Boot issue (grub) in Fedora Silverblue after upgrading (latest known working: 39.20240325.0), error "/ostree/…/vmlinuz[…] has invalid signature", kernel 6.8.6-200.fc39

This system is old and for years I had multiple system upgrades (probably started with sth. like Fedora 36 or 37 or so).
However, some time ago it broke booting. So I just used the cool silverblue powers to choose the version before and I have to say unfortunately kinda forgot this. Now, I remembered and tried upgrading again, seeing whether it would possible have been fixed in the while and working, but no it does not… unfortunately.
Thus, I am writing…

So, the current update today did not cause the bug, but unfortunately I AFAIK cannot discover which version rpm-ostree has been layering before I upgraded it (obviously I am booting into the old version and upgrading it there, I forgot to take a note of the packages there, sorry).
39.20240325.0 is the latest version I am currently using that is known to be working.

STR

Booting…
Grub shows selection, I choose the latest one:

(Don’t ask me why it shows it twice, I don’t care, it has always worked like this and this has been duplicated a long time ago, likely.)

The first, current version is definitively broken (39.20240417.0) as it then directly shows this:

error: ../../grub-core/loader/i386/efi/linux.c:307:Chd0.gpt2/ostree/fedora-da43c8b4ba977e49d0cc9c0ae4eff847bf933c397e8bbaa8121e6319078835ca/vmlinuz-6.8.6-200.fc39.x86_64 has invalid signature.
error: ../../grub-core/loader/i386/efi/linux.c:205:you need to load the kernel first.
Press any key to continue…

(I hope this makes search engines find these, I tried my best typing/OCR’ing this from the screenshot.)

To do this, I found the file it complains about at: /ostree/boot.0.1/fedora/da43c8b4ba977e49d0cc9c0ae4eff847bf933c397e8bbaa8121e6319078835ca/0/usr/lib/modules/6.8.6-200.fc39.x86_64/vmlinuz

Striking, there is an HMAC file next to it. I have no idea how exactly it is calculated, but sha512hmac actually seems to match it(?):

$ pwd
/ostree/boot.0.1/fedora/da43c8b4ba977e49d0cc9c0ae4eff847bf933c397e8bbaa8121e6319078835ca/0/usr/lib/modules/6.8.6-200.fc39.x86_64
$ cat .vmlinuz.hmac   
b1f3eeee1491911730ce604dc478222f64b52dcf796273ef26157cd36c1fd2f01f075d61d00e43d379521d1652a143ab21d54e9585d61698fbf7e53246114dc7  vmlinuz-6.8.6-200.fc39.x86_64
$ sha512hmac vmlinuz
b1f3eeee1491911730ce604dc478222f64b52dcf796273ef26157cd36c1fd2f01f075d61d00e43d379521d1652a143ab21d54e9585d61698fbf7e53246114dc7  vmlinuz
$ sha512sum vmlinuz 
60ca1640030655ff0e28ca65a5d94d8c3741425b603b7f3917cefe7c546754a63ab3103f8a1f56231d9991d7583b3a264eadba25c60c93141b621cb5fb9e1e89  vmlinuz

So is the file corrupt? If anyone has the proper Linux kernel compressed file aka vmlinuz, please let me know/send it to me, I can freely make some diffs or so.
But if it is not corrupt, why does grub complain about an invalid signature?

System

$ rpm-ostree status -v
State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
  fedora:fedora/39/x86_64/silverblue (index: 0)
                  Version: 39.20240417.0 (2024-04-17T00:39:00Z)
               BaseCommit: 4df34ac077503fe659aac6abbfe2e68699c4cad2f162a136d2f9cfde6c32e71e
                           ├─ repo-0 (2023-11-01T00:12:39Z)
                           ├─ repo-1 (2024-04-17T00:16:31Z)
                           └─ repo-2 (2024-04-17T00:24:03Z)
                   Commit: 9c4e874d6f1cbb74eb0ad4c2745c8573b5bb15dbdccf2486f06c311a451c667b
                           ├─ fedora (2023-11-01T00:12:39Z)
                           ├─ fedora-cisco-openh264 (2023-12-12T17:22:46Z)
                           ├─ rpmfusion-free (2023-11-04T16:49:08Z)
                           ├─ rpmfusion-free-updates (2024-04-15T16:04:13Z)
                           ├─ updates (2024-04-17T02:06:56Z)
                           └─ updates-archive (2024-04-17T02:54:03Z)
                   Staged: no
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Mi 17 Apr 2024 02:40:08 CEST using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
                 Upgraded: alsa-sof-firmware 2023.12.1-1.fc39 -> 2024.03-2.fc39
                           amd-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           amd-ucode-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           at-spi2-atk 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           at-spi2-core 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           atheros-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           atk 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           atkmm 2.28.3-3.fc39 -> 2.28.4-1.fc39
                           b43-fwcutter 019-24.fc39 -> 019-36.fc39
                           bluez 5.72-1.fc39 -> 5.73-3.fc39
                           bluez-cups 5.72-1.fc39 -> 5.73-3.fc39
                           bluez-libs 5.72-1.fc39 -> 5.73-3.fc39
                           bluez-obexd 5.72-1.fc39 -> 5.73-3.fc39
                           bolt 0.9.6-2.fc39 -> 0.9.7-1.fc39
                           brcmfmac-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           breeze-icon-theme 5.113.0-1.fc39 -> 5.115.0-1.fc39
                           btrfs-progs 6.7.1-1.fc39 -> 6.8-1.fc39
                           buildah 1.35.0-1.fc39 -> 1.35.3-1.fc39
                           c-ares 1.25.0-1.fc39 -> 1.28.1-1.fc39
                           cirrus-audio-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           emacs-filesystem 1:29.2-2.fc39 -> 1:29.3-1.fc39
                           epiphany-runtime 1:45.2-1.fc39 -> 1:45.3-1.fc39
                           expat 2.6.0-1.fc39 -> 2.6.2-1.fc39
                           firefox 124.0.1-1.fc39 -> 125.0-1.fc39
                           firefox-langpacks 124.0.1-1.fc39 -> 125.0-1.fc39
                           firewalld 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           firewalld-filesystem 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           fwupd 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-flashrom 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-modem-manager 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-uefi-capsule-data 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           glib-networking 2.78.0-1.fc39 -> 2.78.1-1.fc39
                           glibc 2.38-16.fc39 -> 2.38-17.fc39
                           glibc-all-langpacks 2.38-16.fc39 -> 2.38-17.fc39
                           glibc-common 2.38-16.fc39 -> 2.38-17.fc39
                           glibc-gconv-extra 2.38-16.fc39 -> 2.38-17.fc39
                           gnome-tweaks 45.1-1.fc39 -> 45.2-1.fc39
                           gnome-user-docs 45.1-1.fc39 -> 45.5-1.fc39
                           gtkmm3.0 3.24.8-1.fc39 -> 3.24.9-1.fc39
                           hplip 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           hplip-common 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           hplip-libs 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           hwdata 0.380-1.fc39 -> 0.381-1.fc39
                           intel-audio-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           intel-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlegacy-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlwifi-dvm-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlwifi-mvm-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           kernel 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-core 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules-core 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules-extra 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           libblkid 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libblockdev 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-btrfs 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-crypto 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-dm 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-fs 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-loop 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-lvm 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-mdraid 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-mpath 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-nvdimm 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-nvme 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-part 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-plugins-all 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-swap 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-utils 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libbsd 0.11.7-5.fc39 -> 0.12.2-1.fc39
                           libeconf 0.5.2-1.fc39 -> 0.5.2-2.fc39
                           libertas-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           libfdisk 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libgweather4 4.4.0-1.fc39 -> 4.4.2-1.fc39
                           libinput 1.25.0-1.fc39 -> 1.25.0-4.fc39
                           libmount 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libnfsidmap 1:2.6.4-0.rc5.fc39 -> 1:2.6.4-0.rc6.fc39
                           libopenmpt 0.6.12-1.fc39 -> 0.7.6-1.fc39
                           libphonenumber 8.13.30-1.fc39 -> 8.13.33-1.fc39
                           librepo 1.17.0-1.fc39 -> 1.17.1-1.fc39
                           libsane-hpaio 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           libsmartcols 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libsmbclient 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           libuuid 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libwbclient 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           libxmlb 0.3.15-1.fc39 -> 0.3.18-1.fc39
                           libzstd 1.5.5-4.fc39 -> 1.5.6-1.fc39
                           linux-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           linux-firmware-whence 20240312-1.fc39 -> 20240410-1.fc39
                           mbedtls 2.28.7-1.fc39 -> 2.28.8-1.fc39
                           mt7xxx-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           nextcloud-client 3.12.1-1.fc39 -> 3.12.3-1.fc39
                           nextcloud-client-libs 3.12.1-1.fc39 -> 3.12.3-1.fc39
                           nextcloud-client-nautilus 3.12.1-1.fc39 -> 3.12.3-1.fc39
                           nfs-utils 1:2.6.4-0.rc5.fc39 -> 1:2.6.4-0.rc6.fc39
                           nspr 4.35.0-18.fc39 -> 4.35.0-19.fc39
                           nss 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-softokn 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-softokn-freebl 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-sysinit 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-util 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nvidia-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           nxpwireless-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           ostree 2024.4-1.fc39 -> 2024.5-1.fc39
                           ostree-grub2 2024.4-1.fc39 -> 2024.5-1.fc39
                           ostree-libs 2024.4-1.fc39 -> 2024.5-1.fc39
                           passt 0^20240220.g1e6f92b-1.fc39 -> 0^20240326.g4988e2b-1.fc39
                           passt-selinux 0^20240220.g1e6f92b-1.fc39 -> 0^20240326.g4988e2b-1.fc39
                           podman 5:4.9.3-1.fc39 -> 5:4.9.4-1.fc39
                           podman-plugins 5:4.9.3-1.fc39 -> 5:4.9.4-1.fc39
                           power-profiles-daemon 0.20-1.fc39 -> 0.21-2.fc39
                           python3-blockdev 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           python3-firewall 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           python3-pillow 10.2.0-1.fc39 -> 10.3.0-1.fc39
                           qadwaitadecorations-qt5 0.1.4-2.fc39 -> 0.1.5-1.fc39
                           realtek-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           rpm-ostree 2024.3-3.fc39 -> 2024.4-6.fc39
                           rpm-ostree-libs 2024.3-3.fc39 -> 2024.4-6.fc39
                           samba-client 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-client-libs 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-common 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-common-libs 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           skopeo 1:1.14.2-1.fc39 -> 1:1.15.0-1.fc39
                           system-config-printer-libs 1.5.18-5.fc39 -> 1.5.18-9.fc39
                           system-config-printer-udev 1.5.18-5.fc39 -> 1.5.18-9.fc39
                           tiwilink-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           util-linux 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           util-linux-core 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           vim-data 2:9.1.181-1.fc39 -> 2:9.1.309-1.fc39
                           vim-minimal 2:9.1.181-1.fc39 -> 2:9.1.309-1.fc39
                           xorg-x11-server-Xorg 1.20.14-30.fc39 -> 1.20.14-35.fc39
                           xorg-x11-server-common 1.20.14-30.fc39 -> 1.20.14-35.fc39
                  Removed: python3-pycurl-7.45.2-5.fc39.x86_64
          LayeredPackages: adb blivet-gui brightnessctl btop dconf-editor git git-credential-libsecret git-subtree *** pipewire-codec-aptx podman-compose rpmfusion-free-release ***

