Fwupd-refresh.service failing hourly on Fedora CoreOS 44 (waiting-for-auth)

Ask Fedora
, , ,
1

I’m seeing the same issue on three Fedora CoreOS 44 (latest stable (44.20260621.3.1)) servers.

fwupd-refresh.timer runs every hour, but fwupd-refresh.service fails consistently.

I’ve ruled out a few obvious things:

  • No SELinux denials.

  • Disabling DynamicUser didn’t help.

  • Running with verbose logging always ends with:

Fwupd-DEBUG: emitting ::status-changed() [waiting-for-auth]
fwupd-refresh.service: Main process exited, code=exited, status=1/FAILURE

If I then run:

sudo fwupdmgr refresh

it succeeds, updates the metadata files, and afterwards fwupd-refresh.service starts successfully again.

This makes me suspect a polkit/authorization issue rather than a systemd sandboxing problem.

I also found what looks like a related upstream discussion:

Has anyone else seen this on FCOS 44, or is there already a Fedora bug tracking it?

2

I see it also failing:

Jul 11 19:15:48 fwupdmgr[558698]: Updating lvfs
Jul 11 19:15:48 systemd[1]: fwupd-refresh.service: Main process exited, code=exited, status=1/FAILURE
Jul 11 19:15:48 systemd[1]: fwupd-refresh.service: Failed with result 'exit-code'.
Jul 11 19:15:48 systemd[1]: Failed to start fwupd-refresh.service - Refresh fwupd metadata and update motd.

Since this is on a vserver, where I cannot update the firmware anyway, I decided to just wait and see if it is fixed in the next update

4

Looks like the same issue affects next stream and is taking care on CoreOS 44.20260621.1.1 (next) fwupd-refresh.service fails every days · Issue #2176 · coreos/fedora-coreos-tracker · GitHub

5

Yes, apologies, this issue made it through next. We have fwupd pinned in testing-devel now but that hasn’t made it to next / testing yet. A fix was also merged upstream so hopefully we don’t need to keep that pin for long either.

It’s safe to ignore the failure anyway, or even disable that timer, since currently fwupd does not work on CoreOS anyway.

6

Thanks for quick response. I’ll be disabling the timer on my machines.