Created attachment 1248741 [details] All logs Description of problem: Package python2-passlib is unsigned on RHVH 4.1 async Version-Release number of selected component (if applicable): redhat-virtualization-host-4.1-20170208.0 imgbased-0.9.6-0.1.el7ev.noarch kernel-3.10.0-514.6.1.el7.x86_64 python2-passlib-1.6.5-1.el7ost.noarch How reproducible: 100% Steps to Reproduce: 1. Install RHVH 4.1 2. Login and check if all packages are signed: # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGPgpsig})\n' | grep -v "Key ID" Actual results: After step 2, package python2-passlib is unsigned: # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGPgpsig})\n' | grep -v "Key ID" python2-passlib-1.6.5-1.el7ost.noarch ((none)) Expected results: After step 2, there should be nothing output, all packages should be signed. Additional info:
Ryan, can we add this check to smoke testing right after the build?
Yes.
Test version: redhat-virtualization-host-4.1-20170222.0 This build is unsigned, so change status to ASSIGNED.
redhat-virtualization-host-4.1-20170222 ended up being an completely unsigned build for verification
Test version: redhat-virtualization-host-4.1-20170308.1 imgbased-0.9.17-0.1.el7ev.noarch kernel-3.10.0-514.6.1.el7.x86_64 python2-passlib-1.6.5-1.el7.noarch Steps to Reproduce: 1. Install redhat-virtualization-host-4.1-20170308.1 2. Login and check if all packages are signed: # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGPgpsig})\n' | grep -v "Key ID" Test results: After step 2, there is nothing output, all packages are signed. So this bug is fixed in redhat-virtualization-host-4.1-20170308.1, change the status to VERIFIED.
Test version: redhat-virtualization-host-4.1-20170403.0 imgbased-0.9.20-0.1.el7ev.noarch python2-passlib-1.6.5-1.el7.noarch kernel-3.10.0-514.6.1.el7.x86_64 Test steps: 1. Install redhat-virtualization-host-4.1-20170403.0 2. Login and check if all packages are signed: # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGPgpsig})\n' | grep -v "Key ID" Test results: After step 2, there is nothing output, all packages are signed. So this bug is fixed in redhat-virtualization-host-4.1-20170403.0, change the status to VERIFIED.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:1114