● fedora:fedora/39/x86_64/silverblue (index: 1)
                  Version: 39.20240325.0 (2024-03-25T00:37:19Z)
               BaseCommit: 8b2ab1dc8e53e928d23de9ed3be548c0338c3dec3fcb1c28b1caa0df70b35b7f
                           ├─ repo-0 (2023-11-01T00:12:39Z)
                           ├─ repo-1 (2024-03-25T00:16:24Z)
                           └─ repo-2 (2024-03-25T00:23:02Z)
                   Commit: def9b08e2c7fe12425846c7be578337db17535c8bf605fbf291e18a27cf83cc4
                           ├─ fedora (2023-11-01T00:12:39Z)
                           ├─ fedora-cisco-openh264 (2023-12-12T17:22:46Z)
                           ├─ rpmfusion-free (2023-11-04T16:49:08Z)
                           ├─ rpmfusion-free-updates (2024-03-24T12:21:36Z)
                           ├─ updates (2024-03-25T01:01:46Z)
                           └─ updates-archive (2024-03-25T01:29:06Z)
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Mo 25 Mär 2024 01:38:19 CET using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
          LayeredPackages: adb blivet-gui brightnessctl btop dconf-editor git git-credential-libsecret git-subtree *** pipewire-codec-aptx podman-compose rpmfusion-free-release ***

What is striking are…

  • the ostree/grub upgrades:
                           ostree 2024.4-1.fc39 -> 2024.5-1.fc39
                           ostree-grub2 2024.4-1.fc39 -> 2024.5-1.fc39
                           ostree-libs 2024.4-1.fc39 -> 2024.5-1.fc39
  • the kernel upgrades:
                           kernel 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-core 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules-core 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules-extra 6.7.9-200.fc39 -> 6.8.6-200.fc39

Booted from the old, working version (as obviously I can only run the commands there):

$ uname -a
Linux **** 6.7.9-200.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Mar  6 19:35:04 UTC 2024 x86_64 GNU/Linux

BTW I also tried to self-help me and asked ChatGPT, but it mostly just did the parrot and explained me possible causes/ideas to investigate I already know… :thinking: Fedora Kernel/booting troubleshooting docs also did not help.

Added boot, grub and removed audio, f36, pipewire, selinux

Try the upgrade with the --nogpgcheck option (if available)

Maybe try reset before update?

First, from old working version,

rpm-ostree reset

Then,

rpm-ostree update

rpm-ostree does not have such an option tom skip the GPG check. Also the issue seems to be the signature check at the kernel, when booting… not the upgrade itself.

rpm-ostree update --help
Aufruf:
  rpm-ostree update [OPTION …]

Alias for upgrade

Hilfeoptionen:
  -h, --help              Hilfeoptionen anzeigen

Anwendungsoptionen:
  --os=OSNAME             Operate on provided OSNAME
  -r, --reboot            Initiate a reboot after operation is complete
  --allow-downgrade       Permit deployment of chronologically older trees
  --preview               Just preview package differences (implies --unchanged-exit-77)
  --check                 Just check if an upgrade is available (implies --unchanged-exit-77)
  -C, --cache-only        Do not download latest ostree and RPM data
  --download-only         Just download latest ostree and RPM data, don't deploy
  --unchanged-exit-77     If no new deployment made, exit 77
  --bypass-driver         Force an upgrade even if an updates driver is registered
  --sysroot=SYSROOT       Use system root SYSROOT (default: /)
  --peer                  Force a peer-to-peer connection instead of using the system message bus
  --install=PKG           Overlay additional package
  --uninstall=PKG         Remove overlayed additional package
  --version               Print version information and exit
  -q, --quiet             Avoid printing most informational messages


