes-192-ecb       
aes-256-cbc       aes-256-ecb       aria-128-cbc      aria-128-cfb      
aria-128-cfb1     aria-128-cfb8     aria-128-ctr      aria-128-ecb      
aria-128-ofb      aria-192-cbc      aria-192-cfb      aria-192-cfb1     
aria-192-cfb8     aria-192-ctr      aria-192-ecb      aria-192-ofb      
aria-256-cbc      aria-256-cfb      aria-256-cfb1     aria-256-cfb8     
aria-256-ctr      aria-256-ecb      aria-256-ofb      base64            
bf                bf-cbc            bf-cfb            bf-ecb            
bf-ofb            camellia-128-cbc  camellia-128-ecb  camellia-192-cbc  
camellia-192-ecb  camellia-256-cbc  camellia-256-ecb  cast              
cast-cbc          cast5-cbc         cast5-cfb         cast5-ecb         
cast5-ofb         des               des-cbc           des-cfb           
des-ecb           des-ede           des-ede-cbc       des-ede-cfb       
des-ede-ofb       des-ede3          des-ede3-cbc      des-ede3-cfb      
des-ede3-ofb      des-ofb           des3              desx              
idea              idea-cbc          idea-cfb          idea-ecb          
idea-ofb          rc2               rc2-40-cbc        rc2-64-cbc        
rc2-cbc           rc2-cfb           rc2-ecb           rc2-ofb           
rc4               rc4-40            rc5               rc5-cbc           
rc5-cfb           rc5-ecb           rc5-ofb           seed              
seed-cbc          seed-cfb          seed-ecb          seed-ofb          
zlib              


5. Run `sudo podman images` again:
[admin@vm-1 ~]$ sudo podman images
REPOSITORY                               TAG         IMAGE ID      CREATED       SIZE        R/O
quay.io/fedora/fedora                    latest      c9bfca6d0ac2  8 days ago    196 MB      true
registry.access.redhat.com/ubi8/openssl  <none>      7ee48a73504f  5 months ago  42.1 MB     true

Sorry, I made a mistake, the above verify result should be pasted in another bug, please IGNORE it, thanks.

I will change the status back to ON_QA.

As original reporter has verified the patch earlier, change status to verified.

With build osbuild-81-1.el9_2.1.noarch and osbuild-composer-76-2.el9_2.2.x86_64, isolinux.bin is found at /isolinux/

[root@yih-92 isolinux]# pwd
/var/www/html/httpboot/isolinux
[root@yih-92 isolinux]# ls
boot.cat  initrd.img  isolinux.bin  isolinux.cfg  ldlinux.c32  libcom32.c32  libutil.c32  splash.png  vesamenu.c32  vmlinuz

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (osbuild and osbuild-composer bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2637