On 24.07.2012 15:42, Daniel Spannbauer wrote:

...

...

I wan't to install opensuse 11.4 with an USB Stick as the installation source. But how do I tell the system where the source is?

I tried it with install=hd:// install=usb:// install=/dev/sdc1, with 2 Slashes, 3 slashes, on slash....nothing seems to work.

you should find the information here http://en.opensuse.org/SDB:Linuxrc install=... is documented there -- ciao, Uwe Gansert SUSE LINUX Products GmbH, HRB 16746 (AG Nürnberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer Home: http://www.suse.de/~ug - Blog: http://suse.gansert.net listening to: "The march of the dead" by :Wumpscut: -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

On 24.07.2012 15:56, Daniel Spannbauer wrote:

I allready read this doc...but there is now Info how to deal with usb-devices....

USB devices should be handled like a hd. Try install=hd:/mySourceDir?device=sda2 install=hd:/mySourceDir -- ciao, Uwe Gansert SUSE LINUX Products GmbH, HRB 16746 (AG Nürnberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer Home: http://www.suse.de/~ug - Blog: http://suse.gansert.net listening to: "Dr. Thodt" by :Wumpscut: -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

On 24.07.2012 16:55, Daniel Spannbauer wrote:

I installed the same image/files over network and with a DVD...works fine in both cases. Only on an installation with a USB-Stick I get this message....

check the sha1sums of content* and initrd and compare them with an install source that works for you. -- ciao, Uwe Gansert SUSE LINUX Products GmbH, HRB 16746 (AG Nürnberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer Home: http://www.suse.de/~ug - Blog: http://suse.gansert.net -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

Am 07/24/2012 05:27 PM, schrieb Uwe Gansert:

On 24.07.2012 16:55, Daniel Spannbauer wrote:

...

I installed the same image/files over network and with a DVD...works fine in both cases. Only on an installation with a USB-Stick I get this message....

check the sha1sums of content* and initrd and compare them with an install source that works for you.

Ok, checked it. die a sha1sum on alle files on the DVD and the USB-STick, sorted them and did a diff...no differences. The DVD is booting fine on that machine....the usbstick doesn't... Regards Daniel -- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

Am 07/25/2012 02:19 PM, schrieb Uwe Gansert:

On 25.07.2012 13:36, Daniel Spannbauer wrote:

...

The DVD is booting fine on that machine....the usbstick doesn't...

no clue. Look at the y2log file what exactly is the problem and check the content file with gpg when you booted the inst-sys: gpg --verify content.asc content

I started the installation with "linuxrc.debug=2", there the system logs that it can't check the signature cause it has no public key..... The same if I try a gpg --verify content.asc content at /var/adm/mount Regards Daniel -- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

Am 07/26/2012 10:19 AM, schrieb Steffen Winterfeldt:

On Tue, 24 Jul 2012, Daniel Spannbauer wrote:

...

I now tried it with install=hd:/?device=sdc, seems to work so far. But now it claims about a signature-check of hd:/content.

Where exactly does it fail? Do you have any logs?

Steffen

Hello Steffen, find attached a linuxrc.log done with autoyast=usb:///autoinst.xml install=hd:/?device=sdc1 vga=0x31a apic linuxrc.debug=2 linuxrc.log=/linuxrc.log Regards Daniel -- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München

Am 07/30/2012 12:02 PM, schrieb Steffen Winterfeldt:

Hi Daniel,

On Fri, 27 Jul 2012, Daniel Spannbauer wrote:

...

find attached a linuxrc.log done with autoyast=usb:///autoinst.xml install=hd:/?device=sdc1 vga=0x31a apic linuxrc.debug=2 linuxrc.log=/linuxrc.log

...

loading file:/var/adm/mount/content.asc -> /content.asc url_read(file:/var/adm/mount/content.asc) sha1 5e806cacec5ac781634b272c18bd92be5872b34d sha1 not checked gpg: WARNING: unsafe permissions on homedir `/root/.gnupg' gpg: Signature made Thu Jul 26 13:14:54 2012 UTC using DSA key ID 7B6AC518 gpg: Can't check signature: No public key

Hello Steffen,

There are several issues:

a) the sha1 sum of content.asc does not match the one from our 11.4 DVDs

Thats true....

b) this should not happen:

...

gpg: WARNING: unsafe permissions on homedir `/root/.gnupg' Did you modify your boot media in any way?

