Description of problem: I'm using virt-builder with a custom index. My fingerprint is: EA0F 15A0 574D FC19 8F4A BEA2 A0E8 F3C0 2409 0D66 The following command works (as it should): virt-builder --source index.asc --fingerprint 'EA0F 15A0 574D FC19 8F4A BEA2 A0E8 F3C0 2409 0D66' --list and this one fails (as it should): virt-builder --source index.asc --fingerprint 'BADD BADD BADD BADD BADD BADD BADD BADD BADD BADD' --list virt-builder: error: could not import public key This one works! (makes sense, although I'd think --fingerprint should be incompatible with --no-check-signature): virt-builder --source index.asc --fingerprint 'BADD BADD BADD BADD BADD BADD BADD BADD BADD BADD' --no-check-signature --list But unfortunately, this one fails, because no bogus sig was supplied. $ virt-builder --source index.asc --no-check-signature --list virt-builder: error: source and fingerprint lists are not the same length When I would expect it to work... Version-Release number of selected component (if applicable): $ virt-builder --version virt-builder 1.28.6 How reproducible: 100% Additional info: Not an urgent bug because you can fake it by supplying a fake fingerprint, but probably good to mention.
Patch posted: https://www.redhat.com/archives/libguestfs/2015-February/msg00161.html
Fixed with https://github.com/libguestfs/libguestfs/commit/869b9fcf97d1084e06c16ec25df60d3bc58bfb0f which is in libguestfs >= 1.29.27.