installing tkopecek/koji Copr

[Ken Dreyer]

I was trying to use the master branch packages here for el7:
https://copr.fedorainfracloud.org/coprs/tkopecek/koji/

There seems to be some kind of GPG problem though, and I can't tell if
it's a koji package issue or a Copr infrastructure issue.

Here is a really simple way to reproduce it:

# Start with a CentOS 7 environment:
podman run -it --rm centos:7

# Enable EPEL:
yum -y install epel-release

# Enable the Copr:
curl https://copr.fedorainfracloud.org/coprs/tkopecek/koji/repo/epel-7/tkopecek-k...
> /etc/yum.repos.d/tkopecek-koji-epel-7.repo

# Install any koji package from the Copr:
yum install koji-builder
[ ... long output snipped ... ]
Retrieving key from
https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
Importing GPG key 0x3802E829:
 Userid     : "tkopecek_koji (None) "
 Fingerprint: 7f05 4cc6 6501 2a24 b0dd b892 a033 6e0a 3802 e829
 From       : https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
Is this ok [y/N]: y

Public key for python2-koji-1.21.0-20200421.1.el7.noarch.rpm is not installed

Failing package is: python2-koji-1.21.0-20200421.1.el7.noarch
 GPG Keys are configured as:
https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg

When I set "gpgcheck=0" in tkopecek-koji-epel-7.repo, I can install Koji fine.

Where should I look next?

- Ken

[Dennis Gilmore]

That's an issue in COPR, they must be pointing at the wrong gpg key

Dennis

On Tue, Apr 21, 2020, 16:03 Ken Dreyer  wrote:
> I was trying to use the master branch packages here for el7:
> https://copr.fedorainfracloud.org/coprs/tkopecek/koji/
>
> There seems to be some kind of GPG problem though, and I can't tell if
> it's a koji package issue or a Copr infrastructure issue.
>
> Here is a really simple way to reproduce it:
>
> # Start with a CentOS 7 environment:
> podman run -it --rm centos:7
>
> # Enable EPEL:
> yum -y install epel-release
>
> # Enable the Copr:
> curl
> https://copr.fedorainfracloud.org/coprs/tkopecek/koji/repo/epel-7/tkopecek-k...
> > /etc/yum.repos.d/tkopecek-koji-epel-7.repo
>
> # Install any koji package from the Copr:
> yum install koji-builder
> [ ... long output snipped ... ]
> Retrieving key from
> https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
> Importing GPG key 0x3802E829:
>  Userid     : "tkopecek_koji (None) "
>  Fingerprint: 7f05 4cc6 6501 2a24 b0dd b892 a033 6e0a 3802 e829
>  From       :
> https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
> Is this ok [y/N]: y
>
> Public key for python2-koji-1.21.0-20200421.1.el7.noarch.rpm is not
> installed
>
> Failing package is: python2-koji-1.21.0-20200421.1.el7.noarch
>  GPG Keys are configured as:
> https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
>
> When I set "gpgcheck=0" in tkopecek-koji-epel-7.repo, I can install Koji
> fine.
>
> Where should I look next?
> Ken
>
> koji-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...

[Tomas Kopecek]

It looks to me that there are now two keys in the file. Package is signed
with the first (older but still valid) key. Not sure if rpm should work
with such combined files or copr shouldn't create them at first place.
Anyway, it looks, it can't be properly imported to rpmdb.

$ curl
https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
| gpg
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time
 Current
                                 Dload  Upload   Total   Spent    Left
 Speed
100  1847  100  1847    0     0  17101      0 --:--:-- --:--:-- --:--:--
17101
pub   rsa2048 2016-12-06 [SCEA] [expires: 2021-12-05]
      7F054CC665012A24B0DDB892A0336E0A3802E829
uid           tkopecek_koji (None) 
pub   rsa2048 2016-12-08 [SCEA] [expires: 2021-12-07]
      7FBEDD554C88D63CBAD0EB8F5F028C6B8F2BCCA6
uid           tkopecek_koji (None)

