http://bugzilla.novell.com/show_bug.cgi?id=559233 http://bugzilla.novell.com/show_bug.cgi?id=559233#c1 --- Comment #1 from J. Daniel Schmidt 2009-11-30 18:21:38 UTC --- Created an attachment (id=330075) --> (http://bugzilla.novell.com/attachment.cgi?id=330075) zypper asking to accept gpg keys Attaching a screenshot of the zypper output where it asked to accept the gpg keys. Note the WebYaST-Update repo is signed with an unknown key. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=559233 http://bugzilla.novell.com/show_bug.cgi?id=559233#c2 Klaus Kämpf changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P1 - Urgent CC| |ro@novell.com AssignedTo|schubi@novell.com |mvidner@novell.com Target Milestone|--- |Final --- Comment #2 from Klaus Kämpf 2009-11-30 20:55:46 UTC --- Wow, one more ship-stopper :-( Why's that ? Is this a Kiwi bug ? Does the appliance not have keys installed ? Is this a buildservice bug ? Do the WebYaST packages carry the wrong key ? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=559233 http://bugzilla.novell.com/show_bug.cgi?id=559233#c4 Martin Vidner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jfriedl@novell.com AssignedTo|mvidner@novell.com |schubi@novell.com --- Comment #4 from Martin Vidner 2009-12-01 09:22:24 UTC --- (In reply to comment #3)

"SuSE Package Signing Key" should be fixed by including suse-build-key.rpm in the appliance (and in the docs for building one!)

That did not help :( It is actually reported as a Studio bug 547246 I will modify the sample appliance to import the key. Actually, as Stano has reminded me, an unknown key is a problem in the appliance, which is NOT a problem of WebYaST itself. The problem of WebYaST is that it hides the unknown key and pretends everything is OK. -> Schubi -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=559233 http://bugzilla.novell.com/show_bug.cgi?id=559233#c6 Martin Vidner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mvidner@novell.com --- Comment #6 from Martin Vidner 2009-12-01 12:03:37 UTC --- This code has helped in my live appliance. I will add it to the release notes (once I create them) and to the sample appliance build script. K=`mktemp` gpg --no-default-keyring --export --armor --keyring /usr/lib/rpm/gnupg/suse-build-key.gpg > $K rpm --import $K rm $K -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=559233 http://bugzilla.novell.com/show_bug.cgi?id=559233#c8 --- Comment #8 from Klaus Kämpf 2009-12-01 12:31:43 UTC --- I see the following steps needed 1. Document how to import gpg keys (i.e. like comment #6) and how to check they're accepted (i.e. document PackageKit logs etc.) 2. Verify correctness of the documentation by actually building an appliance with autobuild keys imported and install a webyast update. 3. Implement a notification mechanism so a webyast admin gets informed on package key issues. 4. Implement a 'key ring management' webyast module. For now, steps 1. and 2. are critical (ship-stoppers, actually) Step 3 would be nice in the near future Step 4 is far future -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=559233 http://bugzilla.novell.com/show_bug.cgi?id=559233#c Klaus Kämpf changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P3 - Medium |P4 - Low Severity|Critical |Enhancement -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.