V Wed, Feb 18, 2026 at 01:27:59PM +0100, Cristian Le via devel napsal(a): > On 2026/02/11 16:06, Panu Matilainen wrote: > > > On 2/11/26 4:06 PM, Cristian Le via devel wrote: > > > We expect this will break testing-farm tests almost immediately > > > because we are using the koji artifacts which are unsigned. Can you > > > provide some guidance on how to get ready for this as fast as > > > possible? [1] Is there something that can be setup in the `.repo` > > > file to disable this check? > > > > Setting pkg_gpgcheck=0 (aka gpgcheck=0) in the .repo lets you install > > unsigned packages. That's how mock etc operate, and keep working over > > this change. > > Hi Panu, > > I can now confirm that we are indeed hitting this issue. Afaik we did set > gpgcheck=0, and I am now digging into the code to confirm this. > > Here are some failed jobs to reference: > - Copr artifact: > https://artifacts.dev.testing-farm.io/d3f1db58-2964-42d0-be60-9c6023d6acd4/ > (inside "Copr build(s) installation" -> "6-Install-pakcages.txt") > - Koji artifact: > https://artifacts.dev.testing-farm.io/a33f815a-9021-42d0-8fa5-8afefcc8da44/ > > Also see the "4-Add-repository.txt" I do see `gpgcheck=0`. > > Can we check on what is going on here? Are we misconfiguration this or is > this an issue with the implementation? > This is a bug in DNF5 <https://github.com/rpm-software-management/dnf5/issues/2614>. DNF5 does not override RPM verification policy for local packages to be aligned with localpkg_gpgcheck DNF5 configuration option.
According to my tests, dnf5 --no-gpgchecks argument should work around this problem. -- Petr
signature.asc
Description: PGP signature
-- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