The hole media is build from scratch with only needed packages from openSUSE and own packages...

c) > gpg: Signature made Thu Jul 26 13:14:54 2012 UTC That's fairly recent. Again, did you modify your media?

The Signature is build every time we create the media. The media itself (the iso) is created by a script automatically. I send you the script per mail if needed...

In any case, you can turn off the signature checks by booting with 'insecure=1'.

yes, I know. But why aren't there any errors if I install with the same source from network or from DVD? I don't use the insecure-switch there. Regards Daniel

Steffen

-- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

Am 07/30/2012 12:24 PM, schrieb Steffen Winterfeldt:

On Mon, 30 Jul 2012, Daniel Spannbauer wrote:

...

Am 07/30/2012 12:02 PM, schrieb Steffen Winterfeldt:

...

...

b) this should not happen:

...

gpg: WARNING: unsafe permissions on homedir `/root/.gnupg' Did you modify your boot media in any way?

[...]

...

yes, I know. But why aren't there any errors if I install with the same source from network or from DVD? I don't use the insecure-switch there.

The real issue is the usafe permission issue above. If you rebuild, make sure it stays at 0700. I don't know why it should differ depending on how you booot; but there's a shell open on console 9 where you can check what's going on.

Hmm, the /root/.gnupg should be in the initrd of the installation-Media? The only file we touch in the initrd is the installkey.gpg: ---------------------------------- echo "Schlüssel exportieren" gpg --export -u $KEY_ID > gpg-$KEY_ID.gpg gpg --export -a -u $KEY_ID > gpg-pubkey-$KEY_ID.asc echo "Schlüssel rein" echo "gpg-$KEY_ID.gpg" | cpio -o -H newc -A -F $INITRD.uncomp echo "install.key erweitern" gpg -u ds@marco.de --export >> installkey.gpg echo "installkey wieder in initrd" echo "installkey.gpg" | cpio -o -H newc -A -F $INITRD.uncomp echo "komprimieren" gzip --best <$INITRD.uncomp >$INITRD ------------------------------------ Regards Daniel -- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

On Mon, Jul 30, Daniel Spannbauer wrote:

gpg -u ds@marco.de --export >> installkey.gpg

installkey.gpg is a keyring and not a textfile, so above command destroys the keyring. Try this: gpg --import gpg-$KEY_ID.gpg --keyring installkey.gpg Regards, Daniel -- Daniel Rahn (ダニエル・ラーン), Senior Tech. Account Manager Product Management, SUSE LINUX Products GmbH Maxfeldstrasse 5, 90409 Nuernberg, Germany P: +49 (0) 911 74053 351 - F: +49 (0) 911 74053 679 M: +49 (0) 179 2320786 - HRB 16746 (AG Nuernberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

Am 07/30/2012 05:01 PM, schrieb Daniel Spannbauer:

Am 07/30/2012 03:11 PM, schrieb Daniel Rahn:

...

On Mon, Jul 30, Daniel Spannbauer wrote:

...

gpg -u ds@marco.de --export >> installkey.gpg

installkey.gpg is a keyring and not a textfile, so above command destroys the keyring.

