[opensuse] no key on packages from package search
Can someone tell me if I did this right? I looked for a package on sofware.opensuse.org that is not in the regular rpms. I found the package I was looking for. I didn't want to do the 1-click install, so I downloaded the package to my downloads directory. Then, to verify the integrity fo the file, I ran this command: rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm It said the file was bad and failed the signature verification. So, I downloaded it again, and ran the command again, and this time it said the file was good. Then I downloaded the key for the repo of that package, and imported it with the following: rpm --import repomd.xml.key After that, I did a zypper install of the package, and it all installed correctly with no errors or warnings. Is that the right way to go about it, or would someone suggest a better way? -- George Box: 42.2 | KDE Plasma 5.8 | AMD Phenom IIX4 | 64 | 32GB Laptop #1: 42.2 | KDE Plasma 5.8 | AMD FX 7TH GEN | 64 | 32GB Laptop #2: 42.2 | KDE Plasma 5.8 | Core i5 | 64 | 8GB -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Mon, 24 Jul 2017 16:57:56 +0800 George from the tribe wrote:
Can someone tell me if I did this right?
I looked for a package on sofware.opensuse.org that is not in the regular rpms. I found the package I was looking for. I didn't want to do the 1-click install, so I downloaded the package to my downloads directory.
Then, to verify the integrity fo the file, I ran this command:
rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm
It said the file was bad and failed the signature verification. So, I downloaded it again, and ran the command again, and this time it said the file was good.
Then I downloaded the key for the repo of that package, and imported it with the following:
rpm --import repomd.xml.key
After that, I did a zypper install of the package, and it all installed correctly with no errors or warnings.
Is that the right way to go about it, or would someone suggest a better way?
Hi George, This is what I do, in essence, WRT 'rpm' but without the '-K' flag. (I didn't find it referenced under 'man rpm', either. I checked after you'd piqued :) my interest.) I typically use the following: # rpm -Uhv [packagename].rpm --test The "U" is in case I forget the package is already installed. rpm will upgrade /or/ install it in either case. The "hv" verbose hash marks progress indicator is nice and '--test' simply does a harmless dry run to display any warnings or errors without writing any system changes. hth & regards, Carl -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 07/24/2017 08:43 PM, Carl Hartung wrote:
On Mon, 24 Jul 2017 16:57:56 +0800 George from the tribe wrote:
Can someone tell me if I did this right?
I looked for a package on sofware.opensuse.org that is not in the regular rpms. I found the package I was looking for. I didn't want to do the 1-click install, so I downloaded the package to my downloads directory.
Then, to verify the integrity fo the file, I ran this command:
rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm
It said the file was bad and failed the signature verification. So, I downloaded it again, and ran the command again, and this time it said the file was good.
Then I downloaded the key for the repo of that package, and imported it with the following:
rpm --import repomd.xml.key
After that, I did a zypper install of the package, and it all installed correctly with no errors or warnings.
Is that the right way to go about it, or would someone suggest a better way?
Hi George,
This is what I do, in essence, WRT 'rpm' but without the '-K' flag. (I didn't find it referenced under 'man rpm', either. I checked after you'd piqued :) my interest.) I typically use the following:
# rpm -Uhv [packagename].rpm --test
The "U" is in case I forget the package is already installed. rpm will upgrade /or/ install it in either case. The "hv" verbose hash marks progress indicator is nice and '--test' simply does a harmless dry run to display any warnings or errors without writing any system changes.
hth & regards,
Carl
Thanks, good to know. I found the K flag on some redhat guide page. I will try the Uhv next time also. :) -- George Box: 42.2 | KDE Plasma 5.8 | AMD Phenom IIX4 | 64 | 32GB Laptop #1: 42.2 | KDE Plasma 5.8 | AMD FX 7TH GEN | 64 | 32GB Laptop #2: 42.2 | KDE Plasma 5.8 | Core i5 | 64 | 8GB -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2017-07-24 14:43, Carl Hartung wrote:
On Mon, 24 Jul 2017 16:57:56 +0800 George from the tribe wrote:
Then, to verify the integrity fo the file, I ran this command:
rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm
This is what I do, in essence, WRT 'rpm' but without the '-K' flag. (I didn't find it referenced under 'man rpm', either. I checked after you'd piqued :) my interest.)