This resulted in this deployment:

 fedora:fedora/39/x86_64/silverblue (index: 0)
                  Version: 39.20240419.0 (2024-04-19T00:38:04Z)
                   Commit: 11d9747cc7163b182688ba22df860aa7da8abf3db0c8789bc374576c3e87d7f5
                           ├─ repo-0 (2023-11-01T00:12:39Z)
                           ├─ repo-1 (2024-04-19T00:16:34Z)
                           └─ repo-2 (2024-04-19T00:23:07Z)
                   Staged: yes
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Fr 19 Apr 2024 02:38:52 CEST using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
                 Upgraded: alsa-sof-firmware 2023.12.1-1.fc39 -> 2024.03-2.fc39
                           amd-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           amd-ucode-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           at-spi2-atk 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           at-spi2-core 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           atheros-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           atk 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           atkmm 2.28.3-3.fc39 -> 2.28.4-1.fc39
                           b43-fwcutter 019-24.fc39 -> 019-36.fc39
                           bluez 5.72-1.fc39 -> 5.73-3.fc39
                           bluez-cups 5.72-1.fc39 -> 5.73-3.fc39
                           bluez-libs 5.72-1.fc39 -> 5.73-3.fc39
                           bluez-obexd 5.72-1.fc39 -> 5.73-3.fc39
                           bolt 0.9.6-2.fc39 -> 0.9.7-1.fc39
                           brcmfmac-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           btrfs-progs 6.7.1-1.fc39 -> 6.8-1.fc39
                           buildah 1.35.0-1.fc39 -> 1.35.3-1.fc39
                           c-ares 1.25.0-1.fc39 -> 1.28.1-1.fc39
                           cirrus-audio-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           cups 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-client 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-filesystem 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-ipptool 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-libs 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           emacs-filesystem 1:29.2-2.fc39 -> 1:29.3-1.fc39
                           epiphany-runtime 1:45.2-1.fc39 -> 1:45.3-1.fc39
                           expat 2.6.0-1.fc39 -> 2.6.2-1.fc39
                           firefox 124.0.1-1.fc39 -> 125.0-1.fc39
                           firefox-langpacks 124.0.1-1.fc39 -> 125.0-1.fc39
                           firewalld 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           firewalld-filesystem 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           fwupd 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-flashrom 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-modem-manager 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-uefi-capsule-data 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           glib-networking 2.78.0-1.fc39 -> 2.78.1-1.fc39
                           glibc 2.38-16.fc39 -> 2.38-17.fc39
                           glibc-all-langpacks 2.38-16.fc39 -> 2.38-17.fc39
                           glibc-common 2.38-16.fc39 -> 2.38-17.fc39
                           glibc-gconv-extra 2.38-16.fc39 -> 2.38-17.fc39
                           gnome-user-docs 45.1-1.fc39 -> 45.5-1.fc39
                           gtkmm3.0 3.24.8-1.fc39 -> 3.24.9-1.fc39
                           hplip 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           hplip-common 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           hplip-libs 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           hwdata 0.380-1.fc39 -> 0.381-1.fc39
                           ibus-m17n 1.4.28-1.fc39 -> 1.4.29-1.fc39
                           intel-audio-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           intel-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlegacy-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlwifi-dvm-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlwifi-mvm-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           kernel 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-core 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules-core 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           kernel-modules-extra 6.7.9-200.fc39 -> 6.8.6-200.fc39
                           libblkid 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libblockdev 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-crypto 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-fs 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-loop 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-mdraid 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-nvme 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-part 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-swap 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-utils 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libbsd 0.11.7-5.fc39 -> 0.12.2-1.fc39
                           libeconf 0.5.2-1.fc39 -> 0.5.2-2.fc39
                           libertas-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           libfdisk 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libgweather4 4.4.0-1.fc39 -> 4.4.2-1.fc39
                           libinput 1.25.0-1.fc39 -> 1.25.0-4.fc39
                           libmount 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libnfsidmap 1:2.6.4-0.rc5.fc39 -> 1:2.6.4-0.rc6.fc39
                           libopenmpt 0.6.12-1.fc39 -> 0.7.6-1.fc39
                           libphonenumber 8.13.30-1.fc39 -> 8.13.33-1.fc39
                           librepo 1.17.0-1.fc39 -> 1.17.1-1.fc39
                           libsane-hpaio 3.23.12-2.fc39 -> 3.23.12-6.fc39
                           libsmartcols 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libsmbclient 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           libuuid 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libwbclient 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           libxmlb 0.3.15-1.fc39 -> 0.3.18-1.fc39
                           libzstd 1.5.5-4.fc39 -> 1.5.6-1.fc39
                           linux-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           linux-firmware-whence 20240312-1.fc39 -> 20240410-1.fc39
                           mbedtls 2.28.7-1.fc39 -> 2.28.8-1.fc39
                           mt7xxx-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           nfs-utils 1:2.6.4-0.rc5.fc39 -> 1:2.6.4-0.rc6.fc39
                           nspr 4.35.0-18.fc39 -> 4.35.0-19.fc39
                           nss 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-softokn 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-softokn-freebl 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-sysinit 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-util 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nvidia-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           nxpwireless-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           ostree 2024.4-1.fc39 -> 2024.5-1.fc39
                           ostree-grub2 2024.4-1.fc39 -> 2024.5-1.fc39
                           ostree-libs 2024.4-1.fc39 -> 2024.5-1.fc39
                           passt 0^20240220.g1e6f92b-1.fc39 -> 0^20240326.g4988e2b-1.fc39
                           passt-selinux 0^20240220.g1e6f92b-1.fc39 -> 0^20240326.g4988e2b-1.fc39
                           podman 5:4.9.3-1.fc39 -> 5:4.9.4-1.fc39
                           power-profiles-daemon 0.20-1.fc39 -> 0.21-2.fc39
                           python3-firewall 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           python3-pillow 10.2.0-1.fc39 -> 10.3.0-1.fc39
                           qadwaitadecorations-qt5 0.1.4-2.fc39 -> 0.1.5-1.fc39
                           qemu-guest-agent 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-aarch64 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-alpha 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-arm 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-cris 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-hexagon 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-hppa 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-loongarch64 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-m68k 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-microblaze 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-mips 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-nios2 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-or1k 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-ppc 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-riscv 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-s390x 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-sh4 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-sparc 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-x86 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-xtensa 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           realtek-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           rpm-ostree 2024.3-3.fc39 -> 2024.4-6.fc39
                           rpm-ostree-libs 2024.3-3.fc39 -> 2024.4-6.fc39
                           rsync 3.2.7-5.fc39 -> 3.3.0-1.fc39
                           samba-client 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-client-libs 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-common 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-common-libs 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           skopeo 1:1.14.2-1.fc39 -> 1:1.15.0-1.fc39
                           system-config-printer-libs 1.5.18-5.fc39 -> 1.5.18-9.fc39
                           system-config-printer-udev 1.5.18-5.fc39 -> 1.5.18-9.fc39
                           tiwilink-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           util-linux 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           util-linux-core 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           vim-data 2:9.1.181-1.fc39 -> 2:9.1.309-1.fc39
                           vim-minimal 2:9.1.181-1.fc39 -> 2:9.1.309-1.fc39
                           xdg-desktop-portal 1.18.2-1.fc39 -> 1.18.2-6.fc39
                           xorg-x11-server-Xorg 1.20.14-30.fc39 -> 1.20.14-35.fc39
                           xorg-x11-server-common 1.20.14-30.fc39 -> 1.20.14-35.fc39
                  Removed: android-tools-1:34.0.4-4.fc39.x86_64
                           aspell-12:0.60.8-12.fc39.x86_64
                           augeas-libs-1.13.0-5.fc39.x86_64
                          *****
                           botan2-2.19.3-5.fc39.x86_64
                           breeze-icon-theme-5.113.0-1.fc39.noarch
                           brightnessctl-0.5.1-11.fc39.x86_64
                           btop-1.3.2-1.fc39.x86_64
                           cxl-libs-78-1.fc39.x86_64
                           daxctl-libs-78-1.fc39.x86_64
                           dbusmenu-qt5-0.9.3-0.32.20160218.fc39.x86_64
                           dconf-editor-45.0.1-1.fc39.x86_64
                           device-mapper-multipath-0.9.5-2.fc39.x86_64
                           device-mapper-multipath-libs-0.9.5-2.fc39.x86_64
                           docbook-dtds-1.0-82.fc39.noarch
                           docbook-style-xsl-1.79.2-19.fc39.noarch
                           git-2.44.0-1.fc39.x86_64
                           git-credential-libsecret-2.44.0-1.fc39.x86_64
                           git-subtree-2.44.0-1.fc39.noarch
                           gnome-tweaks-45.1-1.fc39.noarch
                           gparted-1.6.0-1.fc39.x86_64
                           gpgmepp-1.20.0-5.fc39.x86_64
