I am looking into creating a SLES 10 SP2 ISO that contains both the relevant security updates released by Novell as well as RPM for the products needed by my employers products. Here are the steps that I used to set up a source for creating the ISO image: 1. I copied the contents of the entire SUSE 10 SP2 DVD into /[path_to_dvd_contents]/ 2. I then followed this link < http://www.suse.de/~ug/AutoYaST_FAQ.html#b9> that Uwe Gansert wrote about adding RPMs to an SLES installation source. I will list out the steps for a reference: a. Using version 20060925 of the create_update_source.sh script, I ran the following command: ./create_update_source.sh /[path_to_dvd_contents]/ b. I then copied all of the desired Novell Security Update RPMS along with the RPMs required for my employers product to /[path_to_dvd_contents]/updates/suse/i586/ c. I then ran the following commands from /[path_to_dvd_contents]/isoroot/updates/suse/ (as outlined in create_update_source.sh description from here <http://en.opensuse.org/Inst-source-utils#Short_description_of_the_scripts>) i. create_package_descr -x setup/descr/EXTRA_PROV ii. cd setup/descr iii. create_directory.yast . iv. create_md5sums . d. I then created an add_on_products file in /[path_to_dvd_contents]/ with the location for these add-on products, the contents of the add_on_products file are just "dvd:///updates" 3. I then followed this link <http://www.suse.de/~ug/AutoYaST_FAQ.html#bB> that Uwe Gansert wrote for signing an add-on product with my companies gpg key. I will list out the steps for a reference: a. gpg --export --armor $KEY_ID > /[path_to_dvd_contents]/updates/content.key b. gpg -b --sign --armor /[path_to_dvd_contents]/updates/content c. ls /[path_to_dvd_contents]/updates/ > /[path_to_dvd_contents]/updates/directory.yast d. I then SU in as root to do the following: i. ./unpackInitrd /[path_to_dvd_contents]/boot/i386/loader/initrd ii. cd /tmp/work-initrd iii. gpg --export --armor $KEY_ID > my-key.gpg iv. find . | cpio -H newc -o > /tmp/initrd v. gzip /tmp/initrd vi. mv /tmp/initrd.gz /[path_to_dvd_contents]/boot/i386/loader/initrd 4. At this point I would run the mkisofs command to build the ISO. 5. I then burn the ISO onto a DVD. Now that I have my DVD, I wanted to test this upgrading an existing box that we have that is running SLES 10 SP1. I inserted the DVD and booted from the DVD, I selected Installation and told it to upgrade the existing product. Soon after doing this, the following message box is displayed: ==================================================================================== No Checksum Found Now checksum for file /suse/setup/descr/EXTRA_PROV Was found in the source. This means that the file is part of the signed source, but the list of checksums on this source does not mention this file. Using the file may put the integrity of your system at risk. Use it anyway? ==================================================================================== It will show the same message box for the following files on the dvd: /suse/setup/descr/EXTRA_PROV /suse/setup/descr/packages /suse/setup/descr/packages.de /suse/setup/descr/packages.en I wanted to check /var/log/YaST2/y2log to see if you it could provide any more information. Here is a snippet of what is said: 2009-10-14 16:43:40 <1> linux(3177) [source] SourceImpl.cc(getPossibleCachedMetadataFile):386 File dvd:///updates/suse/setup/descr/EXTRA_PROV has no checksum available. Now, it seems to me that this error could possibly be related to checking md5sums since one of the steps that I performed was using the create_md5sums script. Another thing that I noticed is that two files within the /suse/setup/descr/ directory on the DVD did not get this message: /suse/setup/descr/MD5SUMS /suse/setup/descr/directory.yast I am not really sure where to check further for any more information. So, if anyone on this list would be willing to provide some help I would greatly appreciate it. Thank you in advance for any help you may be able to provide! Thank You, Jason Babicka -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org