Bug 2316785

Summary: f41 rpm -i ~/systemd-256.6-1.fc41.src.rpm fails
Product: [Fedora] Fedora Reporter: Barry Scott <barry>
Component: rpmAssignee: Michal Domonkos <mdomonko>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 41CC: igor.raits, mdomonko, packaging-team-maint, pmatilai
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: rpm-4.20.1-1.fc42 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-03-20 00:15:38 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Barry Scott 2024-10-06 11:34:30 UTC
Description of problem:

rpm cannot install systemd source RPM.


Version-Release number of selected component (if applicable):
rpm-4.19.94-1.fc41.aarch64

How reproducible:


Steps to Reproduce:
1. Install Fedora 39 KDE aarch64
2. Upgrade to f40
3. Upgrade to f41
4. dnf download --source systemd 
5. rpm -i systemd-256.6-1.fc41.src.rpm


Actual results:

`
:  13:10:22   armf41  ~/rpmbuild.d/systemd/SPECS
: [1] barry $ rpm -i ~/systemd-256.6-1.fc41.src.rpm
error: ima: could not apply signature on '/home/barry/rpmbuild.d/systemd/SOURCES/.abignore;67012ce2': Operation not permitted
error: Plugin ima: hook fsm_file_prepare failed
error: unpacking of archive failed on file /home/barry/rpmbuild.d/systemd/SOURCES/.abignore;67012ce2: cpio: (error 0x2)
error: /home/barry/systemd-256.6-1.fc41.src.rpm cannot be installed
`

Expected results:

rpm -i installs the RPM.

Additional info:

Why do I install f39 kde? Becuase there are not f40 or f41 ISOs built.
Did I install rpm-plugin-ima? Not explicitly.

Comment 1 Michal Domonkos 2024-11-11 14:33:37 UTC
For reference, quoting Panu's reply from a related thread on fedora-devel [1]:

> There's several things wrong in here.
> 
> 1) The packaging around ima-evm-utils has changed recently it seems: the 
> library part was split to -libs subpackage which is good, but previously 
> since rpm-sign-libs dependency dragged the main package in, it's 
> installed on a lot of systems. And now the main ima-evm-utils added a 
> dependency on rpm-plugin-ima which has all manner of implications that 
> just having some tools or libraries installed does not, and should not 
> have. That dependency will need to be removed or further split off to 
> something people wont get installed by default.
> 
> the library part was split to a -libs subpackage which is good, bu
> 1) ima-evm-utils recently added a dependency on rpm-plugin-ima, and this 
> seems wrong because having the plugin installed implies all manner of 
> things that having ima-evm-utils does not. The
> 
> 2) IMA signature don't make any sense on src.rpm files - so Fedora 
> shouldn't be signing them, and rpm shouldn't let them
> 
> 3) Even if the assertions in 2 fail and you somehow end up with an 
> src.rpm with IMA signatures on it, rpm should not barf up on it like this.
> 
> There's a bug for 2-3 at 
> https://bugzilla.redhat.com/show_bug.cgi?id=2316785, I'll need to file 
> another to sort the ima-evm-utils packaging.
> 
> Thanks for reporting!
> 
> - Panu -

[1] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/Y76II2DHPEWKAKLTBYOGGURHHHUSIHSL/

Comment 2 Fedora Update System 2025-03-10 12:44:11 UTC
FEDORA-2025-7f959f01d8 (rpm-4.20.1-1.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-7f959f01d8

Comment 3 Fedora Update System 2025-03-11 01:22:49 UTC
FEDORA-2025-7f959f01d8 has been pushed to the Fedora 42 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-7f959f01d8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-7f959f01d8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2025-03-20 00:15:38 UTC
FEDORA-2025-7f959f01d8 (rpm-4.20.1-1.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.