0017172: Extras and Appstream repo fails with GPG signature error when repo_gpg check set to 1

ID	Project	Category	View Status	Date Submitted	Last Update

0017172	CentOS-8	general	public	2020-03-20 15:24	2020-07-02 00:24

Reporter	myankus	Assigned To
Priority	normal	Severity	minor	Reproducibility	random
Status	resolved	Resolution	not fixable
Platform	linux	OS	Centos 8	OS Version	Any Centos 8
Product Version	8.1.1911

Summary	0017172: Extras and Appstream repo fails with GPG signature error when repo_gpg check set to 1
Description	This problem seems to happen every couple of weeks and may occur when the repos are first updated. The problem with this issue is that none of our users can update or install software through dnf during this period. # dnf update CentOS-8 - AppStream 1.8 kB/s \| 811 B 00:00 CentOS-8 - Base 1.4 kB/s \| 811 B 00:00 CentOS-8 - Extras 13 kB/s \| 811 B 00:00 CentOS-8 - Extras 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Extras 22 kB/s \| 811 B 00:00 Failed to download metadata for repo 'extras' Error: Failed to download metadata for repo 'extras'
Steps To Reproduce	1. Update dnf repo config file CentOS-AppStream.repo by adding this line at the bottom: repo_gpgcheck=1 2. Attempt to update packages through dnf: dnf update -v
Tags	No tags attached.

myankus 2020-03-20 15:49 reporter ~0036543	Previous bug for same issue here: https://bugs.centos.org/view.php?id=16932

myankus 2020-04-03 13:39 reporter ~0036648	We are seeing this issue today 4/3/2020 13:30 UTC in Eastern US: dnf update CentOS-8 - AppStream 6.1 kB/s \| 811 B 00:00 CentOS-8 - AppStream 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - AppStream 34 kB/s \| 811 B 00:00 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream'

myankus 2020-04-14 18:15 reporter ~0036689	We are seeing this issue again today 4/14/2020: # dnf update CentOS-8 - AppStream 32 MB/s \| 6.8 MB 00:00 CentOS-8 - Base 15 kB/s \| 811 B 00:00 CentOS-8 - Base 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Base 31 kB/s \| 811 B 00:00 Failed to download metadata for repo 'BaseOS' Error: Failed to download metadata for repo 'BaseOS'

myankus 2020-04-19 16:45 reporter ~0036716	We are seeing this issue again today 4/19/2020 dnf update CentOS-8 - Extras 3.6 kB/s \| 811 B 00:00 CentOS-8 - Extras 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Extras 11 kB/s \| 811 B 00:00 Failed to download metadata for repo 'extras' Error: Failed to download metadata for repo 'extras'

myankus 2020-04-23 14:17 reporter ~0036756	We are seeing this issue again today 4/23/2020 dnf update CentOS-8 - AppStream 629 B/s \| 811 B 00:01 CentOS-8 - AppStream 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - AppStream 34 kB/s \| 811 B 00:00 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream'

myankus 2020-04-24 12:26 reporter ~0036764	4/24/2020 dnf update Repository 'AppStream' is missing name in configuration, using id. AppStream 6.2 kB/s \| 811 B 00:00 AppStream 1.6 MB/s \| 1.6 kB 00:00 AppStream 35 kB/s \| 811 B 00:00 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream'

myankus 2020-04-28 14:54 reporter ~0036793	4/28/2020 dnf is not reliable when repo_gpg check set to 1. dnf update CentOS-8 - AppStream 3.9 kB/s \| 811 B 00:00 CentOS-8 - AppStream 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - AppStream 34 kB/s \| 811 B 00:00 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream'

myankus 2020-04-28 15:00 reporter ~0036796	As a temporary work around, you can set the following dnf configuration. However, gpg repo checks should work for all mirrors....this is still a bug. [AppStream] name=CentOS-$releasever - AppStream #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=AppStream&infra=$infra baseurl=http://mirror.centos.org/$contentdir/$releasever/AppStream/$basearch/os/ gpgcheck=1 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial repo_gpgcheck=1

myankus 2020-04-29 14:09 reporter ~0036814	4/29/2020 dnf is not reliable when repo_gpg check set to 1. dnf update Repository 'AppStream' is missing name in configuration, using id. CentOS-8 - Extras 3.5 kB/s \| 811 B 00:00 CentOS-8 - Extras 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Extras 31 kB/s \| 811 B 00:00 Failed to download metadata for repo 'extras' Error: Failed to download metadata for repo 'extras'

myankus 2020-05-27 13:09 reporter ~0037002	5/27/2020 This was working for the past few weeks but starting failing today on the "extras" repo. dnf is not reliable when repo_gpg check set to 1. dnf update CentOS-8 - AppStream 23 MB/s \| 7.0 MB 00:00 CentOS-8 - Base 36 MB/s \| 2.2 MB 00:00 CentOS-8 - Extras 4.2 kB/s \| 811 B 00:00 CentOS-8 - Extras 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Extras 35 kB/s \| 811 B 00:00 Failed to download metadata for repo 'extras' Error: Failed to download metadata for repo 'extras'

