Fix for microdnf segfault

Signed-off-by: Riccardo Pittau <elfosardo@gmail.com>

Author: elfosardo

Dockerfile

@@ -37,14 +37,18 @@ ENV UPPER_CONSTRAINTS_FILE=${UPPER_CONSTRAINTS_FILE} \
     SETUPTOOLS_VERSION=${SETUPTOOLS_VERSION}
 
 RUN --mount=type=cache,sharing=locked,target=/var/cache/dnf \
-    echo "install_weak_deps=False" >> /etc/dnf/dnf.conf && \
-    echo "tsflags=nodocs" >> /etc/dnf/dnf.conf && \
-    echo "keepcache=1" >> /etc/dnf/dnf.conf && \
+    # 1. Immediate GPG fix to prevent Segfaults
+    rm -f /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-PQC && \
+    # 2. Configure DNF behavior via CLI and file
+    sed -i 's/gpgcheck=1/gpgcheck=0/g' /etc/yum.repos.d/*.repo && \
+    echo -e "install_weak_deps=0\ntsflags=nodocs\nkeepcache=1" >> /etc/dnf/dnf.conf && \
+    # 3. Install core build tools
     microdnf install -y \
         gcc \
         python3.12-devel \
         python3.12-pip \
-        python3.12-setuptools
+        python3.12-setuptools && \
+    microdnf clean all
 
 COPY ${UPPER_CONSTRAINTS_FILE} ironic-deps-list /tmp/
 COPY build-wheels.sh /bin/

prepare-image.sh

@@ -2,6 +2,13 @@
 
 set -euxo pipefail
 
+# Fix for Segfault (Signal 11) on modern hosts
+# Removes SHA1/V6 keys that crash microdnf/GLib during teardown
+rm -f /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Extras
+rm -f /etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial-PQC
+# Disable GPG check globally to prevent microdnf from choking on missing keys
+sed -i 's/gpgcheck=1/gpgcheck=0/g' /etc/yum.repos.d/*.repo
+
 cat >> /etc/dnf/dnf.conf<< EOF
 install_weak_deps=False
 tsflags=nodocs