Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-112793

bootc-image-builder cannot access protected Satellite repositories

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • No
    • Important
    • image-builder
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • All
    • None

      What were you trying to do that didn't work?

      Create an ISO using BIB. The customer only has access to Satellite for rpm repositories in their environment. The bootc image built just fine on a host that was registered to satellite. The next step is to create an ISO, and this fails as BIB scrapes the Satellite repos from the bootc image, but then is unable to use them as they are "protected".

      What is the impact of this issue to you?

      BIB cannot create baremetal installer images in customer environments that rely on Satellite for content. Some customers are able to sidestep this, others absolutely cannot.

      Please provide the package NVR for which the bug is seen:

      All versions

      How reproducible is this bug?:

      100%

      Steps to reproduce

      1. register a 9.6 system to a satellite server (not the CDN)
      2. Use any Containerfile that calls dnf:

      FROM registry.redhat.io/rhel9/rhel-bootc

      RUN dnf install -y emacs 

      3. build image: podman build -f Containerfile -t testimage

      4. Create an ISO image using the BIB container. It will not be able to access the rpm repositories. 

       

      Expected results

      The user is presented with a functioning ISO image

      Actual results

      [root]# cd /data/builds/instruction-set-main/build/simple-image/ [root]# podman run --rm -it --privileged --security-opt label=type:unconfined_t -v /v ar/lib/containers/storage:/var/lib/containers/storage -v $(pwd)/config.toml:/config.toml -v ./output:/output registry.redhat.io/rhel9/bootc-image-builder:latest --type iso localhost/test

      Errors during downloading metadata for repository 'rhel-9-for-x86_64-baseos-rpms': - Status code: 404 for https://[redacted]/pulp/repos/[redacted]/Stage9/RHEL9_OSE_CV/content/dist/rhel 9/9.6/x86_64/baseos/os/repodata/repomd.xml (IP: [redacted])

      RepoError: There was a problem reading a repository: Failed to download metadata for repo 'rhel-9-for-x86_64-base os-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

      [] Manifest generation step Message: Generating manifest manifest-iso.json

      2025/09/02 14:43:15 error: cannot build manifest: cannot depsolve: running osbuild-depsolve-dnf failed:

      DNF error occurred: RepoError: There was a problem reading a repository: Failed to download metadata for repo 'rh el-9-for-x86_64-baseos-rpms': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

              osbuilders Osbuilders Bot Account
              bbreard Ben Breard
              Osbuilders Bot Account Osbuilders Bot Account
              Release Test Team Release Test Team
              Vidya Iyengar Vidya Iyengar
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: