-
Bug
-
Resolution: Obsolete
-
Normal
-
None
-
rhel-8.2.0
-
None
-
Moderate
-
subs-client-tools
-
None
-
False
-
False
-
-
None
-
None
-
None
-
None
-
If docs needed, set a value
-
-
All
-
None
-
57,005
Description of problem:
yum commands fail during entitled builds using ubi8 image.
~~~
Errors during downloading metadata for repository 'rhel-8-for-x86_64-baseos-rpms':
- Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml [error setting certificate verify locations:
CAfile: %(ca_cert_dir)sredhat-uep.pem
~~~
Version-Release number of selected component (if applicable):
How reproducible:
100%
Steps to Reproduce:
1. Run a build using ubi8 image and include some yum commands in the build process
2. During the build process, when yum commands are triggered, it fails with the following error:
~~~
Errors during downloading metadata for repository 'rhel-8-for-x86_64-baseos-rpms':
- Curl error (77): Problem with the SSL CA cert (path? access rights?) for https://cdn.redhat.com/content/dist/rhel8/8/x86_64/baseos/os/repodata/repomd.xml [error setting certificate verify locations:
CAfile: %(ca_cert_dir)sredhat-uep.pem
~~~
3. It seems like yum/dnf fails to get the value for the variable "%(ca_cert_dir)sredhat-uep.pem" from the RHSM config file.
Actual results:
- Build fails with the error.
Expected results:
- Since proper certificates are in place, builds should be successful.
Additional info:
Workaround:
1. Edit the rhsm.conf with following entry:
~~~
repo_ca_cert = /etc/rhsm/ca/redhat-uep.pem
~~~
2. Create a secret or CM & mount it to replace the default rhsm.conf file.