$ rpm --verbose -K  koji-1.21.0-20200421.1.el7.noarch.rpm
koji-1.21.0-20200421.1.el7.noarch.rpm:
    Header V3 RSA/SHA1 Signature, key ID 3802e829: OK
    Header SHA1 digest: OK
    V3 RSA/SHA1 Signature, key ID 3802e829: OK
    MD5 digest: OK

st 22. 4. 2020 v 0:48 odesílatel Dennis Gilmore  napsal:
> That's an issue in COPR, they must be pointing at the wrong gpg key
>
> Dennis
>
> On Tue, Apr 21, 2020, 16:03 Ken Dreyer  wrote:
> > I was trying to use the master branch packages here for el7:
> > https://copr.fedorainfracloud.org/coprs/tkopecek/koji/
> >
> > There seems to be some kind of GPG problem though, and I can't tell if
> > it's a koji package issue or a Copr infrastructure issue.
> >
> > Here is a really simple way to reproduce it:
> >
> > # Start with a CentOS 7 environment:
> > podman run -it --rm centos:7
> >
> > # Enable EPEL:
> > yum -y install epel-release
> >
> > # Enable the Copr:
> > curl
> > https://copr.fedorainfracloud.org/coprs/tkopecek/koji/repo/epel-7/tkopecek-k...
> > > /etc/yum.repos.d/tkopecek-koji-epel-7.repo
> >
> > # Install any koji package from the Copr:
> > yum install koji-builder
> > [ ... long output snipped ... ]
> > Retrieving key from
> >
> > https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
> > Importing GPG key 0x3802E829:
> >  Userid     : "tkopecek_koji (None) <tkopecek#[e-mail]
> > > "
> >
> > Fingerprint: 7f05 4cc6 6501 2a24 b0dd b892 a033 6e0a 3802 e829
> >  From       :
> > https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
> > Is this ok [y/N]: y
> >
> > Public key for python2-koji-1.21.0-20200421.1.el7.noarch.rpm is not
> > installed
> >
> > Failing package is: python2-koji-1.21.0-20200421.1.el7.noarch
> >  GPG Keys are configured as:
> >
> > https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
> >
> > When I set "gpgcheck=0" in tkopecek-koji-epel-7.repo, I can install Koji
> > fine.
> >
> > Where should I look next?
> > Ken
> >
> > koji-devel mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
>
> koji-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...

[Tomáš Kopeček]

