Image Builder on RHEL 9 is unable to install a RHEL 8 distro with packages signed with SHA1

Solution Verified - Updated -

Issue

  • When using osbuild-composer in RHEL 9.5 it's not possible to build RHEL 8 images
  • Compose logs show the below error:

    warning: Signature not supported. Hash algorithm SHA1 not available.
    error: /tmp/gpgkey.b8axqp6l: key 2 import failed.
    Traceback (most recent call last):
    File "/run/osbuild/bin/org.osbuild.rpm", line 253, in <module>
    r = main(args["tree"], args["inputs"], args["options"])
    File "/run/osbuild/bin/org.osbuild.rpm", line 152, in main
    subprocess.run([
    File "/usr/lib64/python3.9/subprocess.py", line 528, in run
    raise CalledProcessError(retcode, process.args,
    subprocess.CalledProcessError: Command '['rpmkeys', '--root', '/run/osbuild/tree', '--import', '/tmp/      gpgkey.b8axqp6l']' returned non-zero exit status 1. 
    

Environment

  • Red Hat Enterprise Linux (RHEL) 9.5
  • osbuild-composer (aka Image Builder)

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content