[opensuse-buildservice] Avoiding the rpm signing warnings for Fedora
Hi. All builds against Fedora_16 on OBS currently throw a lot of warnings during chroot setup due to missing key for checking the package signatures. This does not seem to cause any problems but it irritated me (since it makes this part of the log very hard to read) and so I did investigate how this happens. The problem is as follows: - "build" usually uses --nosignature - But it wants to do so only for rpm v4, not v3 (probably v3 didn't have the option?) - It checks the rpm version not by checking the rpm version but by checking for the existence of the program "rpmsign" in the chroot - In Fedora (at least 15 and 16, i.e. the OBS-supported versions) the program "rpmsign" is not in the "rpm" rpm, but in the "rpm-sign" rpm - The "rpm-sign" rpm is not installed by the current Fedora:16 project config Possible solutions: 1) add "Preinstall: rpm-sign", "Required: rpm-sign" to Fedora:16 project config (I tested it and it indeed does avoid the warnings) 2) just remove the check from "build", does anyone still use ancient rpm? 3) change the check to something that doesn't require the presence of the rpmsign binary 1 is clearly the easy way out, but if you would prefer 2 or 3 I would be happy to make a patch for build. Gruesse, -- Frank Lichtenheld Lead Engineer email: frank.lichtenheld@sophos.com tel: +49 721 25516-362 cell: +49 174 1748211 SOPHOS You're safer in our world Unified | Web | Email | Endpoint | Mobile | Network | Data -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am Samstag, 12. Mai 2012, 21:29:25 schrieb Frank Lichtenheld:
Hi.
All builds against Fedora_16 on OBS currently throw a lot of warnings during chroot setup due to missing key for checking the package signatures. This does not seem to cause any problems but it irritated me (since it makes this part of the log very hard to read) and so I did investigate how this happens. The problem is as follows:
- "build" usually uses --nosignature - But it wants to do so only for rpm v4, not v3 (probably v3 didn't have the option?) - It checks the rpm version not by checking the rpm version but by checking for the existence of the program "rpmsign" in the chroot - In Fedora (at least 15 and 16, i.e. the OBS-supported versions) the program "rpmsign" is not in the "rpm" rpm, but in the "rpm-sign" rpm - The "rpm-sign" rpm is not installed by the current Fedora:16 project config
Possible solutions: 1) add "Preinstall: rpm-sign", "Required: rpm-sign" to Fedora:16 project config (I tested it and it indeed does avoid the warnings)
I added the preinstall now. Should be enough.
2) just remove the check from "build", does anyone still use ancient rpm? 3) change the check to something that doesn't require the presence of the rpmsign binary
1 is clearly the easy way out, but if you would prefer 2 or 3 I would be happy to make a patch for build.
Gruesse,
-- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
All builds against Fedora_16 on OBS currently throw a lot of warnings during chroot setup due to missing key for checking the package signatures. This does not seem to cause any problems but it irritated me (since it makes this part of the log very hard to read) and so I did investigate how this happens. The problem is as follows:
- "build" usually uses --nosignature - But it wants to do so only for rpm v4, not v3 (probably v3 didn't have the option?) - It checks the rpm version not by checking the rpm version but by checking for the existence of the program "rpmsign" in the chroot - In Fedora (at least 15 and 16, i.e. the OBS-supported versions) the
- The "rpm-sign" rpm is not installed by the current Fedora:16 project config
Possible solutions: 1) add "Preinstall: rpm-sign", "Required: rpm-sign" to Fedora:16
-----Original Message----- From: Adrian Schröter [mailto:adrian@suse.de] Sent: Wednesday, May 16, 2012 11:21 AM To: opensuse-buildservice@opensuse.org Cc: Frank Lichtenheld Subject: Re: [opensuse-buildservice] Avoiding the rpm signing warnings for Fedora [...] program "rpmsign" is not in the "rpm" rpm, but in the "rpm-sign" rpm project config (I tested it and it indeed does avoid the warnings)
I added the preinstall now. Should be enough.
Thanks, seems to be enough indeed. And it avoids rebuilding all Fedora packages :) Another thing I noticed about Fedora builds: They use very basic %optflags which seems to be caused by the absence of the package redhat-rpm-config. Could this package be added to the config? Aside from the better optflags it also activates some brp check scripts and provides some useful macros. Gruesse, Frank -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am Mittwoch, 16. Mai 2012, 14:56:42 schrieb Frank Lichtenheld:
All builds against Fedora_16 on OBS currently throw a lot of warnings during chroot setup due to missing key for checking the package signatures. This does not seem to cause any problems but it irritated me (since it makes this part of the log very hard to read) and so I did investigate how this happens. The problem is as follows:
- "build" usually uses --nosignature - But it wants to do so only for rpm v4, not v3 (probably v3 didn't have the option?) - It checks the rpm version not by checking the rpm version but by checking for the existence of the program "rpmsign" in the chroot - In Fedora (at least 15 and 16, i.e. the OBS-supported versions) the
- The "rpm-sign" rpm is not installed by the current Fedora:16 project config
Possible solutions: 1) add "Preinstall: rpm-sign", "Required: rpm-sign" to Fedora:16
-----Original Message----- From: Adrian Schröter [mailto:adrian@suse.de] Sent: Wednesday, May 16, 2012 11:21 AM To: opensuse-buildservice@opensuse.org Cc: Frank Lichtenheld Subject: Re: [opensuse-buildservice] Avoiding the rpm signing warnings for Fedora [...] program "rpmsign" is not in the "rpm" rpm, but in the "rpm-sign" rpm project config (I tested it and it indeed does avoid the warnings)
I added the preinstall now. Should be enough.
Thanks, seems to be enough indeed. And it avoids rebuilding all Fedora packages :)
Another thing I noticed about Fedora builds: They use very basic %optflags which seems to be caused by the absence of the package redhat-rpm-config. Could this package be added to the config? Aside from the better optflags it also activates some brp check scripts and provides some useful macros.
Yep, added for Fedora 15 & 16 -- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (2)
-
Adrian Schröter -
Frank Lichtenheld