                           gstreamer1-plugin-openh264-1.22.7-1.fc39.x86_64
                           gtksourceview4-4.8.4-3.fc39.x86_64
                           heimdall-2.0.2-3.fc39.x86_64
                           hspell-1.4-19.fc39.x86_64
                           htop-3.3.0-1.fc39.x86_64
                           httpie-3.2.2-1.fc39.noarch
                           hwloc-libs-2.10.0-1.fc39.x86_64
                           id3lib-3.8.3-55.fc39.x86_64
                           iniparser-4.1-13.fc39.x86_64
                           kde-filesystem-4-70.fc39.x86_64
                           kde-settings-39.1-1.fc39.noarch
                           keepassxc-2.7.6-6.fc39.x86_64
                           kf5-filesystem-5.115.0-1.fc39.x86_64
                           kf5-karchive-5.115.0-1.fc39.x86_64
                           kf5-kauth-5.115.0-1.fc39.x86_64
                           kf5-kbookmarks-5.115.0-1.fc39.x86_64
                           kf5-kcodecs-5.115.0-1.fc39.x86_64
                           kf5-kcompletion-5.115.0-1.fc39.x86_64
                           kf5-kconfig-core-5.115.0-1.fc39.x86_64
                           kf5-kconfig-gui-5.115.0-1.fc39.x86_64
                           kf5-kconfigwidgets-5.115.0-1.fc39.x86_64
                           kf5-kcoreaddons-5.115.0-1.fc39.x86_64
                           kf5-kcrash-5.115.0-1.fc39.x86_64
                           kf5-kdbusaddons-5.115.0-1.fc39.x86_64
                           kf5-kdoctools-5.115.0-1.fc39.x86_64
                           kf5-kglobalaccel-5.115.0-1.fc39.x86_64
                           kf5-kglobalaccel-libs-5.115.0-1.fc39.x86_64
                           kf5-kguiaddons-5.115.0-1.fc39.x86_64
                           kf5-ki18n-5.115.1-1.fc39.x86_64
                           kf5-kiconthemes-5.115.0-1.fc39.x86_64
                           kf5-kinit-5.115.0-1.fc39.x86_64
                           kf5-kio-core-5.115.0-1.fc39.x86_64
                           kf5-kio-core-libs-5.115.0-1.fc39.x86_64
                           kf5-kio-doc-5.115.0-1.fc39.noarch
                           kf5-kio-file-widgets-5.115.0-1.fc39.x86_64
                           kf5-kio-gui-5.115.0-1.fc39.x86_64
                           kf5-kio-ntlm-5.115.0-1.fc39.x86_64
                           kf5-kio-widgets-5.115.0-1.fc39.x86_64
                           kf5-kio-widgets-libs-5.115.0-1.fc39.x86_64
                           kf5-kitemviews-5.115.0-1.fc39.x86_64
                           kf5-kjobwidgets-5.115.0-1.fc39.x86_64
                           kf5-knotifications-5.115.0-1.fc39.x86_64
                           kf5-kservice-5.115.0-1.fc39.x86_64
                           kf5-ktextwidgets-5.115.0-1.fc39.x86_64
                           kf5-kwallet-5.115.0-1.fc39.x86_64
                           kf5-kwallet-libs-5.115.0-1.fc39.x86_64
                           kf5-kwidgetsaddons-5.115.0-1.fc39.x86_64
                           kf5-kwindowsystem-5.115.0-1.fc39.x86_64
                           kf5-kxmlgui-5.115.0-1.fc39.x86_64
                           kf5-solid-5.115.0-1.fc39.x86_64
                           kf5-sonnet-core-5.115.0-1.fc39.x86_64
                           kf5-sonnet-ui-5.115.0-1.fc39.x86_64
                           kid3-3.9.4-2.fc39.x86_64
                           kid3-common-3.9.4-2.fc39.x86_64
                           libblockdev-btrfs-3.1.0-1.fc39.x86_64
                           libblockdev-dm-3.1.0-1.fc39.x86_64
                           libblockdev-lvm-3.1.0-1.fc39.x86_64
                           libblockdev-mpath-3.1.0-1.fc39.x86_64
                           libblockdev-nvdimm-3.1.0-1.fc39.x86_64
                           libblockdev-plugins-all-3.1.0-1.fc39.x86_64
                           libfreeaptx-0.1.1-5.fc39.x86_64
                           libreport-2.17.11-3.fc39.x86_64
                           libvoikko-4.3.2-3.fc39.x86_64
                           lshw-B.02.20-1.fc39.x86_64
                           media-player-info-23-13.fc39.noarch
                           minizip-ng-3.0.7-5.fc39.x86_64
                           mozilla-openh264-2.4.0-2.fc39.x86_64
                           nautilus-python-4.0-4.fc39.x86_64
                           ndctl-78-1.fc39.x86_64
                           ndctl-libs-78-1.fc39.x86_64
                           nextcloud-client-3.12.1-1.fc39.x86_64
                           nextcloud-client-libs-3.12.1-1.fc39.x86_64
                           nextcloud-client-nautilus-3.12.1-1.fc39.x86_64
                           nvme-cli-2.6-1.fc39.x86_64
                           openal-soft-1.23.1-2.fc39.x86_64
                           openh264-2.4.0-2.fc39.x86_64
                           openssl-1:3.1.1-4.fc39.x86_64
                           parted-3.6-2.fc39.x86_64
                           perl-AutoLoader-5.74-502.fc39.noarch
                           perl-B-1.88-502.fc39.x86_64
                           perl-Carp-1.54-500.fc39.noarch
                           perl-Class-Struct-0.68-502.fc39.noarch
                           perl-Data-Dumper-2.188-501.fc39.x86_64
                           perl-Digest-1.20-500.fc39.noarch
                           perl-Digest-MD5-2.58-500.fc39.x86_64
                           perl-DynaLoader-1.54-502.fc39.x86_64
                           perl-Encode-4:3.19-500.fc39.x86_64
                           perl-Errno-1.37-502.fc39.x86_64
                           perl-Error-1:0.17029-13.fc39.noarch
                           perl-Exporter-5.77-500.fc39.noarch
                           perl-Fcntl-1.15-502.fc39.x86_64
                           perl-File-Basename-2.86-502.fc39.noarch
                           perl-File-Find-1.43-502.fc39.noarch
                           perl-File-Path-2.18-500.fc39.noarch
                           perl-File-Temp-1:0.231.100-500.fc39.noarch
                           perl-File-stat-1.13-502.fc39.noarch
                           perl-FileHandle-2.05-502.fc39.noarch
                           perl-Getopt-Long-1:2.54-500.fc39.noarch
                           perl-Getopt-Std-1.13-502.fc39.noarch
                           perl-Git-2.44.0-1.fc39.noarch
                           perl-HTTP-Tiny-0.088-3.fc39.noarch
                           perl-IO-1.52-502.fc39.x86_64
                           perl-IO-Socket-IP-0.42-1.fc39.noarch
                           perl-IO-Socket-SSL-2.083-3.fc39.noarch
                           perl-IPC-Open3-1.22-502.fc39.noarch
                           perl-MIME-Base64-3.16-500.fc39.x86_64
                           perl-Mozilla-CA-20230801-1.fc39.noarch
                           perl-NDBM_File-1.16-502.fc39.x86_64
                           perl-Net-SSLeay-1.92-10.fc39.x86_64
                           perl-POSIX-2.13-502.fc39.x86_64
                           perl-PathTools-3.89-500.fc39.x86_64
                           perl-Pod-Escapes-1:1.07-500.fc39.noarch
                           perl-Pod-Perldoc-3.28.01-501.fc39.noarch
                           perl-Pod-Simple-1:3.45-4.fc39.noarch
                           perl-Pod-Usage-4:2.03-500.fc39.noarch
                           perl-Scalar-List-Utils-5:1.63-500.fc39.x86_64
                           perl-SelectSaver-1.02-502.fc39.noarch
                           perl-Socket-4:2.037-3.fc39.x86_64
                           perl-Storable-1:3.32-500.fc39.x86_64
                           perl-Symbol-1.09-502.fc39.noarch
                           perl-Term-ANSIColor-5.01-501.fc39.noarch
                           perl-Term-Cap-1.18-500.fc39.noarch
                           perl-TermReadKey-2.38-18.fc39.x86_64
                           perl-Text-ParseWords-3.31-500.fc39.noarch
                           perl-Text-Tabs+Wrap-2023.0511-3.fc39.noarch
                           perl-Time-Local-2:1.350-3.fc39.noarch
                           perl-URI-5.21-1.fc39.noarch
                           perl-base-2.27-502.fc39.noarch
                           perl-constant-1.33-501.fc39.noarch
                           perl-if-0.61.000-502.fc39.noarch
                           perl-interpreter-4:5.38.2-502.fc39.x86_64
                           perl-lib-0.65-502.fc39.x86_64
                           perl-libnet-3.15-501.fc39.noarch
                           perl-libs-4:5.38.2-502.fc39.x86_64
                           perl-locale-1.10-502.fc39.noarch
                           perl-mro-1.28-502.fc39.x86_64
                           perl-overload-1.37-502.fc39.noarch
                           perl-overloading-0.02-502.fc39.noarch
                           perl-parent-1:0.241-500.fc39.noarch
                           perl-podlators-1:5.01-500.fc39.noarch
                           perl-vars-1.05-502.fc39.noarch
                           pipewire-codec-aptx-1.0.4-1.fc39.x86_64
                           plasma-breeze-common-5.27.11-1.fc39.noarch
                           podman-compose-1.0.6-3.fc39.noarch
                           podman-plugins-5:4.9.3-1.fc39.x86_64
                           polkit-qt5-1-0.114.0-7.fc39.x86_64
                           python3-blivet-1:3.8.2-1.fc39.noarch
                           python3-blockdev-3.1.0-1.fc39.x86_64
                           python3-bytesize-2.10-1.fc39.x86_64
                           python3-colorama-0.4.6-4.fc39.noarch
                           python3-defusedxml-0.7.1-9.fc39.noarch
                           python3-dotenv-0.21.1-5.fc39.noarch
                           python3-dotenv+cli-0.21.1-5.fc39.noarch
                           python3-markdown-it-py-3.0.0-2.fc39.noarch
                           python3-mdurl-0.1.2-4.fc39.noarch
                           python3-multidict-6.0.4-3.fc39.x86_64
                           python3-pid-2.2.3-18.fc39.noarch
                           python3-pip-23.2.1-1.fc39.noarch
                           python3-pycurl-7.45.2-5.fc39.x86_64
                           python3-pygments-2.15.1-4.fc39.noarch
                           python3-pyparted-1:3.13.0-3.fc39.x86_64
                           python3-pyudev-0.24.1-5.fc39.noarch
                           python3-requests+socks-2.28.2-5.fc39.noarch
                           python3-requests-toolbelt-1.0.0-3.fc39.noarch
                           python3-rich-13.5.2-1.fc39.noarch
                           python3-shtab-1.6.1-3.fc39.noarch
                           python3-six-1.16.0-12.fc39.noarch
                           python3-termcolor-2.3.0-3.fc39.noarch
                           qca-qt5-2.3.6-2.fc39.x86_64
                           qca-qt5-ossl-2.3.6-2.fc39.x86_64
                           qt5-qtgraphicaleffects-5.15.12-1.fc39.x86_64
                           qt5-qtlocation-5.15.12-1.fc39.x86_64
                           qt5-qtmultimedia-5.15.12-1.fc39.x86_64
                           qt5-qtquickcontrols-5.15.12-1.fc39.x86_64
                           qt5-qtquickcontrols2-5.15.12-1.fc39.x86_64
                           qt5-qtspeech-5.15.12-1.fc39.x86_64
                           qt5-qtspeech-speechd-5.15.12-1.fc39.x86_64
                           qt5-qttools-common-5.15.12-1.fc39.noarch
                           qt5-qttools-libs-designer-5.15.12-1.fc39.x86_64
                           qt5-qtwebchannel-5.15.12-1.fc39.x86_64
                           qt5-qtwebengine-5.15.16-1.fc39.x86_64
                           qt5-qtwebsockets-5.15.12-1.fc39.x86_64
                           qtkeychain-qt5-0.13.2-5.fc39.x86_64
                           re2-1:20220601-3.fc39.x86_64
                           rpmfusion-free-release-39-1.noarch
                           satyr-0.42-4.fc39.x86_64
                           sgml-common-0.6.3-61.fc39.noarch
                          *****
                           voikko-fi-2.5-5.fc39.noarch