Created https://bugzilla.redhat.com/show_bug.cgi?id=1826653 for that.
> It looks to me that there are now two keys in the file. Package is 
> signed with the first (older but still valid) key. Not sure if rpm 
> should work with such combined files or copr shouldn't create them at 
> first place. Anyway, it looks, it can't be properly imported to rpmdb.
>
> $ curl 
> https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg 
> | gpg
> gpg: WARNING: no command supplied.  Trying to guess what you mean ...
>    % Total    % Received % Xferd  Average Speed   Time    Time     Time 
>   Current
>                                   Dload  Upload   Total   Spent    Left 
>   Speed
> 100  1847  100  1847    0     0  17101      0 --:--:-- --:--:-- --:--:-- 
> 17101
> pub   rsa2048 2016-12-06 [SCEA] [expires: 2021-12-05]
>        7F054CC665012A24B0DDB892A0336E0A3802E829
> uid           tkopecek_koji (None) <tkopecek#[e-mail] 
> >
> pub   rsa2048 2016-12-08 [SCEA] [expires: 2021-12-07]
>        7FBEDD554C88D63CBAD0EB8F5F028C6B8F2BCCA6
> uid           tkopecek_koji (None) <tkopecek#[e-mail] 
> >
>
> $ rpm --verbose -K  koji-1.21.0-20200421.1.el7.noarch.rpm
> koji-1.21.0-20200421.1.el7.noarch.rpm:
>      Header V3 RSA/SHA1 Signature, key ID 3802e829: OK
>      Header SHA1 digest: OK
>      V3 RSA/SHA1 Signature, key ID 3802e829: OK
>      MD5 digest: OK
>
> st 22. 4. 2020 v 0:48 odesílatel Dennis Gilmore <[e-mail] 
> > napsal:
> That's an issue in COPR, they must be pointing at the wrong gpg key
>
> Dennis
>
> On Tue, Apr 21, 2020, 16:03 Ken Dreyer <[e-mail]
> <mailto:[e-mail]>> wrote:
>
>     I was trying to use the master branch packages here for el7:
>     https://copr.fedorainfracloud.org/coprs/tkopecek/koji/
>
>     There seems to be some kind of GPG problem though, and I can't
>     tell if
>     it's a koji package issue or a Copr infrastructure issue.
>
>     Here is a really simple way to reproduce it:
>
>     # Start with a CentOS 7 environment:
>     podman run -it --rm centos:7
>
>     # Enable EPEL:
>     yum -y install epel-release
>
>     # Enable the Copr:
>     curl
>     https://copr.fedorainfracloud.org/coprs/tkopecek/koji/repo/epel-7/tkopecek-koji-epel-7.repo
>      > /etc/yum.repos.d/tkopecek-koji-epel-7.repo
>
>     # Install any koji package from the Copr:
>     yum install koji-builder
>     [ ... long output snipped ... ]
>     Retrieving key from
>     https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
>     Importing GPG key 0x3802E829:
>       Userid     : "tkopecek_koji (None)
>     <tkopecek#[e-mail]
>     <mailto:[e-mail]>>"
>       Fingerprint: 7f05 4cc6 6501 2a24 b0dd b892 a033 6e0a 3802 e829
>       From       :
>     https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
>     Is this ok [y/N]: y
>
>     Public key for python2-koji-1.21.0-20200421.1.el7.noarch.rpm is
>     not installed
>
>       Failing package is: python2-koji-1.21.0-20200421.1.el7.noarch
>       GPG Keys are configured as:
>     https://download.copr.fedorainfracloud.org/results/tkopecek/koji/pubkey.gpg
>
>
>     When I set "gpgcheck=0" in tkopecek-koji-epel-7.repo, I can
>     install Koji fine.
>
>     Where should I look next?
>
>     - Ken
>     _______________________________________________
>     koji-devel mailing list -- [e-mail]
>     <mailto:[e-mail]>
>     To unsubscribe send an email to
>     [e-mail]
>     <mailto:[e-mail]>
>     Fedora Code of Conduct:
>     https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>     List Guidelines:
>     https://fedoraproject.org/wiki/Mailing_list_guidelines
>     List Archives:
>     https://lists.fedorahosted.org/archives/list/[e-mail]
>
> _______________________________________________
> koji-devel mailing list -- [e-mail]
> <mailto:[e-mail]>
> To unsubscribe send an email to
> [e-mail]
> <mailto:[e-mail]>
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]
>
>
>
> --
>
> Tomas Kopecek <[e-mail] 
> >
>              RHEL Build Development, RedHat

[Ken Dreyer]

On Wed, Apr 22, 2020 at 2:59 AM Tomáš Kopeček  wrote:
> Created https://bugzilla.redhat.com/show_bug.cgi?id=1826653 for that.

Thank you for following up with this!

Would you mind enabling EPEL 8 in this Copr as well?

I'm working on adding el8 support to
https://github.com/ktdreyer/koji-playbooks , and this Copr is really
useful to test early Koji builds.

- Ken

- Ken

[Tomas Kopecek]

Yep, enabled epel8 and also added centos-stream.

po 27. 4. 2020 v 20:27 odesílatel Ken Dreyer  napsal:
> On Wed, Apr 22, 2020 at 2:59 AM Tomáš Kopeček  wrote:
> > Created https://bugzilla.redhat.com/show_bug.cgi?id=1826653 for that.
>
> Thank you for following up with this!
>
> Would you mind enabling EPEL 8 in this Copr as well?
>
> I'm working on adding el8 support to
> https://github.com/ktdreyer/koji-playbooks , and this Copr is really
> useful to test early Koji builds.
>
> Ken
>
> Ken
>
> koji-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...