View Issue Details

IDProjectCategoryView StatusLast Update
0017172CentOS-8generalpublic2020-07-02 00:24
Reportermyankus 
PrioritynormalSeverityminorReproducibilityrandom
Status resolvedResolutionnot fixable 
PlatformlinuxOSCentos 8OS VersionAny Centos 8
Product Version8.1.1911 
Target VersionFixed in Version 
Summary0017172: Extras and Appstream repo fails with GPG signature error when repo_gpg check set to 1
DescriptionThis problem seems to happen every couple of weeks and may occur when the repos are first updated. The problem with this issue is that none of our users can update or install software through dnf during this period.

# dnf update
CentOS-8 - AppStream 1.8 kB/s | 811 B 00:00
CentOS-8 - Base 1.4 kB/s | 811 B 00:00
CentOS-8 - Extras 13 kB/s | 811 B 00:00
CentOS-8 - Extras 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Extras 22 kB/s | 811 B 00:00
Failed to download metadata for repo 'extras'
Error: Failed to download metadata for repo 'extras'
Steps To Reproduce1. Update dnf repo config file CentOS-AppStream.repo by adding this line at the bottom: repo_gpgcheck=1
2. Attempt to update packages through dnf: dnf update -v
TagsNo tags attached.

Activities

myankus

myankus

2020-03-20 15:49

reporter   ~0036543

Previous bug for same issue here: https://bugs.centos.org/view.php?id=16932
myankus

myankus

2020-04-03 13:39

reporter   ~0036648

We are seeing this issue today 4/3/2020 13:30 UTC in Eastern US:

 dnf update
CentOS-8 - AppStream 6.1 kB/s | 811 B 00:00
CentOS-8 - AppStream 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - AppStream 34 kB/s | 811 B 00:00
Failed to download metadata for repo 'AppStream'
Error: Failed to download metadata for repo 'AppStream'
myankus

myankus

2020-04-14 18:15

reporter   ~0036689

We are seeing this issue again today 4/14/2020:

# dnf update
CentOS-8 - AppStream 32 MB/s | 6.8 MB 00:00
CentOS-8 - Base 15 kB/s | 811 B 00:00
CentOS-8 - Base 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Base 31 kB/s | 811 B 00:00
Failed to download metadata for repo 'BaseOS'
Error: Failed to download metadata for repo 'BaseOS'
myankus

myankus

2020-04-19 16:45

reporter   ~0036716

We are seeing this issue again today 4/19/2020

 dnf update
CentOS-8 - Extras 3.6 kB/s | 811 B 00:00
CentOS-8 - Extras 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Extras 11 kB/s | 811 B 00:00
Failed to download metadata for repo 'extras'
Error: Failed to download metadata for repo 'extras'
myankus

myankus

2020-04-23 14:17

reporter   ~0036756

We are seeing this issue again today 4/23/2020

dnf update
CentOS-8 - AppStream 629 B/s | 811 B 00:01
CentOS-8 - AppStream 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - AppStream 34 kB/s | 811 B 00:00
Failed to download metadata for repo 'AppStream'
Error: Failed to download metadata for repo 'AppStream'
myankus

myankus

2020-04-24 12:26

reporter   ~0036764

4/24/2020

dnf update
Repository 'AppStream' is missing name in configuration, using id.
AppStream 6.2 kB/s | 811 B 00:00
AppStream 1.6 MB/s | 1.6 kB 00:00
AppStream 35 kB/s | 811 B 00:00
Failed to download metadata for repo 'AppStream'
Error: Failed to download metadata for repo 'AppStream'
myankus

myankus

2020-04-28 14:54

reporter   ~0036793

4/28/2020

dnf is not reliable when repo_gpg check set to 1.

 dnf update
CentOS-8 - AppStream 3.9 kB/s | 811 B 00:00
CentOS-8 - AppStream 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - AppStream 34 kB/s | 811 B 00:00
Failed to download metadata for repo 'AppStream'
Error: Failed to download metadata for repo 'AppStream'
myankus

myankus

2020-04-28 15:00

reporter   ~0036796

As a temporary work around, you can set the following dnf configuration. However, gpg repo checks should work for all mirrors....this is still a bug.

[AppStream]
name=CentOS-$releasever - AppStream
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=AppStream&infra=$infra
baseurl=http://mirror.centos.org/$contentdir/$releasever/AppStream/$basearch/os/
gpgcheck=1
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
repo_gpgcheck=1
myankus

myankus

2020-04-29 14:09

reporter   ~0036814

4/29/2020

dnf is not reliable when repo_gpg check set to 1.

dnf update
Repository 'AppStream' is missing name in configuration, using id.
CentOS-8 - Extras 3.5 kB/s | 811 B 00:00
CentOS-8 - Extras 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Extras 31 kB/s | 811 B 00:00
Failed to download metadata for repo 'extras'
Error: Failed to download metadata for repo 'extras'
myankus

myankus

2020-05-27 13:09

reporter   ~0037002

5/27/2020
This was working for the past few weeks but starting failing today on the "extras" repo.

dnf is not reliable when repo_gpg check set to 1.