Try this:

gpg --import gpg-$KEY_ID.gpg --keyring installkey.gpg

Regards,

Daniel

Hello Daniel,

now I did the following: ------------------------------------- echo "initall.key aus initrd raus....." cpio -i -F $INITRD.uncomp installkey.gpg echo "Schlüssel exportieren" gpg --export -u $KEY_ID > gpg-$KEY_ID.gpg gpg --export -a -u $KEY_ID > gpg-pubkey-$KEY_ID.asc echo "Schlüssel rein" echo "gpg-$KEY_ID.gpg" | cpio -o -H newc -A -F $INITRD.uncomp echo "install.key erweitern" #gpg -u ds@marco.de --export >> installkey.gpg gpg --import --keyring ./installkey.gpg gpg-$KEY_ID.gpg echo "installkey wieder in initrd" echo "installkey.gpg" | cpio -o -H newc -A -F $INITRD.uncomp echo "komprimieren" gzip --best <$INITRD.uncomp >$INITRD ----------------------------------------

I get the following Output: ---------------------------------------- install.key erweitern gpg: key 7B6AC518: "Daniel Spannbauer " not changed gpg: key 3D25D3D9: "SuSE Security Team " not changed gpg: key 0DFB3188: "Open Enterprise Server " not changed gpg: key A1912208: "Novell Provo Build (Contact security@novell.com) " not changed gpg: key 307E3D54: "SuSE Package Signing Key " not changed gpg: key 7E2E3B05: "Novell Provo Build (Contact security@novell.com) " not changed gpg: key 9C800ACA: "SuSE Package Signing Key " not changed gpg: key 56B4177A: "openSUSE:Factory OBS Project openSUSE:Factory@build.opensuse.org" not changed gpg: key 3DBDC284: "openSUSE Project Signing Key " not changed gpg: Total number processed: 9 gpg: unchanged: 9

Seems to work. Bute the error ist still the same (see linuxrc.log) Permissions for /root/.gnupg (which is emtpy) is 744.

Ok, in the linuxrc-source I found the command which checks the content: gpg --homedir /root/.gnupg --batch --no-default-keyring --keyring /installkey.gpg --ignore-valid-from --ignore-time-conflict --verify %s

/dev/null%s

I tried this on the commandline after the "signature check failed"-message and get: "gpg: Can't check signature: No public key" Which publickey is missed? I think I imported it now the right way to installkey.gpg..... Regards Daniel -- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org

Am 08/07/2012 05:25 PM, schrieb Daniel Rahn:

Hi,

On Mon, Aug 06, Daniel Spannbauer wrote:

...

Ok,

in the linuxrc-source I found the command which checks the content:

gpg --homedir /root/.gnupg --batch --no-default-keyring --keyring /installkey.gpg --ignore-valid-from --ignore-time-conflict --verify %s

...

/dev/null%s

I tried this on the commandline after the "signature check failed"-message and get:

"gpg: Can't check signature: No public key"

Which publickey is missed? I think I imported it now the right way to installkey.gpg.....

I had wanted to look into this more last week but other tasks kept me busy.

Just in case you did not notice, above command is meant to be run in the chroot-env of the installation. If you want to run it locally from your working area, you need to point to installkey.gpg correctly:

gpg --homedir /root/.gnupg --batch --no-default-keyring --keyring ./installkey.gpg --ignore-valid-from --ignore-time-conflict --verify %s

...

/dev/null%s

Mind the dot ...

Hello Daniel, the path was not the problem.... My public-key was imported by: gpg --import gpg-$KEY_ID.gpg --keyring installkey.gpg But it has to be: gpg --import gpg-$KEY_ID.gpg --no-default-keyring --keyring installkey.gpg Otherwise the key is imported in my personal keyring, not in installkey.gpg. Regards Daniel -- Daniel Spannbauer Software Entwicklung marco Systemanalyse und Entwicklung GmbH Tel +49 8333 9233-27 Fax -11 Rechbergstr. 4 - 6, D 87727 Babenhausen Mobil +49 171 4033220 http://www.marco.de/ Email ds@marco.de Geschäftsführer Martin Reuter HRB 171775 Amtsgericht München -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org