[rdo-dev] [tripleo] missing centos-8 rpms for kolla builds

[Neal Gompa]

On Wed, Feb 5, 2020 at 5:36 AM Mark Goddard <mark at stackhpc.com> wrote:
>
> On Sun, 2 Feb 2020 at 21:06, Neal Gompa <ngompa13 at gmail.com> wrote:
> >
> > On Wed, Jan 29, 2020 at 9:37 AM Mark Goddard <mark at stackhpc.com> wrote:
> > >
> > > On Wed, 29 Jan 2020 at 11:31, Alfredo Moralejo Alonso
> > > <amoralej at redhat.com> wrote:
> > > >
> > > >
> > > >
> > > > On Tue, Jan 28, 2020 at 5:53 PM Mark Goddard <mark at stackhpc.com> wrote:
> > > >>
> > > >> On Tue, 28 Jan 2020 at 15:18, Mark Goddard <mark at stackhpc.com> wrote:
> > > >> >
> > > >> > On Mon, 27 Jan 2020 at 09:18, Radosław Piliszek
> > > >> > <radoslaw.piliszek at gmail.com> wrote:
> > > >> > >
> > > >> > > I know it was for masakari.
> > > >> > > Gaëtan had to grab crmsh from opensuse:
> > > >> > > http://download.opensuse.org/repositories/network:/ha-clustering:/Stable/CentOS_CentOS-7/
> > > >> > >
> > > >> > > -yoctozepto
> > > >> >
> > > >> > Thanks Wes for getting this discussion going. I've been looking at
> > > >> > CentOS 8 today and trying to assess where we are. I created an
> > > >> > Etherpad to track status:
> > > >> > https://etherpad.openstack.org/p/kolla-centos8
> > > >>
> > > >
> > > > uwsgi and etcd are now available in rdo dependencies repo. Let me know if you find some issue with it.
> > >
> > > I found them, thanks.
> > >
> > > >
> > > >>
> > > >> We are seeing an odd DNF error sometimes. DNF exits 141 with no error
> > > >> code when installing packages. It often happens on the rabbitmq and
> > > >> grafana images. There is a prompt about importing GPG keys prior to
> > > >> the error.
> > > >>
> > > >> Example: https://4eff4bb69c321960be39-770d619687de1bce0976465c40e4e9ca.ssl.cf2.rackcdn.com/693544/33/check/kolla-ansible-centos8-source-mariadb/93a8351/primary/logs/build/000_FAILED_kolla-toolbox.log
> > > >>
> > > >> Related bug report? https://github.com/containers/libpod/issues/4431
> > > >>
> > > >> Anyone familiar with it?
> > > >>
> > > >
> > > > Didn't know about this issue.
> > > >
> > > > BTW, there is rabbitmq-server in RDO dependencies repo if you are interested in using it from there instead of rabbit repo.
> > >
> > > It seems to be due to the use of a GPG check on the repo (as opposed
> > > to packages). DNF doesn't use keys imported via rpm --import for this
> > > (I'm not sure what it uses), and prompts to add the key. This breaks
> > > without a terminal. More explanation here:
> > > https://review.opendev.org/#/c/704782.
> > >
> >
> > librepo has its own keyring for repo signature verification.
>
> Thanks Neal. Any pointers on how to add keys to it?
>

There's no direct way other than to make sure that your repo files
include the GPG public key in the gpgkey= entry, and that
repo_gpgcheck=1 is enabled. DNF will automatically tell librepo to do
the right thing here.

Ideally, in the future, all of it will use the rpm keyring, but it
doesn't for now...



-- 
真実はいつも一つ！/ Always, there's only one truth!