search

ublue-os / bluefin

The next generation Linux workstation, designed for reliability, performance, and sustainability.
https://projectbluefin.io
Apache License 2.0
1.21k stars 159 forks source link

Cant update stable-daily: A signature was required, but no signature exists #1885

Closed befanyt closed 2 hours ago

befanyt commented 11 hours ago

Describe the bug

Ran rpm-ostree update and was greeted with the following error:

~ ❯ rpm-ostree update
note: automatic updates (stage) are enabled
Pulling manifest: ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:stable-daily
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: A signature was required, but no signature exists

What did you expect to happen?

Update to the fresh stable-daily build

Output of rpm-ostree status

~ ❯ rpm-ostree status
State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:stable-daily
                   Digest: sha256:03e4d16f0ba4c60c9ea9a4bc622a078bf369dda1b7e7ab44b2dbedeb14576997
                  Version: 40.20241103.0 (2024-11-04T05:46:57Z)

  ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:stable-daily
                   Digest: sha256:aeed0b2bf408b1c706a94a53dff609a4c29421b4d6477ec0cf70edbd8a93aaf4
                  Version: 40.20241102.0 (2024-11-03T17:56:19Z)

Output of groups

user wheel incus-admin docker lxd libvirt

Extra information or context

To my limited knowledge I did some digging. Because this is the first build after the big refactor. I compared signing of the previous stable-daily and the new one.

In the new build the DEFAULT_TAG seems to be stable where in the previous build that tag was stable-daily 

~ ❯ cosign verify --key https://raw.githubusercontent.com/ublue-os/bluefin/refs/heads/main/cosign.pub ghcr.io/ublue-os/bluefin-dx:stable-daily
Error: no signatures found
main.go:69: error during command execution: no signatures found
herobrauni commented 8 hours ago

Can confirm, the current stable-daily throws the same error for me. Yesterdays build installed just fine.

This is the PR that might be responsible: https://github.com/ublue-os/bluefin/pull/1867

m2Giles commented 8 hours ago

https://github.com/ublue-os/bluefin/pull/1887

Will fix it.

m2Giles commented 7 hours ago

1888 will also make sure that it is run with merge_group.

m2Giles commented 2 hours ago

I can confirm that this has been resolved with those to PRs.