Bug 2249246 - Offline upgrade to Fedora Server 39 aarch64 with 'dnf system-upgrade' fails with 'Error: GPG check FAILED' on Raspberry Pi 4
Summary: Offline upgrade to Fedora Server 39 aarch64 with 'dnf system-upgrade' fails w...
Keywords:
Status: CLOSED DUPLICATE of bug 2242759
Alias: None
Product: Fedora
Classification: Fedora
Component: dnf
Version: 38
Hardware: aarch64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: rpm-software-management
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-11-11 15:33 UTC by Vince Pooley
Modified: 2023-11-13 06:44 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2023-11-13 06:44:08 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Vince Pooley 2023-11-11 15:33:02 UTC
Have two Raspberry Pi4s both running Fedora Server 38 aarch64, attempting to do a offline upgrade after using 'dnf system-upgrade reboot' fails with a GPG error.

============
2023-10-25T01:02:06+0100 SUBDEBUG 
Traceback (most recent call last):
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 67, in main
    return _main(base, args, cli_class, option_parser_class)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 106, in _main
    return cli_run(cli, base)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 130, in cli_run
    ret = resolving(cli, base)
          ^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 176, in resolving
    base.do_transaction(display=displays)
  File "/usr/lib/python3.11/site-packages/dnf/cli/cli.py", line 238, in do_transaction
    self.gpgsigcheck(install_pkgs)
  File "/usr/lib/python3.11/site-packages/dnf/cli/cli.py", line 305, in gpgsigcheck
    raise dnf.exceptions.Error(_("GPG check FAILED"))
dnf.exceptions.Error: GPG check FAILED
2023-10-25T01:02:06+0100 CRITICAL Error: GPG check FAILED
============


Reproducible: Always

Steps to Reproduce:
1. run 'dnf system-upgrade download --releasever=39' on Fedora Server 38 aarch64 on Raspberry Pi 4
2. run 'dnf system-upgrade reboot'
3. check /etc/os-release for system version after restart shows f38
4. inspecting /var/log/dnf.conf shows upgrade failed to read downloaded packages due to GPG error
Actual Results:  
System is not upgraded

Expected Results:  
System upgraded to f39

One system is a mature install, the other is a recent installation which is close to stock, just with the addition of cockpit & libvirt to run a few aarch64 vms.
Both Pis use a USB attached SSD as their boot disk

Have attempted to reproduce by running Fedora Server 38 in a vm and performing the upgrade and it works, so the issue only seems to happen on bare metal.

Have attempted to remediate by;
- Manually reimported fedora's gpg keys with 'curl https://fedoraproject.org/fedora.gpg | sudo gpg --import'
- Regenerated initramfs/initrd images with 'dracut --regenerate-all --force'
- Amended dnf.conf with 'gpgcheck=False' before rerunning dnf system-upgrade commands

Typical debug output in dnf.log;

2023-10-25T01:00:51+0100 INFO Total size: 919 M
2023-10-25T01:00:51+0100 INFO Downloading Packages:
2023-10-25T01:00:52+0100 DEBUG Using rpmkeys executable at /usr/bin/rpmkeys to verify signatures
2023-10-25T01:02:06+0100 CRITICAL Problem opening package google-noto-sans-mono-vf-fonts-20230801-4.fc39.noarch.rpm
2023-10-25T01:02:06+0100 CRITICAL Problem opening package google-noto-serif-vf-fonts-20230801-4.fc39.noarch.rpm
2023-10-25T01:02:06+0100 CRITICAL Problem opening package iwlegacy-firmware-20231030-

...

2023-10-25T01:02:06+0100 CRITICAL Problem opening package iwlwifi-dvm-firmware-20231030-1.fc39.noarch.rpm
1.fc39.aarch64.rpm
2023-10-25T01:02:06+0100 CRITICAL Problem opening package yum-4.18.1-1.fc39.noarch.rpm
2023-10-25T01:02:06+0100 CRITICAL Problem opening package rpmfusion-free-release-39-1.noarch.rpm
2023-10-25T01:02:06+0100 CRITICAL Problem opening package rpmfusion-nonfree-release-39-1.noarch.rpm
2023-10-25T01:02:06+0100 CRITICAL Problem opening package unrar-6.2.12-1.fc39.aarch64.rpm
2023-10-25T01:02:06+0100 DDEBUG Cleaning up.
2023-10-25T01:02:06+0100 DDEBUG Plugins were unloaded.
2023-10-25T01:02:06+0100 SUBDEBUG 
Traceback (most recent call last):
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 67, in main
    return _main(base, args, cli_class, option_parser_class)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 106, in _main
    return cli_run(cli, base)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 130, in cli_run
    ret = resolving(cli, base)
          ^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/dnf/cli/main.py", line 176, in resolving
    base.do_transaction(display=displays)
  File "/usr/lib/python3.11/site-packages/dnf/cli/cli.py", line 238, in do_transaction
    self.gpgsigcheck(install_pkgs)
  File "/usr/lib/python3.11/site-packages/dnf/cli/cli.py", line 305, in gpgsigcheck
    raise dnf.exceptions.Error(_("GPG check FAILED"))
dnf.exceptions.Error: GPG check FAILED
2023-10-25T01:02:06+0100 CRITICAL Error: GPG check FAILED

Comment 1 Vince Pooley 2023-11-12 13:37:16 UTC
To add, have recreated with fresh image on an SD card and a third Pi (Pi 400) as follows...

- Write Fedora-Server-38-1.6.aarch64.raw.xz image to SD
- First boot and setup on a Pi 400 with wired Ethernet
- 'dnf upgrade --refresh' & reboot
- 'dnf system-upgrade download --releasever=39' completes successfully
- 'dnf system-upgrade reboot'
- system boots after a few minutes with failed upgrade with GPG error as detailed.

Comment 2 amatej 2023-11-13 06:44:08 UTC
I think this is a problem with the system clock.
The issue is tracked here: https://bugzilla.redhat.com/show_bug.cgi?id=2242759
(Please check it out for more details.)

*** This bug has been marked as a duplicate of bug 2242759 ***


Note You need to log in before you can comment on or make changes to this bug.