Composer Image Builder fails when multiple custom repos are defined on the Satellite

Solution Verified - Updated -

Issue

The error can be seen at the depsolve step and this can manifest itself in 2 different ways.

  • A self-signed certificate error (denoting the use of a wrong CAcert):

    Nov 17 15:06:16 <HOSTNAME> osbuild-composer[PID]:   - Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https://YourSatellite/pulp/repos/YourOrg/YourEnv/YourCV/content/dist/rhel8/8.6/x86_64/repodata/repomd.xml [SSL certificate problem: self signed certificate in certificate chain]

  • An HTTP 403 error (denoting the use of a wrong pair of keys):

    osbuild-composer[2882]: Errors during downloading metadata for repository '0':
osbuild-composer[2882]:  - Status code: 403 for https://YourSatellite/pulp/repos/YourOrg/YourEnv/YourCV/content/dist/rhel8/8.6/x86_64/repodata/repomd.xml (IP: A.B.C.D)

Such an error can also be observed while trying to specify another minor release from the blueprint (e.g. with distro = "rhel-85").

Environment

  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux >= 8.3
  • osbuild-composer aka Image Builder

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content