CODE dnf/rpm packages fail to install in fedora 43 with error: does not verify: no digest

[ericfaure007]

Describe the Bug

I cannot install/upgrade CODE RPM packages via dnf command in fedora 43. I'm using the latest GPG key. fedora 43 is using dnf5 and rpm6, it's maybe related.

I'm Trying to upgrade from code 25.04.6.-2 to 25.04.7-1

Running the following command is failing: wget https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-rpm/repodata/repomd.xml.key && sudo rpm --import repomd.xml.key dnf upgrade coolwsd CODE-brand ... Running transaction Transaction failed: Rpm transaction failed.

• package collaboraoffice-ure-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-ooofonts-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-core-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-images-25.04.7-1.x86_64 does not verify: no digest
• package collaboraoffice-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-writer-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-ooolinguistic-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-math-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-impress-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-graphicfilter-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-extension-pdf-import-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-en-US-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-draw-25.04.7-1.x86_64 does not verify: no digest
• package collaboraofficebasis-calc-25.04.7-1.x86_64 does not verify: no digest
• package coolwsd-25.04.7.1-1.x86_64 does not verify: no digest

[timar]

It's not possible to rebuild the packages, but we try to release compatible packages from now on.

[timar]

The fix did not work :(

[amessina]

@timar thank you for looking into this. I track and confirm the same issue as @ericfaure007.

[ericfaure007]

I have found an interesting discussion: https://discussion.fedoraproject.org/t/package-does-not-verify-no-digest/149280 The packages should be built with rpm >= 4.14

[amessina]

Confirming this continues to occur with version 25.04.8-1 and Fedora 43.

Transaction failed: Rpm transaction failed.
  - package collaboraoffice-ure-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-ooofonts-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-core-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-images-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraoffice-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-writer-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-ooolinguistic-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-math-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-impress-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-graphicfilter-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-extension-pdf-import-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-en-US-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-draw-25.04.8-1.x86_64 does not verify: no digest
  - package collaboraofficebasis-calc-25.04.8-1.x86_64 does not verify: no digest
  - package coolwsd-25.04.8.1-1.x86_64 does not verify: no digest
  - package CODE-brand-25.04.8-1.noarch does not verify: no digest
  - ```

[timar]

Yes, it's still unfixed. Most probably we have to bump the RHEL7 baseline that we still use.