Image Builder on RHEL 9 is unable to install a RHEL 8 distro with packages signed with SHA1
Issue
- When using
osbuild-composerin RHEL 9.5 it's not possible to build RHEL 8 images -
Compose logs show the below error:
warning: Signature not supported. Hash algorithm SHA1 not available. error: /tmp/gpgkey.b8axqp6l: key 2 import failed. Traceback (most recent call last): File "/run/osbuild/bin/org.osbuild.rpm", line 253, in <module> r = main(args["tree"], args["inputs"], args["options"]) File "/run/osbuild/bin/org.osbuild.rpm", line 152, in main subprocess.run([ File "/usr/lib64/python3.9/subprocess.py", line 528, in run raise CalledProcessError(retcode, process.args, subprocess.CalledProcessError: Command '['rpmkeys', '--root', '/run/osbuild/tree', '--import', '/tmp/ gpgkey.b8axqp6l']' returned non-zero exit status 1.
Environment
- Red Hat Enterprise Linux (RHEL) 9.5
osbuild-composer(aka Image Builder)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.