+++ This bug was initially created as a clone of Bug #2118310 +++ bump boot images to pick up signed RPMS
This bug has been reported fixed in a new RHCOS build and is ready for QE verification. To mark the bug verified, set the Verified field to Tested. This bug will automatically move to MODIFIED once the fix has landed in a new bootimage.
[core@cosa-devsh ~]$ rpm -qai | grep Signature | cut -f3 -d"," | sed 's/Key ID//' | tr -s ' ' | cut -b10- | sort | uniq -c 1 "XML Digital Signature" and "XML Encryption". 1 Library providing support for "XML Signature" and "XML Encryption" standards 501 fd431d51 [core@cosa-devsh ~]$ rpm-ostree status State: idle Deployments: ● dfa41a1e4d3e2a71b87eca4b3a3b5de17a6e0bc7acb880769e109ff0214cfc59 Version: 411.86.202208112011-0 (2022-08-11T20:15:08Z)
The fix for this bug has landed in a bootimage bump, as tracked in bug 2117279 (now in status MODIFIED). Moving this bug to MODIFIED.
Verify passed with latest 4.11.0-0.nightly [fedora@hhei ~]$ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.11.0-0.nightly-2022-08-24-091058 True False 67m Cluster version is 4.11.0-0.nightly-2022-08-24-091058 [fedora@hhei ~]$ oc get nodes NAME STATUS ROLES AGE VERSION ip-10-0-133-171.ec2.internal Ready master 81m v1.24.0+b62823b ip-10-0-138-83.ec2.internal Ready worker 91s v1.24.0+b62823b ip-10-0-142-104.ec2.internal Ready master 81m v1.24.0+b62823b ip-10-0-221-200.ec2.internal Ready worker 69m v1.24.0+b62823b ip-10-0-232-166.ec2.internal Ready master 80m v1.24.0+b62823b [fedora@hhei ~]$ oc debug nodes/ip-10-0-221-200.ec2.internal sh-4.4# chroot /host sh-4.4# rpm -qai | grep Signature | cut -f3 -d"," | sed 's/Key ID//' | tr -s ' ' | cut -b10- | sort | uniq -c 1 "XML Digital Signature" and "XML Encryption". 1 Library providing support for "XML Signature" and "XML Encryption" standards 501 fd431d51 sh-4.4# rpm-ostree status State: idle Deployments: * pivot://quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2fac26697d0644cbabbb65641addab5ace068783a6e6d840144b80dc295452ce CustomOrigin: Managed by machine-config-operator Version: 411.86.202208231420-0 (2022-08-23T14:24:06Z)
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (OpenShift Container Platform 4.11.2 bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:6143