leapp-repository/SOURCES/0050-Disable-localpkg_gpgcheck-parameter-from-plugin-data.patch
2025-07-21 11:47:55 +00:00

35 lines
1.6 KiB
Diff

From a4d10adb2f432ef09898228c0e2d00288bbcc412 Mon Sep 17 00:00:00 2001
From: karolinku <kkula@redhat.com>
Date: Mon, 7 Jul 2025 14:52:34 +0200
Subject: [PATCH 50/66] Disable localpkg_gpgcheck parameter from plugin data
This commit is setting the localpkg_gpgcheck DNF option within the
rhel-upgrade plugin to 0 (disabled).
The upgrade process has been blocked with "Error: GPG check FAILED"
when dnf has been configured to apply gpg check also on local packages
(localpkg_gpgcheck=1). That's because the bundled leapp*-deps meta
packages, which are managing Leapp and leapp-repository dependencies
during the transition to the new system, are not signed by the Red
Hat key. Therefore, this option needs to be disabled.
Jira: RHEL-47472
---
repos/system_upgrade/common/files/rhel_upgrade.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/repos/system_upgrade/common/files/rhel_upgrade.py b/repos/system_upgrade/common/files/rhel_upgrade.py
index 34f7b8f9..4f76a61d 100644
--- a/repos/system_upgrade/common/files/rhel_upgrade.py
+++ b/repos/system_upgrade/common/files/rhel_upgrade.py
@@ -116,6 +116,7 @@ class RhelUpgradeCommand(dnf.cli.Command):
self.base.conf.best = self.plugin_data['dnf_conf']['best']
self.base.conf.assumeyes = True
self.base.conf.gpgcheck = self.plugin_data['dnf_conf']['gpgcheck']
+ self.base.conf.localpkg_gpgcheck = False
self.base.conf.debug_solver = self.plugin_data['dnf_conf']['debugsolver']
self.base.conf.module_platform_id = self.plugin_data['dnf_conf']['platform_id']
installroot = self.plugin_data['dnf_conf'].get('installroot')
--
2.50.1