From c48058e67a3df47b5597d8f7d477aaf99a5c4ecb Mon Sep 17 00:00:00 2001
From: Romain Geissler <romain.geissler@amadeus.com>
Date: Mon, 7 Sep 2026 07:42:11 +0000
Subject: [PATCH] Add Fedora 45.

We have to add the usage of the --nosignature flag as now rpm >= 6
prevents installation by default of rpms files without signature. During
the verification process, we have a locally build rpm, not signed yet,
so accept the absence of signature in that case.

See
https://fedoraproject.org/wiki/Changes/Enforcing_signature_checking_by_default

Signed-off-by: Romain Geissler <romain.geissler@amadeus.com>
---
 docker-bake.hcl                     | 14 ++++++++++++++
 pkg/agent/verify.Dockerfile         |  2 +-
 pkg/buildx/verify.Dockerfile        |  2 +-
 pkg/compose/verify.Dockerfile       |  2 +-
 pkg/docker-engine/verify.Dockerfile |  2 +-
 pkg/model/verify.Dockerfile         |  2 +-
 6 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/docker-bake.hcl b/docker-bake.hcl
index b77ccc38..1e2bc8eb 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -30,6 +30,7 @@ variable "DISTROS" {
     "centos10",
     "fedora43",
     "fedora44",
+    "fedora45",
     "oraclelinux8",
     "oraclelinux9",
     "oraclelinux10",
@@ -392,6 +393,18 @@ target "_distro-fedora44" {
   }
 }
 
+target "_distro-fedora45" {
+  args = {
+    DISTRO_NAME = "fedora45"
+    DISTRO_TYPE = "rpm"
+    DISTRO_RELEASE = "fedora"
+    DISTRO_ID = "45"
+    DISTRO_SUITE = "45"
+    DISTRO_IMAGE = DISTRO_IMAGE != null && DISTRO_IMAGE != "" ? DISTRO_IMAGE : "fedora:45"
+    TEST_ONLY = "0"
+  }
+}
+
 target "_distro-oraclelinux8" {
   args = {
     DISTRO_NAME = "oraclelinux8"
@@ -525,6 +538,7 @@ function "distroPlatforms" {
         centos10 = ["linux/amd64", "linux/arm64", "linux/ppc64le"]
         fedora43 = ["linux/amd64", "linux/arm64", "linux/ppc64le", "linux/s390x"]
         fedora44 = ["linux/amd64", "linux/arm64", "linux/ppc64le", "linux/s390x"]
+        fedora45 = ["linux/amd64", "linux/arm64", "linux/ppc64le", "linux/s390x"]
         oraclelinux8 = ["linux/amd64", "linux/arm64"]
         oraclelinux9 = ["linux/amd64", "linux/arm64"]
         oraclelinux10 = ["linux/amd64", "linux/arm64"]
diff --git a/pkg/agent/verify.Dockerfile b/pkg/agent/verify.Dockerfile
index 55f37565..86ea8ddc 100644
--- a/pkg/agent/verify.Dockerfile
+++ b/pkg/agent/verify.Dockerfile
@@ -80,7 +80,7 @@ RUN --mount=from=bin,target=/build <<EOT
     (
       set -x
       rpm -qilp $package
-      rpm --install --nodeps $package
+      rpm --install --nodeps --nosignature $package
     )
   done
   set -x
diff --git a/pkg/buildx/verify.Dockerfile b/pkg/buildx/verify.Dockerfile
index 0fa8c2f0..44e381df 100644
--- a/pkg/buildx/verify.Dockerfile
+++ b/pkg/buildx/verify.Dockerfile
@@ -80,7 +80,7 @@ RUN --mount=from=bin,target=/build <<EOT
     (
       set -x
       rpm -qilp $package
-      rpm --install --nodeps $package
+      rpm --install --nodeps --nosignature $package
     )
   done
   set -x
diff --git a/pkg/compose/verify.Dockerfile b/pkg/compose/verify.Dockerfile
index 205003d4..3e0a74e9 100644
--- a/pkg/compose/verify.Dockerfile
+++ b/pkg/compose/verify.Dockerfile
@@ -80,7 +80,7 @@ RUN --mount=from=bin,target=/build <<EOT
     (
       set -x
       rpm -qilp $package
-      rpm --install --nodeps $package
+      rpm --install --nodeps --nosignature $package
     )
   done
   set -x
diff --git a/pkg/docker-engine/verify.Dockerfile b/pkg/docker-engine/verify.Dockerfile
index 2745d874..54099dda 100644
--- a/pkg/docker-engine/verify.Dockerfile
+++ b/pkg/docker-engine/verify.Dockerfile
@@ -85,7 +85,7 @@ RUN --mount=from=bin,target=/build <<EOT
     (
       set -x
       rpm -qilp $package
-      rpm --install --nodeps $package
+      rpm --install --nodeps --nosignature $package
     )
   done
   case "$DISTRO_NAME" in
diff --git a/pkg/model/verify.Dockerfile b/pkg/model/verify.Dockerfile
index 7ceed859..180760db 100644
--- a/pkg/model/verify.Dockerfile
+++ b/pkg/model/verify.Dockerfile
@@ -80,7 +80,7 @@ RUN --mount=from=bin,target=/build <<EOT
     (
       set -x
       rpm -qilp $package
-      rpm --install --nodeps $package
+      rpm --install --nodeps --nosignature $package
     )
   done
   set -x