(arrow) branch main updated: GH-50358: [Release] Fix permission issues when binary signing release candidate artifacts (#50359)

[kou]

This is an automated email from the ASF dual-hosted git repository.

kou pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow.git


The following commit(s) were added to refs/heads/main by this push:
     new 3d5be475a9 GH-50358: [Release] Fix permission issues when binary 
signing release candidate artifacts (#50359)
3d5be475a9 is described below

commit 3d5be475a9269e5fe4ca66688f35ece5cf16679b
Author: Raúl Cumplido <raulcumpl...@gmail.com>
AuthorDate: Thu Aug 6 03:28:30 2026 +0200

    GH-50358: [Release] Fix permission issues when binary signing release 
candidate artifacts (#50359)
    
    ### Rationale for this change
    
    We updated from bookworm to trixie our binary signing image. When trying to 
sign the packages it failed with the following error:
    ```
    Downloading: centos - 100.0% [63/63] 00:01:26 00:00:00  0/s
    error: Unable to open sqlite database /var/lib/rpm/rpmdb.sqlite: unable to 
open database file
    error: cannot open Packages index using sqlite - Operation not permitted (1)
    error: cannot open Packages database in /var/lib/rpm
    error: can't create transaction lock on /var/lib/rpm/.rpm.lock (No such 
file or directory)
    error: /tmp/apache-arrow-binary20260703-49-htq2me.asc: key 1 import failed.
    ```
    
    ### What changes are included in this PR?
    
    Use `sudo rpm` when signing binaries on the container.
    
    ### Are these changes tested?
    
    Yes, I've used that to upload and sign binaries for 25.0.1
    
    ### Are there any user-facing changes?
    No
    
    * GitHub Issue: #50358
    
    Authored-by: Raúl Cumplido <raulcumpl...@gmail.com>
    Signed-off-by: Sutou Kouhei <k...@clear-code.com>
---
 dev/release/binary-task.rb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/dev/release/binary-task.rb b/dev/release/binary-task.rb
index 6dbd2e7199..a93b3a16d7 100644
--- a/dev/release/binary-task.rb
+++ b/dev/release/binary-task.rb
@@ -1933,7 +1933,8 @@ APT::FTPArchive::Release::Description 
"#{apt_repository_description}";
          "--export", gpg_key_id,
          out: gpg_key.path,
          verbose: verbose?)
-      sh("rpm",
+      sh("sudo",
+         "rpm",
          "--import", gpg_key.path,
          out: default_output,
          verbose: verbose?)