[opensuse-buildservice] Keys missing for Fedora 25/26/27 and Rawhide
Hi guys, can it be that the public keys for Fedora 25/26/27 and Rawhide are not setup correctly on the OBS? I get "public key not available" errors when building locally. Not sure if this is a local issue or to be fixed on the OBS, because I find mails stating both... Kind Regards, Johannes
A workaround is to use `osc build --no-verify Fedora...` instead On 2018-03-19 20:53, Johannes Kastl wrote:
Hi guys,
can it be that the public keys for Fedora 25/26/27 and Rawhide are not setup correctly on the OBS? I get "public key not available" errors when building locally.
Not sure if this is a local issue or to be fixed on the OBS, because I find mails stating both...
Kind Regards, Johannes
-- python programming - mail server - photo - video - https://sebix.at cryptographic key at https://sebix.at/DC9B463B.asc and on public keyservers
On Montag, 19. März 2018, 20:53:56 CET wrote Johannes Kastl:
Hi guys,
can it be that the public keys for Fedora 25/26/27 and Rawhide are not setup correctly on the OBS? I get "public key not available" errors when building locally.
Not sure if this is a local issue or to be fixed on the OBS, because I find mails stating both...
it is a setup issue ... osc tries to compare the rpm signatures with the gpg key from the server. fixed all, but Rawhide. Has ne1 a point where I can get the gpg key for rawhide in a trusted way? (Not part of Fedora key site and neither part of the repo on master server) -- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Dne 20.3.2018 v 07:35 Adrian Schröter napsal(a):
fixed all, but Rawhide. Has ne1 a point where I can get the gpg key for rawhide in a trusted way? (Not part of Fedora key site and neither part of the repo on master server)
Rawhide is F29 (now) Keys are here: https://getfedora.org/cs/keys/ They are present in fedora-release package https://koji.fedoraproject.org/koji/buildinfo?buildID=1047417 and distribution-gpg-keys https://github.com/xsuchy/distribution-gpg-keys/ https://koji.fedoraproject.org/koji/packageinfo?packageID=21232 Miroslav -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Dienstag, 20. März 2018, 08:35:10 CET wrote Miroslav Suchy:
Dne 20.3.2018 v 07:35 Adrian Schröter napsal(a):
fixed all, but Rawhide. Has ne1 a point where I can get the gpg key for rawhide in a trusted way? (Not part of Fedora key site and neither part of the repo on master server)
Rawhide is F29 (now) Keys are here: https://getfedora.org/cs/keys/
Thanks! There is also the not-yet-released Fedora 28 setup now, including the right key... -- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Dienstag, 20. März 2018, 09:25:25 CET wrote Adrian Schröter:
On Dienstag, 20. März 2018, 08:35:10 CET wrote Miroslav Suchy:
Dne 20.3.2018 v 07:35 Adrian Schröter napsal(a):
fixed all, but Rawhide. Has ne1 a point where I can get the gpg key for rawhide in a trusted way? (Not part of Fedora key site and neither part of the repo on master server)
Rawhide is F29 (now) Keys are here: https://getfedora.org/cs/keys/
Thanks!
Hm, Rawhide seems to have a mix of packages with different signatures, we don't support this in OBS ... So, the only advise I can give is to use osc build --vm-type=kvm if you don't want to ignore all signature checks without any protection for your system -- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Dne 20.3.2018 v 09:53 Adrian Schröter napsal(a):
Hm, Rawhide seems to have a mix of packages with different signatures, we don't support this in OBS ...
So, the only advise I can give is to use
osc build --vm-type=kvm
if you don't want to ignore all signature checks without any protection for your system
Yes. Because it was originally signed with F28 key, but after branching F29 is being used. So until mass rebuild, there is mixture of 28 and 29 keys. DNF support this, you can pass: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-28-$basearch;file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-$basearch Miroslav -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Dienstag, 20. März 2018, 10:40:44 CET wrote Miroslav Suchy:
Dne 20.3.2018 v 09:53 Adrian Schröter napsal(a):
Hm, Rawhide seems to have a mix of packages with different signatures, we don't support this in OBS ...
So, the only advise I can give is to use
osc build --vm-type=kvm
if you don't want to ignore all signature checks without any protection for your system
Yes. Because it was originally signed with F28 key, but after branching F29 is being used. So until mass rebuild, there is mixture of 28 and 29 keys. DNF support this, you can pass: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-28-$basearch;file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-$basearch
yes, but OBS and osc do not ... we can have only one key per project. And I don't want to split the repo manually ... So, we need to live with it IMHO -- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Tue, Mar 20, 2018 at 10:42:54AM +0100, Adrian Schröter wrote:
Yes. Because it was originally signed with F28 key, but after branching F29 is being used. So until mass rebuild, there is mixture of 28 and 29 keys. DNF support this, you can pass: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-28-$basearch;file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-$basearch
yes, but OBS and osc do not ...
OBS does not care about rpm signatures, it only verifies the repo signature for download on demand. So just osc needs help. (Btw, try concatenating the two keys...) Cheers, Michael. -- Michael Schroeder mls@suse.de SUSE LINUX GmbH, GF Jeff Hawn, HRB 16746 AG Nuernberg main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);} -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Adrian Schröter schrieb:
it is a setup issue ... osc tries to compare the rpm signatures with the gpg key from the server.
Thanks for the explanation.
fixed all, but Rawhide. Has ne1 a point where I can get the gpg key for rawhide in a trusted way? (Not part of Fedora key site and neither part of the repo on master server)
I can confirm that Fedora 25/26/27 work. Can you have a look at SLES12 SP3? I also get this error when building against SP3 locally... Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537
Hi Adrian, hi all, Johannes Kastl schrieb:
Can you have a look at SLES12 SP3? I also get this error when building against SP3 locally...
Still getting this error when building locally against SLES12 SP3, SP4 and SLES15... Johannes -- Johannes Kastl Linux Consultant & Trainer Tel.: +49 (0) 151 2372 5802 Mail: kastl@b1-systems.de B1 Systems GmbH Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537
participants (6)
-
Adrian Schröter -
Johannes Kastl -
Johannes Kastl -
Michael Schroeder -
Miroslav Suchy -
Sebastian