Tried botting into 39.20240419.0 (kernel the same AFAIK), did not work.

Okay, given this issue stays, I also reported it as a kernel bug for now:
https://bugzilla.redhat.com/show_bug.cgi?id=2276099

Right you are, my bad I was n DNF mode.

I also have a similar issue.

$ rpm-ostree status
State: idle
Deployments:
  fedora:fedora/39/x86_64/silverblue
                  Version: 39.20240420.0 (2024-04-20T00:38:10Z)
               BaseCommit: fb022249fd3d07a9b88b7dcc84f6f8753cd5837e80518b1af814792d530426a2
             GPGSignature: Valid signature by E8F23996F23218640CB44CBE75CF5AC418B8E74C
            SecAdvisories: 1 low, 4 moderate, 2 important
                     Diff: 139 upgraded
      RemovedBasePackages: firefox firefox-langpacks 125.0-1.fc39
          LayeredPackages: arm-image-installer containernetworking-plugins fcust gnome-shell-extension-appindicator ifuse nextcloud-client nmap pam-u2f pamu2fcfg podman-compose podman-docker simple-scan

● fedora:fedora/39/x86_64/silverblue
                  Version: 39.20240402.0 (2024-04-02T00:39:43Z)
               BaseCommit: 634c8097165e6aab2baeaca6ae6d1ea2a7f11fba9f4955297bcf0fc2507047be
             GPGSignature: Valid signature by E8F23996F23218640CB44CBE75CF5AC418B8E74C
      RemovedBasePackages: firefox firefox-langpacks 124.0.1-2.fc39
          LayeredPackages: arm-image-installer containernetworking-plugins fcust gnome-shell-extension-appindicator ifuse nextcloud-client nmap pam-u2f pamu2fcfg podman-compose podman-docker simple-scan

  fedora:fedora/38/x86_64/silverblue
                  Version: 38.20240331.0 (2024-03-31T00:52:09Z)
               BaseCommit: b723b4c9665ff95a926b3dbfc11239d4e0ba27d5f9b318fa3f2e081bf140a01c
             GPGSignature: Valid signature by 6A51BBABBA3D5467B6171221809A8D7CEB10B464
      RemovedBasePackages: firefox firefox-langpacks 124.0.1-2.fc38
          LayeredPackages: arm-image-installer containernetworking-plugins fcust gnome-shell-extension-appindicator ifuse nextcloud-client nmap pam-u2f pamu2fcfg podman-compose podman-docker simple-scan
                   Pinned: yes

When I try to boot the latest present version I am getting an error along the lines of:

... bad shim signature
... You need to load a kernel first

To further elaborate my system/laptop is 3 years old. When I got it I installed then latest - at the time - available silverblue version. Been upgrading OS versions ever since.

