Fix bug in RPM replay by filtering out GPG keys

Summary: If a user's desired RPM installs new gpg keys, they will be captured as a NEVRA that we need to install in RPM replay, which trips when running `dnf install` on it. Let's filter out GPG key tracking altogether to avoid this.

Test Plan: `hg co D47424634` then `buck2 run //tupperware/cm/antlir/tests:tw.coreviz.mercator=publish` succeeds with this change, not without it

Reviewed By: sergeyfd

Differential Revision: D47424126

fbshipit-source-id: ebf5d20c20a0b9c304df03575218260d305edce6

antlir/rpm/replay/subvol_rpm_compare.py

@@ -88,7 +88,8 @@ def _gen_nevras_in_subvol(ba_subvol: Subvol, subvol: Subvol) -> Iterator[NEVRA]:
     rpm_cp, _ = run_nspawn(opts, PopenArgs(stdout=subprocess.PIPE))
     for nevra_str in rpm_cp.stdout.decode().split():
         n, e, v, r, a = nevra_str.split(delim)
-        yield NEVRA(n, e, v, r, a)
+        if n != "gpg-pubkey":
+            yield NEVRA(n, e, v, r, a)
 
 
 def _gen_nevras_from_installer_output(