Bug 2399786 - Issue when trying to use repos that have subkeys with rpm-ostree
Summary: Issue when trying to use repos that have subkeys with rpm-ostree
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: rpm-ostree
Version: 43
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Colin Walters
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: AcceptedFreezeException
: 2403433 (view as bug list)
Depends On: 2403093
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-09-26 18:49 UTC by John O'Dwyer
Modified: 2025-11-04 04:13 UTC (History)
12 users (show)

Fixed In Version: rpm-ostree-2025.12-1.fc43
Clone Of:
Environment:
Last Closed: 2025-11-04 04:13:43 UTC
Type: ---
Embargoed:
fedora-admin-xmlrpc: mirror+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Fedora Pagure workstation-ostree-config pull-request 690 0 None None None 2025-10-10 11:01:49 UTC
Github coreos rpm-ostree pull 5498 0 None open build(deps): bump libdnf from `998efa8` to `8eadf44` 2025-10-22 15:49:25 UTC
Red Hat Issue Tracker FC-2393 0 None None None 2025-09-26 18:50:09 UTC

Description John O'Dwyer 2025-09-26 18:49:42 UTC
Issue when trying to install Google-Chrome from the command line with rpm-ostree.

Fails with error: failed to add subkeys for /var/cache/rpm-ostree/repomd/google-chrome-43-x86_64/linux_signing_key.pub to rpmdb

Reproducible: Always

Steps to Reproduce:
1.Enable Google-Chrome repo
2.Try to install google-chrome-stable from the commandline using rpm-ostree install google-chrome-stable

Actual Results:
Fails with error: failed to add subkeys for /var/cache/rpm-ostree/repomd/google-chrome-43-x86_64/linux_signing_key.pub to rpmdb

Expected Results:
Google-Chrome should be installed

Additional Information:
This is the same with other repos enabled such as for mullvad-vpn

Version of Fedora is Fedora Silverblue 43 beta
Version of rpm-ostree is rpm-ostree-2025.11.1.fc43.x86_64

Comment 1 Timothée Ravier 2025-09-26 20:14:47 UTC
See https://github.com/coreos/rpm-ostree/issues/5494

Comment 2 John O'Dwyer 2025-09-26 20:39:38 UTC
(In reply to Timothée Ravier from comment #1)
> See https://github.com/coreos/rpm-ostree/issues/5494

Thank you Timothée!

Comment 3 Timothée Ravier 2025-10-10 11:01:50 UTC
Workaround in https://pagure.io/workstation-ostree-config/pull-request/690

I'm proposing this as a blocker/FE for F43.

Comment 4 Timothée Ravier 2025-10-10 14:27:40 UTC
Summary:

- rpm-ostree is impacted by https://bugzilla.redhat.com/show_bug.cgi?id=2372978, see: https://github.com/coreos/rpm-ostree/issues/5494
- Updating the bundled libdnf in rpm-ostree will likely not happen for F43 as we need to branch for C9S before, see: https://github.com/coreos/rpm-ostree/pull/5498
- When https://fedoraproject.org/wiki/Changes/Third_Party_Software_Mechanism was added in F35, we forgot to enable the unit syncing the config for Atomic Desktops.

Thus as a workaround:

- Enable the fedora-third-party-refresh.service: https://bugzilla.redhat.com/show_bug.cgi?id=2403093
- Disable the Chrome RPM repo for now: https://pagure.io/workstation-ostree-config/pull-request/690

---

Technically this won't fix this issue but at least it will not have users hit this error right after installation.

Comment 5 Fedora Blocker Bugs Application 2025-10-10 14:31:05 UTC
Proposed as a Freeze Exception for 43-final by Fedora user siosm using the blocker tracking app because:

 Without this workaround, Atomic Desktops users that enable Third Party Software and try to layer packages will immediately hit the error linked in the bug. We can revert this workaround once rpm-ostree is fixed.

Comment 6 Timothée Ravier 2025-10-13 07:15:28 UTC
*** Bug 2403433 has been marked as a duplicate of this bug. ***

Comment 7 Kamil Páral 2025-10-13 15:26:47 UTC
Accepted as a freeze exception in https://pagure.io/fedora-qa/blocker-review/issue/1975

Comment 8 Timothée Ravier 2025-10-13 21:27:55 UTC
Will be "fixed" (workaround'ed) when https://pagure.io/workstation-ostree-config/pull-request/695 lands in a build, hopefully tomorrow's. We'll re-open it after that to track the actual fix.

Comment 9 Adam Williamson 2025-10-22 00:04:20 UTC
What's the status on this?

Comment 10 Timothée Ravier 2025-10-22 11:31:42 UTC
The workaround should be in place in Rawhide & F43. I will have to double check that.

The underlying bug is not fixed yet: https://github.com/coreos/rpm-ostree/issues/5494 / https://github.com/coreos/rpm-ostree/pull/5498

Should I close it and re-open it or close it and open a new bug to track the actual fix?

Comment 11 Adam Williamson 2025-10-22 15:49:25 UTC
Let's do this.

Comment 12 gvisoc 2025-10-28 22:28:06 UTC
Hi. This issue persists after rebasing to Fedora 43 Kinoite (released, non-beta).

Comment 13 Adam Williamson 2025-10-28 22:56:04 UTC
That's not actually quite the same issue. https://pagure.io/fedora-qa/issue/836

Comment 14 Fedora Update System 2025-11-03 20:26:16 UTC
FEDORA-2025-ffaa2d6bf6 (rpm-ostree-2025.12-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-ffaa2d6bf6

Comment 15 John O'Dwyer 2025-11-03 21:01:34 UTC
(In reply to Fedora Update System from comment #14)
> FEDORA-2025-ffaa2d6bf6 (rpm-ostree-2025.12-1.fc43) has been submitted as an
> update to Fedora 43.
> https://bodhi.fedoraproject.org/updates/FEDORA-2025-ffaa2d6bf6

I've tested the update and it has fixed the issue. Thank you! You may close this ticket.

Comment 16 Fedora Update System 2025-11-04 04:13:43 UTC
FEDORA-2025-ffaa2d6bf6 (rpm-ostree-2025.12-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.