I also had this issue a week ago but just didn’t upgrade and stayed at 39.2040402 When it happened again this week I started looking around and the issue reported here looks very similar if not the same.

1 Like

@iolaum the kernel version that is affected would be interesting. More you can run rpm-ostree dB diff and add the two hashes to find out what has changed between versions.

(or just the status command with -v should also show you some information)

This sounds exactly like F39/F40: Fails to boot on with "vmlinuz has invalid signature" · Issue #543 · fedora-silverblue/issue-tracker · GitHub.

I came across this a few weeks ago on a laptop running Silverblue 38. The successful workaround was to disable Secure Boot as suggested in that thread.

4 Likes

Thanks a lot! Indeed I can only boot with SecureBoot disabled and upgrading to Fedora 40 also did not help.
However, there are some workarounds mentioned there, but I am unsure how tested they are…

Also, would this possibly be a candidate for Common Issues if it prevents upgrading to Fedora 40? Proposed Common Issues

It’s worse than that :upside_down_face: It prevents any updates, even within the same major version — but only for machines where:

  • Secure Boot is enabled, and
  • You’re using an Atomic desktop, so the Secure Boot shim can’t be updated, and
  • You’ve previously upgraded from a sufficiently old version without reinstalling, so the Secure Boot shim is now too old

I expect this will affect many long-time Silverblue users, so I agree the workaround should at least be documented as a common issue.

Another workaround (which might be more palatable for some people than disabling Secure Boot) would be to reinstall with a more recent version of Silverblue.

3 Likes

Okay then, I have created a draft for this here:

Unfortunately I miss the technical details etc. to properly document it. So feel free to edit it please.

This is my rpm-ostree status -v report when I just tried to update and failed to boot into the new version:

