Description of problem: The PackageKit call to repo.getPackage(txmbr.po) fails when the repo is untrusted, e.g. f18-gnome. This breaks the offline update feature which is a required feature for F18. Yum from git master has been fixed with quite a few commits in that area (e.g. ef033251187312535bfd1e5dcddfa444b1ac50d6), but yum-3.4.3-44 is broken in Fedora. Downloading files from repos in F18 now fails with: --- Cannot download file: Downloaded package gpgme-devel-1.3.2-1.fc18.x86_64, from f18-gnome, but it was invalid. --- Version-Release number of selected component (if applicable): yum-3.4.3-44 How reproducible: Always Steps to Reproduce: 1. Set up a repo file to an unsigned repo, e.g. f18-gnome 2. Do "pkcon update --only-download" 3. Observe message from yum about the download being invalid (the package is not signed, and is not meant to be signed) Actual results: A failed offline update. Expected results: A downloaded file. Additional info: This is most probably a F18 blocker. Either the commits from master can be backported into -44, or a new release could be uploaded.
yum-3.4.3-45.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/yum-3.4.3-45.fc18
Package yum-3.4.3-45.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing yum-3.4.3-45.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-15231/yum-3.4.3-45.fc18 then log in and leave karma (feedback).
Discussed at 2012-10-03 blocker review meeting: http://meetbot.fedoraproject.org/fedora-qa/2012-10-03/f18-beta-blocker-review-2.2012-10-03-16.00.log.txt . It's an established principle (written in the release criteria pages) that bugs are not blockers simply because they relate to features: the feature process and the blocker process are separate by design. Incomplete features are a FESCo / feature process issue, not a release validation / blocker process issue. We also note that this bug does not appear to violate the update criteria as they currently stand. We further note that it appears to happen only if you are using an unofficial, unsigned repository anyway, which we wouldn't count as a release blocker in any case. So this fails from any angle. =) Rejected as a blocker and rejected as NTH, re-propose with better justification if needed. Note that freeze is not until 10-09, so this can be pushed quite happily any time before that.
yum-3.4.3-45.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.