dnf update
CentOS-8 - AppStream 23 MB/s | 7.0 MB 00:00
CentOS-8 - Base 36 MB/s | 2.2 MB 00:00
CentOS-8 - Extras 4.2 kB/s | 811 B 00:00
CentOS-8 - Extras 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Extras 35 kB/s | 811 B 00:00
Failed to download metadata for repo 'extras'
Error: Failed to download metadata for repo 'extras'
myankus

myankus

2020-06-02 18:12

reporter   ~0037027

6/2/2020
Extras repo still broken with repo_gpg check set to 1.

 dnf update
CentOS-8 - AppStream 30 MB/s | 7.0 MB 00:00
CentOS-8 - Base 28 MB/s | 2.2 MB 00:00
CentOS-8 - Extras 8.8 kB/s | 811 B 00:00
CentOS-8 - Extras 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Extras 17 kB/s | 811 B 00:00
Failed to download metadata for repo 'extras'
Error: Failed to download metadata for repo 'extras'
myankus

myankus

2020-06-16 13:19

reporter   ~0037123

6/16/2020
 dnf update
CentOS-8 - AppStream 3.6 kB/s | 811 B 00:00
CentOS-8 - AppStream 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - AppStream 9.6 kB/s | 811 B 00:00
Failed to download metadata for repo 'AppStream'
Error: Failed to download metadata for repo 'AppStream'
myankus

myankus

2020-06-22 12:39

reporter   ~0037199

6/22/2022
dnf update
Repository 'AppStream' is missing name in configuration, using id.
AppStream 4.6 kB/s | 811 B 00:00
AppStream 1.6 MB/s | 1.6 kB 00:00
AppStream 33 kB/s | 811 B 00:00
Error: Failed to download metadata for repo 'AppStream': repomd.xml GPG signature verification error: Bad GPG signature
myankus

myankus

2020-06-29 16:54

reporter   ~0037261

6/29/2020
]# dnf update
CentOS-8 - Base 9.3 kB/s | 811 B 00:00
CentOS-8 - Base 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Base 41 kB/s | 811 B 00:00
Error: Failed to download metadata for repo 'BaseOS': repomd.xml GPG signature verification error: Bad GPG signature
myankus

myankus

2020-06-30 13:00

reporter   ~0037276

6/30/2020
# dnf update
CentOS-8 - Base 3.8 kB/s | 811 B 00:00
CentOS-8 - Base 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - Base 20 kB/s | 811 B 00:00
Error: Failed to download metadata for repo 'BaseOS': repomd.xml GPG signature verification error: Bad GPG signature
bstinson

bstinson

2020-06-30 19:47

administrator   ~0037279

We just pushed new repodata, can you double check as soon as this gets propagated to your closest mirror?
myankus

myankus

2020-07-01 00:01

reporter   ~0037280

dnf is now breaking on appstream:

# dnf update
CentOS-8 - AppStream 3.5 kB/s | 811 B 00:00
CentOS-8 - AppStream 1.6 MB/s | 1.6 kB 00:00
CentOS-8 - AppStream 25 kB/s | 811 B 00:00
Error: Failed to download metadata for repo 'AppStream': repomd.xml GPG signature verification error: Bad GPG signature
bstinson

bstinson

2020-07-02 00:24

administrator   ~0037288

Double check that your closest mirror is up to date, running directly on our master mirror:

$ gpg --verify 8.2.2004/AppStream/x86_64/os/repodata/repomd.xml.asc
gpg: Signature made Tue 30 Jun 2020 07:28:00 PM UTC using RSA key ID 8483C65D
gpg: Good signature from "CentOS (CentOS Official Signing Key) <security@centos.org>"

(same for the other arches as well)

Issue History

Date Modified Username Field Change
2020-03-20 15:24 myankus New Issue
2020-03-20 15:49 myankus Note Added: 0036543
2020-04-03 13:39 myankus Note Added: 0036648
2020-04-14 18:15 myankus Note Added: 0036689
2020-04-19 16:45 myankus Note Added: 0036716
2020-04-23 14:17 myankus Note Added: 0036756
2020-04-24 12:26 myankus Note Added: 0036764
2020-04-28 14:54 myankus Note Added: 0036793
2020-04-28 15:00 myankus Note Added: 0036796
2020-04-29 14:09 myankus Note Added: 0036814
2020-05-27 13:09 myankus Note Added: 0037002
2020-06-02 18:12 myankus Note Added: 0037027
2020-06-16 13:19 myankus Note Added: 0037123
2020-06-22 12:39 myankus Note Added: 0037199
2020-06-29 16:54 myankus Note Added: 0037261
2020-06-30 13:00 myankus Note Added: 0037276
2020-06-30 13:05 myankus Issue cloned: 0017553
2020-06-30 19:47 bstinson Status new => feedback
2020-06-30 19:47 bstinson Note Added: 0037279
2020-07-01 00:01 myankus Note Added: 0037280
2020-07-01 00:01 myankus Status feedback => assigned
2020-07-02 00:24 bstinson Status assigned => resolved
2020-07-02 00:24 bstinson Resolution open => not fixable
2020-07-02 00:24 bstinson Note Added: 0037288