Op woensdag 22 maart 2023 13:46:21 CET schreef Frank McCormick:
Attempted a zypper dup on my installation this morning. I got this error messagage on one of the repositories.
Warning: File 'repomd.xml' from repository 'openSUSE:Factory' is unsigned.
Note: Signing data enables the recipient to verify that no modifications occurred after the data were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system and in extreme cases even to a system compromise.
Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the whole repo.
Warning: We can't verify that no one meddled with this file, so it might not be trustworthy anymore! You should not continue unless you know it's safe.
File 'repomd.xml' from repository 'openSUSE:Factory' is unsigned, continue? [yes/no] (no): Retrieving repository 'openSUSE:Factory' metadata ............................................................................ ....................[error] Repository 'openSUSE:Factory' is invalid. [http-download.opensuse.org-fa10a0de|http://download.opensuse.org/tumbleweed /repo/oss/] Valid metadata not found at specified URL History: - Signature verification failed for repomd.xml - Can't provide /repodata/repomd.xml
Please check if the URIs defined for this repository are pointing to a valid repository. Warning: Skipping repository 'openSUSE:Factory' because of the above error.
Then zypper told me it was going to upgrade 2063 packages!! It didn't seem reasonable to me so I aborted the upgrade.
What should I have done ? Has anyone else experienced this?
Thanks
First a remark. I don't have a repository openSUSE:Factory. What is the URL in that repo? I also experience problems with unsigned or unavailable repomd.xml for Tumbleweed. So after the second warning I was asked to continue or abort; I aborted. -- fr.gr. member openSUSE Freek de Kruijf