Error: Invalid refspec ostree-signed-image:registry:quay.io/fedora/fedora-coreos:stable

Ask Fedora
1

Happily running fedora coreOS for some time, now want to get rid of this message:

motd message

Fedora CoreOS 42.20250929.3.0

##########################################################################

The zincati service is disabled on this system.

If not done so already please migrate the system to the signed OCI backend
for updates by running:

stream=stable # or testing or next
target=ostree-signed-image:registry:quay.io/fedora/fedora-coreos:$stream
sudo rpm-ostree rebase $target --reboot

Where $stream matches the Fedora CoreOS stream the system is following.

See Migrate systems to verifying signatures of container pulls · Issue #2029 · coreos/fedora-coreos-tracker · GitHub

To disable this warning, use:
sudo systemctl disable coreos-container-signing-migration-motd.service
##########################################################################

So I did the following, but getting below error:
root@mostro:~# stream=stable
root@mostro:~# target=ostree-signed-image:registry:quay.io/fedora/fedora-coreos:$stream
root@mostro:~# sudo rpm-ostree rebase $target --reboot
error: Invalid refspec ostree-signed-image:registry:quay.io/fedora/fedora-coreos:stable

logs

root@mostro:~# cat /etc/fedora-release
Fedora release 42 (Adams)
root@mostro:~# rpm-ostree status
State: idle
Deployments:
● ostree-remote-registry:fedora:quay.io/fedora/fedora-coreos:stable
Digest: sha256:b0940949e4d5da637be886f4db524ba6ed9d7c598c39ab7eab029338b664fb2e
Version: 42.20250929.3.0 (2025-10-13T18:21:00Z)

ostree-remote-registry:fedora:quay.io/fedora/fedora-coreos:stable
Digest: sha256:29177c8a90b2102839a65571d2b60837c6bd78fdf167e2228dad41bae790712a
Version: 42.20250914.3.0 (2025-09-30T03:08:59Z)
root@mostro:~# echo $target
ostree-signed-image:registry:quay.io/fedora/fedora-coreos:stable

root@mostro:~# cat /etc/fedora-release
Fedora release 42 (Adams)
root@mostro:~# rpm-ostree status
State: idle
Deployments:
● ostree-remote-registry:fedora:quay.io/fedora/fedora-coreos:stable
Digest: sha256:b0940949e4d5da637be886f4db524ba6ed9d7c598c39ab7eab029338b664fb2e
Version: 42.20250929.3.0 (2025-10-13T18:21:00Z)

ostree-remote-registry:fedora:quay.io/fedora/fedora-coreos:stable
Digest: sha256:29177c8a90b2102839a65571d2b60837c6bd78fdf167e2228dad41bae790712a
Version: 42.20250914.3.0 (2025-09-30T03:08:59Z)
root@mostro:~# echo $target
ostree-signed-image:registry:quay.io/fedora/fedora-coreos:stable

Also the upgrade fails:

rpm-ostree upgrade fails

root@mostro:~# rpm-ostree upgrade
Pulling manifest: ostree-remote-image:fedora:docker://quay.io/fedora/fedora-coreos:stable
Importing: ostree-remote-image:fedora:docker://quay.io/fedora/fedora-coreos:stable (digest: sha256:ab87a46a63c05aaeeceaa1fcc7e464c983d0797e7ed150cd5a179d435ad6c816)
ostree chunk layers already present: 64
ostree chunk layers needed: 1 (1.6 MB)
custom layers needed: 1 (180 bytes)
[0/2] Fetching ostree chunk 6b8e63deffcd1727bb1 (1.6 MB)… done
error: Importing: Unencapsulating base: Importing commit: Using remote fedora for verification; Expected commitmeta object, not DirMeta

2

Try running:

sudo systemctl stop zincati
sudo rpm-ostree rebase ostree-image-signed:docker://quay.io/fedora/fedora-coreos:stable --reboot
1 Like
3

Hey Dusty,
that works :slight_smile:
For our education would you kindly explain your solution
Thanks a lot

4

The following topic may be relevant, so you can read the explanations there.

5

thanks a lot! Fedora rocks