https://bugzilla.suse.com/show_bug.cgi?id=1214053 https://bugzilla.suse.com/show_bug.cgi?id=1214053#c2 Wolfgang Engel <wolfgang.engel@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(stephan.kreuz@bwi | |.de) | --- Comment #2 from Wolfgang Engel <wolfgang.engel@suse.com> --- Ah, you mentioned Download Error in the description so it looks like you where not able to download and install the package. On my testing system (SLES-15-SP5) I was able to install the package with "zypper in xmrig" Can you please attach a zypper logfile (/var/log/zypper.log and /var/log/zypper/history) ? -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1214053 https://bugzilla.suse.com/show_bug.cgi?id=1214053#c4 --- Comment #4 from Wolfgang Engel <wolfgang.engel@suse.com> --- (In reply to Stephan Kreuz from comment #3)

Hi Wolfgang,

I attach the Error Messages but I think I have to clear/change the token.

Error syncing the channel: SUSE-PackageHub-15-SP5-Backports-Pool for x86_64

Command '[/usr/bin/spacewalk-repo-sync, --channel, suse-packagehub-15-sp5-backports-pool-x86_64, --type, yum, --non-interactive]' exited with error code 1: 04:41:42 ERROR: Download failed: https://updates.suse.com/SUSE/Backports/SLE-15-SP5_x86_64/standard/rpm/ x86_64_GA/xmrig-6.18.1-bp155.1.8.x86_64. rpm?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX3FXn- 6ssSgLE_StpO9rlPDQxU9wetphQEZmHY1M_x5au4snRos7xSOwYhe_aCA2vEuhMJ-gM4_XS9F0- WgUDqI6npfc_QJXCJOgutQdtZAojKbpU - [Errno 14] HTTPS Error 403 - Forbidden. 04:41:42 1/1 : xmrig-6.18.1-bp155.1.8.x86_64.rpm (failed)

with Token per PM if wanted ;-)

kind regards

Stephan

Hello Stephan, I'm not able to send you a license or subscription for your SLES version. Please get in touch with your local IT or SUSE-Support to get one. The package xmrig itself also can be freely downloaded from here: https://download.opensuse.org/repositories/openSUSE:/Backports:/SLE-15-SP5/s... Regards, Wolfgang -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1214053 https://bugzilla.suse.com/show_bug.cgi?id=1214053#c6 --- Comment #6 from Stephan Kreuz <stephan.kreuz@bwi.de> --- Created attachment 868765 --> https://bugzilla.suse.com/attachment.cgi?id=868765&action=edit VirusTotal check for xmrig -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1214053 https://bugzilla.suse.com/show_bug.cgi?id=1214053#c8 --- Comment #8 from Wolfgang Engel <wolfgang.engel@suse.com> --- Hello Stephan, (In reply to Stephan Kreuz from comment #7)

Hi Wolfgang,

now it ist clear why I can`t download the Package.

Checked with VirusTotal.

Atttached Screenshot

Thank you for the update, sharing the screenshot. I also tested download and installation using an RMT-Server and on my test system directly connected to SCC. Both worked. I also checked the rpm with clamscan but with no results regarding an infection. My guess is that it is a false positive with your virus scanner since xmrig contains code for mining :) Regards, Wolfgang -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1214053 https://bugzilla.suse.com/show_bug.cgi?id=1214053#c10 --- Comment #10 from Wolfgang Engel <wolfgang.engel@suse.com> --- Hi Stephan, (In reply to Stephan Kreuz from comment #9)

Hi Wolfgang,

thats right , our Security Gateway dropped the Package. Im working for the Department of Defense in Germany and it is not possible to whitelist xmrig.

So we must live with the daily Error Messages.

Thanks for letting me know.

BTW

Why should anybody use a Crypto Miner in a Enterprise Environment ?

Package Hub consists of additional community packages that we share with openSUSE Leap (we are sharing the sources and so the binaries) so there are many additional packages that are not specific to typical enterprise usage. On the other hand it gives the freedom for the user to also use those packages on a enterprise platform. But I see your point since especially for xmrig the user base on the enteprise sector might be quite small. Regards, Wolfgang -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1214053 Claus Schinabeck <cschinabeck@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |cschinabeck@suse.com -- You are receiving this mail because: You are on the CC list for the bug.