$ rpm-ostree status -v
State: idle
AutomaticUpdates: disabled
Deployments:
  fedora:fedora/39/x86_64/silverblue (index: 0)
                  Version: 39.20240426.0 (2024-04-26T00:40:57Z)
               BaseCommit: 1d2ab610de20ddbabc338e96eb881c5fb2a24630fdf8e9cc74c5c32fc0f56560
                           ├─ repo-0 (2023-11-01T00:12:39Z)
                           ├─ repo-1 (2024-04-26T00:16:27Z)
                           └─ repo-2 (2024-04-26T00:24:05Z)
                   Commit: ce69d83a7f443e86960d5bd19e488a29041d79a2052e9ceaf5085bdceb0bb82a
                           ├─ copr:copr.fedorainfracloud.org:iolaum:fcust (2024-01-03T07:04:09Z)
                           ├─ fedora (2023-11-01T00:12:39Z)
                           ├─ fedora-cisco-openh264 (2023-12-12T17:22:46Z)
                           ├─ updates (2024-04-28T03:07:08Z)
                           └─ updates-archive (2024-04-25T01:48:26Z)
                   Staged: no
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Fri 26 Apr 2024 03:41:47 AM EEST using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
            SecAdvisories: FEDORA-2024-74563262c0  Low        cjson-1.7.17-1.fc39.x86_64
                             TRIAGE CVE-2023-50471 cjson: segmentation violation in function cJSON_InsertItemInArray [fedora-all]
                             https://bugzilla.redhat.com/show_bug.cgi?id=2254647
                           FEDORA-2024-90b3798199  Low        libopenmpt-0.7.6-1.fc39.x86_64
                           FEDORA-2024-b72bc39c00  Low        python-pip-wheel-23.2.1-2.fc39.noarch
                           FEDORA-2024-c8d21fe399  Low        flatpak-1.15.8-1.fc39.x86_64
                           FEDORA-2024-c8d21fe399  Low        flatpak-libs-1.15.8-1.fc39.x86_64
                           FEDORA-2024-c8d21fe399  Low        flatpak-selinux-1.15.8-1.fc39.noarch
                           FEDORA-2024-c8d21fe399  Low        flatpak-session-helper-1.15.8-1.fc39.x86_64
                             CVE-2024-32462 flatpak: sandbox escape via RequestBackground portal [fedora-all]
                             https://bugzilla.redhat.com/show_bug.cgi?id=2275983
                           FEDORA-2024-666210bd74  Moderate   mbedtls-2.28.8-1.fc39.x86_64
                             CVE-2024-28960 mbedtls: Insecure handling of shared memory in PSA Crypto APIs
                             https://bugzilla.redhat.com/show_bug.cgi?id=2272172
                           FEDORA-2024-6dab59bd47  Moderate   curl-8.2.1-5.fc39.x86_64
                           FEDORA-2024-6dab59bd47  Moderate   libcurl-8.2.1-5.fc39.x86_64
                             CVE-2024-2398 curl: HTTP/2 push headers memory-leak
                             https://bugzilla.redhat.com/show_bug.cgi?id=2270498
                             CVE-2024-2004 curl: Usage of disabled protocol
                             https://bugzilla.redhat.com/show_bug.cgi?id=2270500
                           FEDORA-2024-835800b552  Moderate   c-ares-1.28.1-1.fc39.x86_64
                             CVE-2024-25629 c-ares: Out of bounds read in ares__read_line() [fedora-all]
                             https://bugzilla.redhat.com/show_bug.cgi?id=2265714
                           FEDORA-2024-e4b1b4eab1  Moderate   python3-pillow-10.3.0-1.fc39.x86_64
                             TRIAGE CVE-2024-28219 python-pillow: buffer overflow in _imagingcms.c [fedora-all]
                             https://bugzilla.redhat.com/show_bug.cgi?id=2272567
                           FEDORA-2024-4afd3d38ae  Important  rpm-ostree-2024.4-6.fc39.x86_64
                           FEDORA-2024-4afd3d38ae  Important  rpm-ostree-libs-2024.4-6.fc39.x86_64
                             CVE-2024-2905 rpm-ostree: world-readable /etc/shadow file
                             https://bugzilla.redhat.com/show_bug.cgi?id=2271585
                           FEDORA-2024-528301bac2  Important  mod_http2-2.0.27-1.fc39.x86_64
                           FEDORA-2024-5af98298c7  Important  xorg-x11-server-Xwayland-23.2.6-1.fc39.x86_64
                             CVE-2024-31080 xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
                             https://bugzilla.redhat.com/show_bug.cgi?id=2271997
                             CVE-2024-31081 xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
                             https://bugzilla.redhat.com/show_bug.cgi?id=2271998
                             CVE-2024-31083 xorg-x11-server: User-after-free in ProcRenderAddGlyphs
                             https://bugzilla.redhat.com/show_bug.cgi?id=2272000
                           FEDORA-2024-9be1b94714  Important  glibc-2.38-18.fc39.x86_64
                           FEDORA-2024-9be1b94714  Important  glibc-all-langpacks-2.38-18.fc39.x86_64
                           FEDORA-2024-9be1b94714  Important  glibc-common-2.38-18.fc39.x86_64
                           FEDORA-2024-9be1b94714  Important  glibc-gconv-extra-2.38-18.fc39.x86_64
                             CVE-2024-2961 glibc: Out of bounds write in iconv may lead to remote code execution [fedora-all]
                             https://bugzilla.redhat.com/show_bug.cgi?id=2275855
                           FEDORA-2024-a00de83de9  Important  libnghttp2-1.55.1-5.fc39.x86_64
                             CVE-2024-28182 nghttp2: CONTINUATION frames DoS
                             https://bugzilla.redhat.com/show_bug.cgi?id=2268639
                           FEDORA-2024-dd32f390b3  Important  podman-5:4.9.4-1.fc39.x86_64
                           FEDORA-2024-dd32f390b3  Important  podman-docker-5:4.9.4-1.fc39.noarch
                           FEDORA-2024-dd32f390b3  Important  podman-plugins-5:4.9.4-1.fc39.x86_64
                             CVE-2024-1753 buildah: full container escape at build time
                             https://bugzilla.redhat.com/show_bug.cgi?id=2265513
                 Upgraded: alsa-sof-firmware 2023.12.1-1.fc39 -> 2024.03-2.fc39
                           amd-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           amd-ucode-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           at-spi2-atk 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           at-spi2-core 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           atheros-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           atk 2.50.1-1.fc39 -> 2.50.2-1.fc39
                           atkmm 2.28.3-3.fc39 -> 2.28.4-1.fc39
                           b43-fwcutter 019-24.fc39 -> 019-36.fc39
                           b43-openfwwf 5.2-30.fc38 -> 5.2-31.fc39
                           bluez 5.72-1.fc39 -> 5.75-1.fc39
                           bluez-cups 5.72-1.fc39 -> 5.75-1.fc39
                           bluez-libs 5.72-1.fc39 -> 5.75-1.fc39
                           bluez-obexd 5.72-1.fc39 -> 5.75-1.fc39
                           bolt 0.9.6-2.fc39 -> 0.9.7-1.fc39
                           brcmfmac-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           buildah 1.35.0-1.fc39 -> 1.35.3-1.fc39
                           c-ares 1.25.0-1.fc39 -> 1.28.1-1.fc39
                           cirrus-audio-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           cjson 1.7.15-2.fc39 -> 1.7.17-1.fc39
                           cups 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-client 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-filesystem 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-ipptool 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           cups-libs 1:2.4.7-11.fc39 -> 1:2.4.7-13.fc39
                           curl 8.2.1-4.fc39 -> 8.2.1-5.fc39
                           epiphany-runtime 1:45.2-1.fc39 -> 1:45.3-1.fc39
                           expat 2.6.0-1.fc39 -> 2.6.2-1.fc39
                           firewalld 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           firewalld-filesystem 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           flatpak 1.15.6-1.fc39 -> 1.15.8-1.fc39
                           flatpak-libs 1.15.6-1.fc39 -> 1.15.8-1.fc39
                           flatpak-selinux 1.15.6-1.fc39 -> 1.15.8-1.fc39
                           flatpak-session-helper 1.15.6-1.fc39 -> 1.15.8-1.fc39
                           fwupd 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-efi 1.4-1.fc38 -> 1.6-1.fc39
                           fwupd-plugin-flashrom 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-modem-manager 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           fwupd-plugin-uefi-capsule-data 1.9.15-1.fc39 -> 1.9.16-1.fc39
                           glib-networking 2.78.0-1.fc39 -> 2.78.1-1.fc39
                           glibc 2.38-17.fc39 -> 2.38-18.fc39
                           glibc-all-langpacks 2.38-17.fc39 -> 2.38-18.fc39
                           glibc-common 2.38-17.fc39 -> 2.38-18.fc39
                           glibc-gconv-extra 2.38-17.fc39 -> 2.38-18.fc39
                           gnome-user-docs 45.1-1.fc39 -> 45.5-1.fc39
                           gnutls 3.8.4-1.fc39 -> 3.8.5-1.fc39
                           gstreamer1 1.22.9-1.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugin-libav 1.22.9-1.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugins-bad-free 1.22.9-1.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugins-bad-free-libs 1.22.9-1.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugins-base 1.22.9-1.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugins-good 1.22.9-3.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugins-good-qt 1.22.9-3.fc39 -> 1.22.11-1.fc39
                           gstreamer1-plugins-ugly-free 1.22.9-1.fc39 -> 1.22.11-1.fc39
                           gtkmm3.0 3.24.8-1.fc39 -> 3.24.9-1.fc39
                           hwdata 0.380-1.fc39 -> 0.381-1.fc39
                           ibus-m17n 1.4.28-1.fc39 -> 1.4.29-1.fc39
                           ibus-typing-booster 2.25.3-1.fc39 -> 2.25.7-1.fc39
                           intel-audio-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           intel-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlegacy-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlwifi-dvm-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           iwlwifi-mvm-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           javascriptcoregtk4.1 2.44.0-2.fc39 -> 2.44.1-1.fc39
                           javascriptcoregtk6.0 2.44.0-2.fc39 -> 2.44.1-1.fc39
                           kernel 6.7.11-200.fc39 -> 6.8.7-200.fc39
                           kernel-core 6.7.11-200.fc39 -> 6.8.7-200.fc39
                           kernel-modules 6.7.11-200.fc39 -> 6.8.7-200.fc39
                           kernel-modules-core 6.7.11-200.fc39 -> 6.8.7-200.fc39
                           kernel-modules-extra 6.7.11-200.fc39 -> 6.8.7-200.fc39
                           libX11 1.8.7-1.fc39 -> 1.8.9-1.fc39
                           libX11-common 1.8.7-1.fc39 -> 1.8.9-1.fc39
                           libX11-xcb 1.8.7-1.fc39 -> 1.8.9-1.fc39
                           libblkid 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libblockdev 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-crypto 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-fs 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-loop 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-mdraid 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-nvme 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-part 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-swap 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libblockdev-utils 3.1.0-1.fc39 -> 3.1.1-1.fc39
                           libbsd 0.11.7-5.fc39 -> 0.12.2-1.fc39
                           libcurl 8.2.1-4.fc39 -> 8.2.1-5.fc39
                           libeconf 0.5.2-1.fc39 -> 0.5.2-2.fc39
                           libertas-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           libfdisk 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libgusb 0.4.8-1.fc39 -> 0.4.9-1.fc39
                           libgweather4 4.4.0-1.fc39 -> 4.4.2-1.fc39
                           libinput 1.25.0-1.fc39 -> 1.25.0-4.fc39
                           libmount 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libnfsidmap 1:2.6.4-0.rc5.fc39 -> 1:2.6.4-0.rc6.fc39
                           libnghttp2 1.55.1-4.fc39 -> 1.55.1-5.fc39
                           libopenmpt 0.6.12-1.fc39 -> 0.7.6-1.fc39
                           libphonenumber 8.13.30-1.fc39 -> 8.13.33-1.fc39
                           libproxy 0.5.3-3.fc39 -> 0.5.5-1.fc39
                           librepo 1.17.0-1.fc39 -> 1.17.1-1.fc39
                           libsane-airscan 0.99.27-9.fc39 -> 0.99.29-1.fc39
                           libsmartcols 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libsmbclient 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           libuuid 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           libwbclient 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           libxmlb 0.3.15-1.fc39 -> 0.3.19-1.fc39
                           linux-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           linux-firmware-whence 20240312-1.fc39 -> 20240410-1.fc39
                           mbedtls 2.28.7-1.fc39 -> 2.28.8-1.fc39
                           mod_http2 2.0.25-1.fc39 -> 2.0.27-1.fc39
                           mt7xxx-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           nextcloud-client 3.12.1-1.fc39 -> 3.12.3-1.fc39
                           nextcloud-client-libs 3.12.1-1.fc39 -> 3.12.3-1.fc39
                           nextcloud-client-nautilus 3.12.1-1.fc39 -> 3.12.3-1.fc39
                           nfs-utils 1:2.6.4-0.rc5.fc39 -> 1:2.6.4-0.rc6.fc39
                           nspr 4.35.0-18.fc39 -> 4.35.0-19.fc39
                           nss 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-softokn 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-softokn-freebl 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-sysinit 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nss-util 3.98.0-1.fc39 -> 3.99.0-1.fc39
                           nvidia-gpu-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           nxpwireless-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           passt 0^20240220.g1e6f92b-1.fc39 -> 0^20240326.g4988e2b-1.fc39
                           passt-selinux 0^20240220.g1e6f92b-1.fc39 -> 0^20240326.g4988e2b-1.fc39
                           pciutils 3.11.1-1.fc39 -> 3.12.0-1.fc39
                           pciutils-libs 3.11.1-1.fc39 -> 3.12.0-1.fc39
                           pipewire 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-alsa 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-gstreamer 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-jack-audio-connection-kit 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-jack-audio-connection-kit-libs 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-libs 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-pulseaudio 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           pipewire-utils 1.0.4-2.fc39 -> 1.0.5-1.fc39
                           podman 5:4.9.3-1.fc39 -> 5:4.9.4-1.fc39
                           podman-docker 5:4.9.3-1.fc39 -> 5:4.9.4-1.fc39
                           podman-plugins 5:4.9.3-1.fc39 -> 5:4.9.4-1.fc39
                           power-profiles-daemon 0.20-1.fc39 -> 0.21-2.fc39
                           python-pip-wheel 23.2.1-1.fc39 -> 23.2.1-2.fc39
                           python3-cups 2.0.1-18.fc39 -> 2.0.4-1.fc39
                           python3-firewall 2.0.3-1.fc39 -> 2.0.4-1.fc39
                           python3-pillow 10.2.0-1.fc39 -> 10.3.0-1.fc39
                           qemu-guest-agent 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-aarch64 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-alpha 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-arm 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-cris 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-hexagon 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-hppa 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-loongarch64 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-m68k 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-microblaze 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-mips 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-nios2 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-or1k 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-ppc 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-riscv 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-s390x 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-sh4 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-sparc 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-x86 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           qemu-user-static-xtensa 2:8.1.3-4.fc39 -> 2:8.1.3-5.fc39
                           realtek-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           rpm-ostree 2024.4-3.fc39 -> 2024.4-6.fc39
                           rpm-ostree-libs 2024.4-3.fc39 -> 2024.4-6.fc39
                           rsync 3.2.7-5.fc39 -> 3.3.0-1.fc39
                           samba-client 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-client-libs 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-common 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           samba-common-libs 2:4.19.5-1.fc39 -> 2:4.19.6-1.fc39
                           sane-airscan 0.99.27-9.fc39 -> 0.99.29-1.fc39
                           spice-vdagent 0.22.1-4.fc39 -> 0.22.1-6.fc39
                           tiwilink-firmware 20240312-1.fc39 -> 20240410-1.fc39
                           urw-base35-bookman-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-c059-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-d050000l-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-fonts-common 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-gothic-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-nimbus-mono-ps-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-nimbus-roman-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-nimbus-sans-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-p052-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-standard-symbols-ps-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           urw-base35-z003-fonts 20200910-18.fc39 -> 20200910-20.fc39
                           util-linux 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           util-linux-core 2.39.3-6.fc39 -> 2.39.4-1.fc39
                           vim-data 2:9.1.181-1.fc39 -> 2:9.1.309-1.fc39
                           vim-minimal 2:9.1.181-1.fc39 -> 2:9.1.309-1.fc39
                           virtualbox-guest-additions 7.0.14-1.fc39 -> 7.0.16-1.fc39
                           webkit2gtk4.1 2.44.0-2.fc39 -> 2.44.1-1.fc39
                           webkitgtk6.0 2.44.0-2.fc39 -> 2.44.1-1.fc39
                           xdg-desktop-portal 1.18.2-1.fc39 -> 1.18.2-6.fc39
                           xorg-x11-drv-wacom 1.2.0-2.fc39 -> 1.2.2-1.fc39
                           xorg-x11-drv-wacom-serial-support 1.2.0-2.fc39 -> 1.2.2-1.fc39
                           xorg-x11-server-Xorg 1.20.14-30.fc39 -> 1.20.14-35.fc39
                           xorg-x11-server-Xwayland 23.2.4-1.fc39 -> 23.2.6-1.fc39
                           xorg-x11-server-common 1.20.14-30.fc39 -> 1.20.14-35.fc39
      RemovedBasePackages: firefox firefox-langpacks 125.0.2-1.fc39
          LayeredPackages: arm-image-installer containernetworking-plugins fcust gnome-shell-extension-appindicator ifuse nextcloud-client nmap pam-u2f pamu2fcfg podman-compose podman-docker simple-scan

