Bug 2005760 - firefox not installable in rawhide: mozilla-openh264-2.1.1-2.fc35.x86_64 fails GPG check
Summary: firefox not installable in rawhide: mozilla-openh264-2.1.1-2.fc35.x86_64 fail...
Keywords:
Status: CLOSED DEFERRED
Alias: None
Product: Fedora
Classification: Fedora
Component: firefox
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: Gecko Maintainer
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-09-20 05:32 UTC by Martin Pitt
Modified: 2021-09-20 09:51 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-09-20 09:48:32 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Martin Pitt 2021-09-20 05:32:42 UTC
Description of problem: Since the branching of F35 (i.e. for a few weeks now), firefox has been uninstallable in Rawhide. This has broken our CI.

As Fedora (irritatingly) changes its GPG key for every release, my theory is that mozilla-openh264 was not rebuilt for Rawhide yet, so that you still get the .fc35 version, and the F35 key is not available by default in rawhide?


Version-Release number of selected component (if applicable):

firefox 92.0-3.fc36
mozilla-openh264-2.1.1-2.fc35.x86_64

How reproducible: Always


Steps to Reproduce:
1. podman run -it --rm fedora:rawhide dnf install -y  firefox

I also confirmed this on a cloud image, it's not container specific.

IMG=$(curl -s -L https://download.fedoraproject.org/pub/fedora/linux/development/rawhide/Cloud/x86_64/images/ | grep -o 'Fedora-Cloud-Base-Rawhide[^"]*qcow2' | head -n1)
curl -L -o rawhide.qcow2 https://download.fedoraproject.org/pub/fedora/linux/development/rawhide/Cloud/x86_64/images/$IMG
# nothing fancy, just admin:foobar and root:foobar users
curl -L -O https://github.com/cockpit-project/bots/raw/main/machine/cloud-init.iso
qemu-system-x86_64 -cpu host -enable-kvm -nographic -m 2048 -drive file=rawhide.qcow2,if=virtio -snapshot -cdrom cloud-init.iso

# then log in as root:foobar, and `dnf install -y firefox`


Actual results: Fails with

GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-x86_64 (0x38AB71F4) is already installed
The GPG keys listed for the "Fedora rawhide openh264 (From Cisco) - x86_64" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: mozilla-openh264-2.1.1-2.fc35.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-x86_64
Public key for openh264-2.1.1-2.fc35.x86_64.rpm is not installed. Failing package is: openh264-2.1.1-2.fc35.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-x86_64
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED


Expected results: firefox installs


Additional info:

Comment 1 Martin Stransky 2021-09-20 09:26:41 UTC
Please report that at https://pagure.io/fedora-infrastructure/issues
Bugzilla is for actual bugs in applications, not for bugs with Fedora infrastructure issues.
Thanks.

Comment 2 Martin Pitt 2021-09-20 09:33:30 UTC
But this is not infrastructure -- the actual Fedora repo/the packages are wrong. Supposedly mozilla-openh264 needs a rebuild or so?

Comment 3 Martin Stransky 2021-09-20 09:43:22 UTC
mozilla-openh264 is not a Fedora package - it's third party software. See https://fedoraproject.org/wiki/OpenH264
It's distributed by third party repo fedora-cisco-openh264 so you can disable it for now if you have any issues with that.

Comment 4 Martin Stransky 2021-09-20 09:45:00 UTC
Also see https://fedoraproject.org/wiki/Non-distributable-rpms although it doesn't provide any meaningful info. The best advice I can give you is to file a bug at  https://pagure.io/fedora-infrastructure/issues

Comment 5 Martin Pitt 2021-09-20 09:48:32 UTC
I see -- firefox recommends mozilla-openh264, and dnf fails if a recommended package fails to install.

Confirmed that `dnf install --disablerepo=fedora-cisco-openh264 -y firefox` works.

Thanks!

Comment 6 Martin Pitt 2021-09-20 09:51:14 UTC
Filed here: https://pagure.io/fedora-infrastructure/issue/10228


Note You need to log in before you can comment on or make changes to this bug.