Uploaded image for project: 'Insights Experiences'
  1. Insights Experiences
  2. HMS-9833

bootc-image-builder: Can't build RHEL 9 ISO with RHEL 10 BIB container (error importing rpm keys)

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • Image Builder
    • None

      This may already be fixed upstream, but it came up on Slack, so I'm capturing it here to look into later.

      Quick reproducer:

      $ sudo podman run -it --rm --privileged -v /var/lib/containers/storage:/var/lib/containers/storage --security-opt label=type:unconfined_t registry.redhat.io/rhel10/bootc-image-builder:latest --type iso registry.redhat.io/rhel9/rhel-bootc:latest
      [/] Disk image building step
      [5 / 9] Pipeline build [------------------------------------------------------------------------------>______________________________________________________________] 55.56%
      [2 / 3] Stage org.osbuild.rpm [----------------------------------------------------------------------------------------->____________________________________________] 66.67%
      Message: Finished pipeline build
      2025/12/02 16:33:34 error: cannot run osbuild: error running osbuild: exit status 1
      BuildLog:__________________] 33.33%
      starting -tarting pipeline source org.osbuild.librepo
      Starting pipeline source org.osbuild.containers-storage
      Finished module source org.osbuild.containers-storage
      Finished pipeline org.osbuild.containers-storage
      Starting pipeline source org.osbuild.inline
      Finished module source org.osbuild.inline
      Finished pipeline org.osbuild.inline
      Starting pipeline source org.osbuild.librepo
      ...
      Finished module source org.osbuild.librepo
      Finished pipeline org.osbuild.librepo
      Starting pipeline build
      Starting module org.osbuild.rpm
      error: Certificate 199E2F91FD431D51:
        Policy rejects 199E2F91FD431D51: No binding signature at time 2025-12-02T16:33:34Z
      error: /tmp/gpgkey.l6ijv9id: key 1 import failed.
      Traceback (most recent call last):
        File "/run/osbuild/bin/org.osbuild.rpm", line 260, in <module>
      r = main(args["tree"], args["inputs"], args["options"])
      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
        File "/run/osbuild/bin/org.osbuild.rpm", line 151, in main
      subprocess.run([
        File "/usr/lib64/python3.12/subprocess.py", line 571, in run
      raise CalledProcessError(retcode, process.args,
      subprocess.CalledProcessError: Command '['rpmkeys', '--root', '/run/osbuild/tree', '--import', '/tmp/gpgkey.l6ijv9id']' returned non-zero exit status 1.
      Finished module org.osbuild.rpm
      Finished pipeline build
      manifest - failed
      Output:
      Failed
      

              Unassigned Unassigned
              akoutsou@redhat.com Achilleas Koutsou
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: