downloading commitmeta.json from builds.coreos.fedoraproject.org fails with `<Code>AccessDenied</Code>`

[eriksjolund]

Describe the bug

1. Start google chrome web browser
2. Go to https://builds.coreos.fedoraproject.org/browser?stream=rawhide&arch=x86_64
3. Click link commitmeta.json at the top of the web page. The following is shown:

   This XML file does not appear to have any style information associated with it. The document tree is shown below.
   <Error>
   <Code>AccessDenied</Code>
   <Message>Access Denied</Message>
   <RequestId>PJN9TTAEQQ0BXNTD</RequestId>
   <HostId>G23BjdT4/CkME6+kH69U0wN9IOXXuIWqmIJ/ji1sXPGGOgZgdfNxn9CzULb0Zlqw6Iw3aLQcIDM=</HostId>
   </Error>
   

Reproduction steps

A reproducer using curl

1. Run command

   curl https://builds.coreos.fedoraproject.org/prod/streams/rawhide/builds/44.20250823.91.0/x86_64/commitmeta.json
   

Expected behavior

JSON content is printed.

Actual behavior

The following output is printed

<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>9PTV9KT9B6RM6Z7F</RequestId><HostId>RPhcpoN7lwTfoABsI02xaRucy0m8Qd5RyzKYvcxzchBSIcggkdNmGEq7DKTAL/wIV7H9z2248vw=</HostId></Error>

System details

MacBook Pro M1
Google Chrome 139.0.7258.139d

Butane or Ignition config

Additional information

Further down on the same download page there is another link to commitmeta.json that actually works as expected

commitmeta.json

% curl -s 'https://builds.coreos.fedoraproject.org/prod/streams/rawhide/builds/44.20250820.91.0/x86_64/commitmeta.json' | head -2
{
  "coreos-assembler.config-gitrev" : "c34eed3a4b000155a33b23214d6f035d6eb9b8ab",

[dustymabe]

This was a result of us moving to use container builds intead of rpm-ostree compose. Right now we don't have any equivalent of commitmeta.json.

[dustymabe]

issue over in coreos/coreos-assembler#4288

[dustymabe]

this should be fixed now with coreos/coreos-assembler#4293