● fedora:fedora/39/x86_64/silverblue (index: 1)
                  Version: 39.20240402.0 (2024-04-02T00:39:43Z)
               BaseCommit: 634c8097165e6aab2baeaca6ae6d1ea2a7f11fba9f4955297bcf0fc2507047be
                           ├─ repo-0 (2023-11-01T00:12:39Z)
                           ├─ repo-1 (2024-04-02T00:16:14Z)
                           └─ repo-2 (2024-04-02T00:23:07Z)
                   Commit: 98cfbe67c236a4d0fe9114057d80ddd2ac3b4d4f6d8fb2d3cfb58e6f1380d5cc
                           ├─ copr:copr.fedorainfracloud.org:iolaum:fcust (2024-01-03T07:04:09Z)
                           ├─ fedora (2023-11-01T00:12:39Z)
                           ├─ fedora-cisco-openh264 (2023-12-12T17:22:46Z)
                           ├─ updates (2024-04-02T01:11:36Z)
                           └─ updates-archive (2024-03-28T01:49:15Z)
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Tue 02 Apr 2024 03:44:09 AM EEST using RSA key ID 75CF5AC418B8E74C
                           Good signature from "Fedora <fedora-39-primary@fedoraproject.org>"
      RemovedBasePackages: firefox firefox-langpacks 124.0.1-2.fc39
          LayeredPackages: arm-image-installer containernetworking-plugins fcust gnome-shell-extension-appindicator ifuse nextcloud-client nmap pam-u2f pamu2fcfg podman-compose podman-docker simple-scan
                   Pinned: yes

  fedora:fedora/38/x86_64/silverblue (index: 2)
                  Version: 38.20240331.0 (2024-03-31T00:52:09Z)
               BaseCommit: b723b4c9665ff95a926b3dbfc11239d4e0ba27d5f9b318fa3f2e081bf140a01c
                           ├─ repo-0 (2023-04-13T20:37:10Z)
                           ├─ repo-1 (2024-03-31T00:16:49Z)
                           └─ repo-2 (2024-03-31T00:26:28Z)
                   Commit: 637aedaf6c36b68f01f65b223645ddc034d45f6ede7eab98051179c56de9b72c
                           ├─ copr:copr.fedorainfracloud.org:iolaum:fcust (2023-05-13T06:40:27Z)
                           ├─ fedora (2023-04-13T20:37:10Z)
                           ├─ fedora-cisco-openh264 (2023-12-12T17:23:34Z)
                           ├─ fedora-modular (2023-04-13T20:30:47Z)
                           ├─ updates (2024-03-31T01:45:57Z)
                           ├─ updates-archive (2024-03-15T09:56:44Z)
                           └─ updates-modular (2024-03-07T01:02:11Z)
                StateRoot: fedora
             GPGSignature: 1 signature
                           Signature made Sun 31 Mar 2024 02:52:11 AM EET using RSA key ID 809A8D7CEB10B464
                           Good signature from "Fedora <fedora-38-primary@fedoraproject.org>"
      RemovedBasePackages: firefox firefox-langpacks 124.0.1-2.fc38
          LayeredPackages: arm-image-installer containernetworking-plugins fcust gnome-shell-extension-appindicator ifuse nextcloud-client nmap pam-u2f pamu2fcfg podman-compose podman-docker simple-scan
                   Pinned: yes

The solution posted by @rugk at

has solved my problem.

Thank you very much for all the help everyone!