Bug 2337585

Summary:	Managing expired PGP keys in DNF5
Product:	[Fedora] Fedora	Reporter:	Aoife Moloney <amoloney>
Component:	Changes Tracking	Assignee:	Jan Kolarik <jkolarik>
Status:	ON_QA ---	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	jkolarik
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	dnf5-5.2.10.0-2.fc42	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2302545

Description Aoife Moloney 2025-01-14 11:17:39 UTC

This is a tracking bug for Change: Managing expired PGP keys in DNF5
For more details, see: https://fedoraproject.org/wiki/Changes/Dnf5ExpiredPGPKeys

Implementing new logic in DNF5 to remove expired and obsolete repository keys from the system.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Aoife Moloney 2025-01-24 14:32:08 UTC

Hi Jan, how goes this change for F42? The testable deadline is coming up in about two weeks, on Feb 4th, and changes need to be in good shape at this point https://docs.fedoraproject.org/en-US/program_management/changes_policy/#_change_process_milestones for Beta.

Please let me know if you need to defer this to F43, otherwise if youre good to go for the change to be ready to meet the testable requirements, please update the status of the tracker bug to MODIFIED.


Thanks!
Aoife

Comment 2 Jan Kolarik 2025-01-28 09:39:44 UTC

Hi Aoife,

Thanks for the reminder. To be honest, I hadn’t checked the timeline carefully and somehow thought the deadlines were a few weeks later. That said, the PR is ready, and I believe it will be reviewed and merged this week. By the end of the week, we should have a testable build ready.

Upstream PR: https://github.com/rpm-software-management/dnf5/pull/1592.

Comment 3 Jan Kolarik 2025-02-06 15:02:45 UTC

This can be now tested by upgrading to the dnf5-5.2.10.0 and installing the libdnf5-plugin-expired-pgp-keys package on the system (https://bodhi.fedoraproject.org/updates/FEDORA-2025-d2d0e562dc). However, it is not yet automatically available for Fedora users. The only remaining step for full completion is deciding how it will be distributed—most likely through an update to the DNF5 spec file or a Kiwi compose for Fedora 42.