View Issue Details

IDProjectCategoryView StatusLast Update
0000285AlmaLinux-8-OTHERpublic2022-07-25 15:06
Reporterstargardmdnd Assigned Toalukoshko  
PrioritynormalSeveritymajorReproducibilityN/A
Status closedResolutionfixed 
Platformppc64leOSalmalinuxOS Version8.6
Summary0000285: Unsigned rpm's in PowerTools repo
DescriptionI was checking rpm signatures today and noticed that there are three rpm's in the repo for ppc64le PowerTools that are unsigned. This seems odd to me. They should be signed.

./almalinux/8.6/PowerTools/ppc64le/os/Packages/lmdb-devel-0.9.24-1.el8.ppc64le.rpm: digests OK
./almalinux/8.6/PowerTools/ppc64le/os/Packages/libxmlb-devel-0.1.15-1.el8.ppc64le.rpm: digests OK
./almalinux/8.6/PowerTools/ppc64le/os/Packages/libselinux-static-2.9-5.el8.ppc64le.rpm: digests OK

The other packages in these directories are properly signed. The x86_64 versions of these packages are properly signed.
Steps To Reproduce$ find almalinux/8.6/PowerTools/*/os/Packages/l*.rpm |parallel -X rpm -K |grep -E "lmdb-devel|libxmlb|libselinux-static"
almalinux/8.6/PowerTools/x86_64/os/Packages/libselinux-static-2.9-5.el8.i686.rpm: digests signatures OK
almalinux/8.6/PowerTools/x86_64/os/Packages/libselinux-static-2.9-5.el8.x86_64.rpm: digests signatures OK
almalinux/8.6/PowerTools/x86_64/os/Packages/libxmlb-devel-0.1.15-1.el8.i686.rpm: digests signatures OK
almalinux/8.6/PowerTools/x86_64/os/Packages/libxmlb-devel-0.1.15-1.el8.x86_64.rpm: digests signatures OK
almalinux/8.6/PowerTools/x86_64/os/Packages/lmdb-devel-0.9.24-1.el8.i686.rpm: digests signatures OK
almalinux/8.6/PowerTools/x86_64/os/Packages/lmdb-devel-0.9.24-1.el8.x86_64.rpm: digests signatures OK
almalinux/8.6/PowerTools/ppc64le/os/Packages/libxmlb-devel-0.1.15-1.el8.ppc64le.rpm: digests OK
almalinux/8.6/PowerTools/ppc64le/os/Packages/lmdb-devel-0.9.24-1.el8.ppc64le.rpm: digests OK
almalinux/8.6/PowerTools/ppc64le/os/Packages/libselinux-static-2.9-5.el8.ppc64le.rpm: digests OK
Tagsalmalinux8
abrt_hash
URL

Activities

alukoshko

2022-07-25 14:55

administrator   ~0000654

Hello and thanks for report.
Unfortunately it's disallowed to replace already released packages so all affected packages were rebuilt with minor dist bump and then released (only for PPC64le).
We'll not delete already released packages either so they will stay unsigned, but client will never notice that because now affected packages have older version.
They will completely removed from mirrors with AlmaLinux 8.7 release.

Issue History

Date Modified Username Field Change
2022-07-18 17:22 stargardmdnd New Issue
2022-07-18 17:22 stargardmdnd Tag Attached: almalinux8
2022-07-19 21:12 alukoshko Assigned To => alukoshko
2022-07-19 21:12 alukoshko Status new => confirmed
2022-07-25 14:55 alukoshko Note Added: 0000654
2022-07-25 15:06 alukoshko Status confirmed => closed
2022-07-25 15:06 alukoshko Resolution open => fixed