myankus 2020-06-02 18:12 reporter ~0037027	6/2/2020 Extras repo still broken with repo_gpg check set to 1. dnf update CentOS-8 - AppStream 30 MB/s \| 7.0 MB 00:00 CentOS-8 - Base 28 MB/s \| 2.2 MB 00:00 CentOS-8 - Extras 8.8 kB/s \| 811 B 00:00 CentOS-8 - Extras 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Extras 17 kB/s \| 811 B 00:00 Failed to download metadata for repo 'extras' Error: Failed to download metadata for repo 'extras'

myankus 2020-06-16 13:19 reporter ~0037123	6/16/2020 dnf update CentOS-8 - AppStream 3.6 kB/s \| 811 B 00:00 CentOS-8 - AppStream 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - AppStream 9.6 kB/s \| 811 B 00:00 Failed to download metadata for repo 'AppStream' Error: Failed to download metadata for repo 'AppStream'

myankus 2020-06-22 12:39 reporter ~0037199	6/22/2022 dnf update Repository 'AppStream' is missing name in configuration, using id. AppStream 4.6 kB/s \| 811 B 00:00 AppStream 1.6 MB/s \| 1.6 kB 00:00 AppStream 33 kB/s \| 811 B 00:00 Error: Failed to download metadata for repo 'AppStream': repomd.xml GPG signature verification error: Bad GPG signature

myankus 2020-06-29 16:54 reporter ~0037261	6/29/2020 ]# dnf update CentOS-8 - Base 9.3 kB/s \| 811 B 00:00 CentOS-8 - Base 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Base 41 kB/s \| 811 B 00:00 Error: Failed to download metadata for repo 'BaseOS': repomd.xml GPG signature verification error: Bad GPG signature

myankus 2020-06-30 13:00 reporter ~0037276	6/30/2020 # dnf update CentOS-8 - Base 3.8 kB/s \| 811 B 00:00 CentOS-8 - Base 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - Base 20 kB/s \| 811 B 00:00 Error: Failed to download metadata for repo 'BaseOS': repomd.xml GPG signature verification error: Bad GPG signature

bstinson 2020-06-30 19:47 administrator ~0037279	We just pushed new repodata, can you double check as soon as this gets propagated to your closest mirror?

myankus 2020-07-01 00:01 reporter ~0037280	dnf is now breaking on appstream: # dnf update CentOS-8 - AppStream 3.5 kB/s \| 811 B 00:00 CentOS-8 - AppStream 1.6 MB/s \| 1.6 kB 00:00 CentOS-8 - AppStream 25 kB/s \| 811 B 00:00 Error: Failed to download metadata for repo 'AppStream': repomd.xml GPG signature verification error: Bad GPG signature

bstinson 2020-07-02 00:24 administrator ~0037288	Double check that your closest mirror is up to date, running directly on our master mirror: $ gpg --verify 8.2.2004/AppStream/x86_64/os/repodata/repomd.xml.asc gpg: Signature made Tue 30 Jun 2020 07:28:00 PM UTC using RSA key ID 8483C65D gpg: Good signature from "CentOS (CentOS Official Signing Key) <security@centos.org>" (same for the other arches as well)

Date Modified	Username	Field	Change
2020-03-20 15:24	myankus	New Issue
2020-03-20 15:49	myankus	Note Added: 0036543
2020-04-03 13:39	myankus	Note Added: 0036648
2020-04-14 18:15	myankus	Note Added: 0036689
2020-04-19 16:45	myankus	Note Added: 0036716
2020-04-23 14:17	myankus	Note Added: 0036756
2020-04-24 12:26	myankus	Note Added: 0036764
2020-04-28 14:54	myankus	Note Added: 0036793
2020-04-28 15:00	myankus	Note Added: 0036796
2020-04-29 14:09	myankus	Note Added: 0036814
2020-05-27 13:09	myankus	Note Added: 0037002
2020-06-02 18:12	myankus	Note Added: 0037027
2020-06-16 13:19	myankus	Note Added: 0037123
2020-06-22 12:39	myankus	Note Added: 0037199
2020-06-29 16:54	myankus	Note Added: 0037261
2020-06-30 13:00	myankus	Note Added: 0037276
2020-06-30 13:05	myankus	Issue cloned: 0017553
2020-06-30 19:47	bstinson	Status	new => feedback
2020-06-30 19:47	bstinson	Note Added: 0037279
2020-07-01 00:01	myankus	Note Added: 0037280
2020-07-01 00:01	myankus	Status	feedback => assigned
2020-07-02 00:24	bstinson	Status	assigned => resolved
2020-07-02 00:24	bstinson	Resolution	open => not fixable
2020-07-02 00:24	bstinson	Note Added: 0037288

View Issue Details

Activities

Issue History