Description of problem: Seems to have issue related to https://bugzilla.redhat.com/show_bug.cgi?id=2170878 Version-Release number of selected component (if applicable): How reproducible: Install certain 3rd party packages fails. Not possible to --nogpgcheck or --force rpm install Steps to Reproduce: 1. toolbox create toolbox --release 38 2. toolbox enter fedora-toolbox-38 3. su - 4. dnf update -y 5. enable copr agriffis/neovim-nightly 6. dnf install python3-neovim Actual results: Problem opening package python3-neovim-0.4.3.0.git.601.71102c0-1.fc38.noarch.rpm The downloaded packages were saved in cache until the next successful transaction. You can remove cached packages by executing 'dnf clean packages'. Error: GPG check FAILED ⬢[root@toolbox ~]# Expected results: Install package successfully. Additional info: https://discussion.fedoraproject.org/t/talk-popular-third-party-rpms-fail-to-install-update-remove-due-to-security-policies-verification/70379/23
Thanks for testing out the fedora-toolbox:38 image. (In reply to Boyd from comment #0) > Additional info: > https://discussion.fedoraproject.org/t/talk-popular-third-party-rpms-fail-to- > install-update-remove-due-to-security-policies-verification/70379/23 Yeah, it's been a month since the fedora-toolbox images were last rebuilt, and the images for Fedora 38 are missing the fixes for bug 2170878 which was marked as a Fedora 38 blocker. Even under normal circumstances, it's time to rebuild them again, especially the one for Fedora 38 because of the Beta freeze, but this makes it really critical. Unfortunately, the 'fedpkg container-build' is currently broken: https://pagure.io/releng/issue/11367
I don't know why Bodhi didn't notify this bug, but a new image build was done three days ago: https://bodhi.fedoraproject.org/updates/FEDORA-CONTAINER-2023-5046242970 Testing and karma welcome.
Discussed during the 2023-04-03 blocker review meeting: [0] The decision to classify this bug as an "AcceptedFreezeException (Final)" was made as it'd be good to have the known cryptographic issues fixed in the toolbox image. [0] https://meetbot.fedoraproject.org/fedora-blocker-review/2023-04-03/f38-blocker-review.2023-04-03-16.01.txt
This is actually fixed in the new fedora-toolbox-38-15 build (pushed yesterday - note it is actually already stable). The previous fedora-toolbox-38-14 build probably didn't include the crypto fix yet.