[opensuse-autoinstall] Missing Checksum(s) for SLES 10.2 CD that's manually created
I am looking into creating a SLES 10 SP2 ISO that contains both the relevant security updates released by Novell as well as RPM for the products needed by my employers products. Here are the steps that I used to set up a source for creating the ISO image: 1. I copied the contents of the entire SUSE 10 SP2 DVD into /[path_to_dvd_contents]/ 2. I then followed this link < http://www.suse.de/~ug/AutoYaST_FAQ.html#b9> that Uwe Gansert wrote about adding RPMs to an SLES installation source. I will list out the steps for a reference: a. Using version 20060925 of the create_update_source.sh script, I ran the following command: ./create_update_source.sh /[path_to_dvd_contents]/ b. I then copied all of the desired Novell Security Update RPMS along with the RPMs required for my employers product to /[path_to_dvd_contents]/updates/suse/i586/ c. I then ran the following commands from /[path_to_dvd_contents]/isoroot/updates/suse/ (as outlined in create_update_source.sh description from here <http://en.opensuse.org/Inst-source-utils#Short_description_of_the_scripts>) i. create_package_descr -x setup/descr/EXTRA_PROV ii. cd setup/descr iii. create_directory.yast . iv. create_md5sums . d. I then created an add_on_products file in /[path_to_dvd_contents]/ with the location for these add-on products, the contents of the add_on_products file are just "dvd:///updates" 3. I then followed this link <http://www.suse.de/~ug/AutoYaST_FAQ.html#bB> that Uwe Gansert wrote for signing an add-on product with my companies gpg key. I will list out the steps for a reference: a. gpg --export --armor $KEY_ID > /[path_to_dvd_contents]/updates/content.key b. gpg -b --sign --armor /[path_to_dvd_contents]/updates/content c. ls /[path_to_dvd_contents]/updates/ > /[path_to_dvd_contents]/updates/directory.yast d. I then SU in as root to do the following: i. ./unpackInitrd /[path_to_dvd_contents]/boot/i386/loader/initrd ii. cd /tmp/work-initrd iii. gpg --export --armor $KEY_ID > my-key.gpg iv. find . | cpio -H newc -o > /tmp/initrd v. gzip /tmp/initrd vi. mv /tmp/initrd.gz /[path_to_dvd_contents]/boot/i386/loader/initrd 4. At this point I would run the mkisofs command to build the ISO. 5. I then burn the ISO onto a DVD. Now that I have my DVD, I wanted to test this upgrading an existing box that we have that is running SLES 10 SP1. I inserted the DVD and booted from the DVD, I selected Installation and told it to upgrade the existing product. Soon after doing this, the following message box is displayed: ==================================================================================== No Checksum Found Now checksum for file /suse/setup/descr/EXTRA_PROV Was found in the source. This means that the file is part of the signed source, but the list of checksums on this source does not mention this file. Using the file may put the integrity of your system at risk. Use it anyway? ==================================================================================== It will show the same message box for the following files on the dvd: /suse/setup/descr/EXTRA_PROV /suse/setup/descr/packages /suse/setup/descr/packages.de /suse/setup/descr/packages.en I wanted to check /var/log/YaST2/y2log to see if you it could provide any more information. Here is a snippet of what is said: 2009-10-14 16:43:40 <1> linux(3177) [source] SourceImpl.cc(getPossibleCachedMetadataFile):386 File dvd:///updates/suse/setup/descr/EXTRA_PROV has no checksum available. Now, it seems to me that this error could possibly be related to checking md5sums since one of the steps that I performed was using the create_md5sums script. Another thing that I noticed is that two files within the /suse/setup/descr/ directory on the DVD did not get this message: /suse/setup/descr/MD5SUMS /suse/setup/descr/directory.yast I am not really sure where to check further for any more information. So, if anyone on this list would be willing to provide some help I would greatly appreciate it. Thank you in advance for any help you may be able to provide! Thank You, Jason Babicka -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
On Wed, Oct 14, 2009 at 01:57:59PM -0700, Jason Babicka wrote:
2009-10-14 16:43:40 <1> linux(3177) [source] SourceImpl.cc(getPossibleCachedMetadataFile):386 File dvd:///updates/suse/setup/descr/EXTRA_PROV has no checksum available.
The comments in the create_update_source.sh script explain this.. # in the data directory (<source>/updates/suse) # after that do "cd setup/descr" and then: # for i in *; do echo -n "META SHA1 "; sha1sum $i|awk '{ORS=""; print $1}'; # echo -n " "; basename $i; done # copy the output to the end of the updates/content file There's a way to get it to just ignore this info. I use the following in my main xml file in the <general> section: <signature-handling> <accept_file_without_checksum config:type="boolean">true</accept_file_without_checksum> <accept_unsigned_file config:type="boolean">true</accept_unsigned_file> <accept_unknown_gpg_key config:type="boolean">true</accept_unknown_gpg_key> <accept_non_trusted_gpg_key config:type="boolean">true</accept_non_trusted_gpg_key> <accept_verification_failed config:type="boolean">true</accept_verification_failed> </signature-handling> The specific issue you're seeing is the accept_unsigned_file part. -- Mike Marion-Unix SysAdmin/Staff IT Engineer-http://www.qualcomm.com [Lisa and Bart used Gandpa's name on a cartoon script they wrote] Bart - "Didn't you wonder why you were getting checks for doing absolutely nothing?" Grandpa - "I figured 'cause the Democrats are in power again." -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
On Wednesday 14 October 2009 Mike Marion wrote:
The comments in the create_update_source.sh script explain this..
# in the data directory (<source>/updates/suse) # after that do "cd setup/descr" and then: # for i in *; do echo -n "META SHA1 "; sha1sum $i|awk '{ORS=""; print $1}'; # echo -n " "; basename $i; done # copy the output to the end of the updates/content file
That did the trick. Thank you so much for the help! -Jason Babicka -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
participants (2)
-
Jason Babicka -
Mike Marion