Created attachment 1243825 [details] sosreport and all logs Description of problem: Package redhat-virtualization-host-image-update is unsigned after upgrade to RHVH4.1 # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGPgpsig})\n' | grep -v "Key ID" redhat-virtualization-host-image-update-4.1-20170120.0.el7_3.noarch ((none)) Version-Release number of selected component (if applicable): 1. Before update: redhat-virtualization-host-4.0-20161116.1 imgbased-0.8.10-0.1.el7ev.noarch 2. After update: redhat-virtualization-host-4.1-20170120.0 imgbased-0.9.6-0.1.el7ev.noarch How reproducible: 100% Steps to Reproduce: 1. Install redhat-virtualization-host-4.0-20161116.1 2. Reboot and login the rhvh4.0, add host to engine. Setup local repo in rhvh4.0, upgrade rhvh4.0 to rhvh4.1 #yum update 3. Reboot and login new build rhvh4.1, check if all packages are signed Actual results: 1. After step #3, package redhat-virtualization-host-image-update is unsigned after upgrade: # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGPgpsig})\n' | grep -v "Key ID" redhat-virtualization-host-image-update-4.1-20170120.0.el7_3.noarch ((none)) Expected results: 1. After step#3, all packages should be signed, output should be null. Additional info:
This follows the normal package flow for errata. All of the components RPMs of redhat-virtualization-host are signed. However, the actual update itself is not signed. The visibility of this package after an upgrade is part of the resolution to: https://bugzilla.redhat.com/show_bug.cgi?id=1364040 redhat-virtualization-host-image-update will be signed once it passes through errata and is released.