[opensuse-buildservice] Broken package signatures on ArchLinux
Good afternoon, I am using OBS in order to build and share some packages that requires a lot of build time and to host an Arch repository. I have a small issue; OBS is set up to sign repo packages and database files. While the database is signed properly, the packages are not. Everytime installing a package gives a small error message like this: ... (1/1) checking keys in keyring [-----------------------------------------------------] 100% error: telegram-desktop: unsupported signature format(0/1) checking package integrity [c o o(1/1) checking package integrity [-----------------------------------------------------] 100% (1/1) loading package files ... I would like to investigate about this issue. I am able to provide any log that you could wish. -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://git{hub,lab}.com/ItachiSan My GPG: 2FADEBF5 -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Sonntag, 8. Januar 2017, 15:43:27 CET wrote Giovanni Santini:
Good afternoon, I am using OBS in order to build and share some packages that requires a lot of build time and to host an Arch repository.
I have a small issue; OBS is set up to sign repo packages and database files. While the database is signed properly, the packages are not.
This is with your own OBS 2.7, right? Do you have the same problem with build.opensuse.org build packages? IIRC there was a fix which we may need to backport ...
Everytime installing a package gives a small error message like this:
... (1/1) checking keys in keyring
[-----------------------------------------------------] 100% error: telegram-desktop: unsupported signature format(0/1) checking package integrity [c o o(1/1) checking package integrity
[-----------------------------------------------------] 100% (1/1) loading package files ...
I would like to investigate about this issue. I am able to provide any log that you could wish.
-- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Il 09/01/2017 08:20, Adrian Schröter ha scritto:
This is with your own OBS 2.7, right?
Do you have the same problem with build.opensuse.org build packages? IIRC there was a fix which we may need to backport ...
Well, not. Hosting an OBS instance is impossible for me; that's why I rely on the build.opensuse.org instance. This is the content of my pacman.conf: [home_ItachiSan_archlinux] SigLevel = DatabaseRequired PackageOptional Server = http://download.opensuse.org/repositories/home:/ItachiSan:/archlinux/standar... -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://git{hub,lab}.com/ItachiSan My GPG: 2FADEBF5 -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Il 09/01/2017 08:20, Adrian Schröter ha scritto:
This is with your own OBS 2.7, right?
Do you have the same problem with build.opensuse.org build packages? IIRC there was a fix which we may need to backport ...
I've created a list of issues on GitHub in the *obs-build* repo to list my current issue and some good features that should be added: https://github.com/openSUSE/obs-build/issues/created_by/ItachiSan -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://git{hub,lab}.com/ItachiSan My GPG: 2FADEBF5 -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Il 09/01/2017 08:20, Adrian Schröter ha scritto:
On Sonntag, 8. Januar 2017, 15:43:27 CET wrote Giovanni Santini:
Good afternoon, I am using OBS in order to build and share some packages that requires a lot of build time and to host an Arch repository.
I have a small issue; OBS is set up to sign repo packages and database files. While the database is signed properly, the packages are not.
This is with your own OBS 2.7, right?
Do you have the same problem with build.opensuse.org build packages? IIRC there was a fix which we may need to backport ...
Good afternoon, I want to try to re-open this topic again. So, package signatures on Arch Linux are broken. The current situation is that *pacman* recognizes that packages are signed but in an improper way. So, I would like to know how the signature works for OBS, as usually *makepkg* does it automagically when building packages on Arch. Looking at *makepkg* content, the exact GPG call is: gpg --detach-sign --use-agent -u ${GPGKEY} --no-armor "$filename" &>/dev/null I hope at least to make someone notice this. Also, where should I open a bug issue? Thanks in advance. -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://git{hub,lab}.com/ItachiSan My GPG: 2FADEBF5 -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (2)
-
Adrian Schröter -
Giovanni Santini