[opensuse-autoinstall] /add_on_products.xml - User does not want to trust key
Hi, I'm currently building a SLES11 SP1 Image and using this customized CD for a pxe boot. During boot and scanning the /add_on_products.xml file the installation complains about the repository. In the y2log these comments werde made: ---- snip Callback ImportGpgKey not registered, using default value: false (verifyFileSignatureWorkflow):417 User does not want to trust key 62A0C0D5C5.... ---- snip Where is the switch to trust the key? The installation procedure then using a profiles directory structure with the same repositories in. In this case everything works well - In the profiles xml file the gpg/pgp switch are all set to trust unknown keys. Thanks in advance Regards Ruediger -- Ruediger Gunreben -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
Did you find a solution to this? I am having the same problem on SLES11 SP1. Here's a the <general><signature-handling> section of my autoinst.xml file: <signature-handling> <accept_non_trusted_gpg_key> <all config:type="boolean">true</all> <keys config:type="list"> <keyid>AC3CE2DA24428598</keyid> </keys> </accept_non_trusted_gpg_key> <import_gpg_key> <all config:type="boolean">true</all> <keys config:type="list"> <keyid>AC3CE2DA24428598</keyid> </keys> </import_gpg_key> <accept_file_without_checksum config:type="boolean">true</accept_file_without_checksum> <accept_unknown_gpg_key config:type="boolean">true</accept_non_trusted_gpg_key> <accept_unsigned_file config:type="boolean">true</accept_unsigned_file> <accept_verification_failed config:type="boolean">true</accept_verification_failed> </signature-handling> And I see this in my y2log: 2010-11-18 09:59:02 <1> <ip address>(3349) [Pkg] Callbacks.cc(askUserToAcceptKey): 1658 Callback ImportGpgKey not registered, using default value: false 2010-11-18 09:59:02 <1> <ip address>(3349) [zypp::KeyRigh] KeyRing.cc(verifyFileSignatureWorkflow): 417 User does not want to trust key AC3CE2DA2448598 .. ~Paul -----Original Message----- From: Ruediger Gunreben [mailto:rgunreben@isarflow.de] Sent: Friday, October 15, 2010 4:24 AM To: opensuse-autoinstall@opensuse.org Subject: [Probable SPAM] [opensuse-autoinstall] /add_on_products.xml - User does not want to trust key Hi, I'm currently building a SLES11 SP1 Image and using this customized CD for a pxe boot. During boot and scanning the /add_on_products.xml file the installation complains about the repository. In the y2log these comments werde made: ---- snip Callback ImportGpgKey not registered, using default value: false (verifyFileSignatureWorkflow):417 User does not want to trust key 62A0C0D5C5.... ---- snip Where is the switch to trust the key? The installation procedure then using a profiles directory structure with the same repositories in. In this case everything works well - In the profiles xml file the gpg/pgp switch are all set to trust unknown keys. Thanks in advance Regards Ruediger -- Ruediger Gunreben -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
I'm having the same problem both with adding packages to the SLES 11 SP1 media (and resigning) as well as if I create a new add-on repository for my custom RPM and sign that. I also tried updating the initrd on the boot media to include my gpg key as well, and that has not helped. At this point, I'm really stuck without a good way to add RPMs to my autoinstall image. I was able to do this in the SLE10SP2 installer by simply disabling all the checking, but those options don't seem to be honored any longer. Is there something that I'm missing. This seems like it's much harder than it needs to be. If there's an easier way to do this (maybe a different repository type that doesn't need all this structure and signing, etc), I'm all ears. ~Paul -----Original Message----- From: discip@pjm.com [mailto:discip@pjm.com] Sent: Thursday, November 18, 2010 10:12 AM To: rgunreben@isarflow.de; opensuse-autoinstall@opensuse.org Subject: RE: [Probable SPAM] [opensuse-autoinstall] /add_on_products.xml - User does not want to trust key Did you find a solution to this? I am having the same problem on SLES11 SP1. Here's a the <general><signature-handling> section of my autoinst.xml file: <signature-handling> <accept_non_trusted_gpg_key> <all config:type="boolean">true</all> <keys config:type="list"> <keyid>AC3CE2DA24428598</keyid> </keys> </accept_non_trusted_gpg_key> <import_gpg_key> <all config:type="boolean">true</all> <keys config:type="list"> <keyid>AC3CE2DA24428598</keyid> </keys> </import_gpg_key> <accept_file_without_checksum config:type="boolean">true</accept_file_without_checksum> <accept_unknown_gpg_key config:type="boolean">true</accept_non_trusted_gpg_key> <accept_unsigned_file config:type="boolean">true</accept_unsigned_file> <accept_verification_failed config:type="boolean">true</accept_verification_failed> </signature-handling> And I see this in my y2log: 2010-11-18 09:59:02 <1> <ip address>(3349) [Pkg] Callbacks.cc(askUserToAcceptKey): 1658 Callback ImportGpgKey not registered, using default value: false 2010-11-18 09:59:02 <1> <ip address>(3349) [zypp::KeyRigh] KeyRing.cc(verifyFileSignatureWorkflow): 417 User does not want to trust key AC3CE2DA2448598 .. ~Paul -----Original Message----- From: Ruediger Gunreben [mailto:rgunreben@isarflow.de] Sent: Friday, October 15, 2010 4:24 AM To: opensuse-autoinstall@opensuse.org Subject: [Probable SPAM] [opensuse-autoinstall] /add_on_products.xml - User does not want to trust key Hi, I'm currently building a SLES11 SP1 Image and using this customized CD for a pxe boot. During boot and scanning the /add_on_products.xml file the installation complains about the repository. In the y2log these comments werde made: ---- snip Callback ImportGpgKey not registered, using default value: false (verifyFileSignatureWorkflow):417 User does not want to trust key 62A0C0D5C5.... ---- snip Where is the switch to trust the key? The installation procedure then using a profiles directory structure with the same repositories in. In this case everything works well - In the profiles xml file the gpg/pgp switch are all set to trust unknown keys. Thanks in advance Regards Ruediger -- Ruediger Gunreben -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
Did you follow any of these? http://www.suse.de/~ug/AutoYaST_FAQ.html#b9 http://ugansert.blogspot.com/2009/01/opensuse-111-sles11-and-add-ons.html I think different constraints apply for "normal add-ons" vs. "install media". tty, 686f6c6d -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org
participants (3)
-
686f6c6d
-
discip@pjm.com
-
Ruediger Gunreben