Originally filed against Fedora's firefox package here: https://bugzilla.redhat.com/show_bug.cgi?id=2005760 But I was redirected here.

Since the branching of F35 (i.e. for a few weeks now), firefox has been uninstallable in Rawhide. This has broken our CI.

As Fedora (irritatingly) changes its GPG key for every release, my theory is that mozilla-openh264 was not rebuilt for Rawhide yet, so that you still get the .fc35 version, and the F35 key is not available by default in rawhide?

Version-Release number of selected component (if applicable):

firefox 92.0-3.fc36
mozilla-openh264-2.1.1-2.fc35.x86_64

How reproducible: Always

Steps to Reproduce:
1. podman run -it --rm fedora:rawhide dnf install -y firefox

I also confirmed this on a cloud image, it's not container specific.

Actual results: Fails with

GPG key at file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-x86_64 (0x38AB71F4) is already installed
The GPG keys listed for the "Fedora rawhide openh264 (From Cisco) - x86_64" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: mozilla-openh264-2.1.1-2.fc35.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-x86_64
Public key for openh264-2.1.1-2.fc35.x86_64.rpm is not installed. Failing package is: openh264-2.1.1-2.fc35.x86_64
 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-x86_64
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

Expected results: firefox installs

Apparently the /etc/yum.repos.d/fedora-cisco-openh264.repo repo, even though it specifies $releasever (which should be "36") is pulling in Fedora 35 packages?