What does that -K do, did you find a reference? :-? -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar)
On Mon, Jul 24, 2017 at 4:22 PM, Carlos E. R. <robin.listas@telefonica.net> wrote:
On 2017-07-24 14:43, Carl Hartung wrote:
On Mon, 24 Jul 2017 16:57:56 +0800 George from the tribe wrote:
Then, to verify the integrity fo the file, I ran this command:
rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm
This is what I do, in essence, WRT 'rpm' but without the '-K' flag. (I didn't find it referenced under 'man rpm', either. I checked after you'd piqued :) my interest.)
What does that -K do, did you find a reference? :-?
rpm --checksig -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2017-07-24 16:14, Andrei Borzenkov wrote:
On Mon, Jul 24, 2017 at 4:22 PM, Carlos E. R. <robin.listas@telefonica.net> wrote:
On 2017-07-24 14:43, Carl Hartung wrote:
On Mon, 24 Jul 2017 16:57:56 +0800 George from the tribe wrote:
Then, to verify the integrity fo the file, I ran this command:
rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm
This is what I do, in essence, WRT 'rpm' but without the '-K' flag. (I didn't find it referenced under 'man rpm', either. I checked after you'd piqued :) my interest.)
What does that -K do, did you find a reference? :-?
rpm --checksig
Thanks. I can guess what that does, but it is not in the "man rpm" either. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar)
On 07/25/2017 02:51 AM, Carlos E. R. wrote:
On 2017-07-24 16:14, Andrei Borzenkov wrote:
On Mon, Jul 24, 2017 at 4:22 PM, Carlos E. R. <robin.listas@telefonica.net> wrote:
On 2017-07-24 14:43, Carl Hartung wrote:
On Mon, 24 Jul 2017 16:57:56 +0800 George from the tribe wrote:
Then, to verify the integrity fo the file, I ran this command:
rpm -K --nosignature TaskCoach-1.4.3-1.1.noarch.rpm
This is what I do, in essence, WRT 'rpm' but without the '-K' flag. (I didn't find it referenced under 'man rpm', either. I checked after you'd piqued :) my interest.) What does that -K do, did you find a reference? :-?
rpm --checksig Thanks. I can guess what that does, but it is not in the "man rpm" either.
It was from this link: http://linux-com.blogspot.com/2012/05/how-to-import-rpm-gpg-key.html The blogger is a redhat and/or CentOS and/or Fedora user. -- George Box: 42.2 | KDE Plasma 5.8 | AMD Phenom IIX4 | 64 | 32GB Laptop #1: 42.2 | KDE Plasma 5.8 | AMD FX 7TH GEN | 64 | 32GB Laptop #2: 42.2 | KDE Plasma 5.8 | Core i5 | 64 | 8GB -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 2017-07-25 04:07, George from the tribe wrote:
On 07/25/2017 02:51 AM, Carlos E. R. wrote:
On 2017-07-24 16:14, Andrei Borzenkov wrote:
What does that -K do, did you find a reference? :-?
rpm --checksig Thanks. I can guess what that does, but it is not in the "man rpm" either.
It was from this link: http://linux-com.blogspot.com/2012/05/how-to-import-rpm-gpg-key.html
The blogger is a redhat and/or CentOS and/or Fedora user.
Thanks. New: Bug 1050439 - Missing --checksig im man rpm (edit) -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
On 2017-07-25 16:13, Carlos E. R. wrote:
On 2017-07-25 04:07, George from the tribe wrote:
On 07/25/2017 02:51 AM, Carlos E. R. wrote:
On 2017-07-24 16:14, Andrei Borzenkov wrote:
What does that -K do, did you find a reference? :-?
rpm --checksig Thanks. I can guess what that does, but it is not in the "man rpm" either.
It was from this link: http://linux-com.blogspot.com/2012/05/how-to-import-rpm-gpg-key.html
The blogger is a redhat and/or CentOS and/or Fedora user.
Thanks.
New: Bug 1050439 - Missing --checksig im man rpm (edit)
Got response:
From /usr/lib/rpm/rpmpopt-4.11.2 (an upstream file)
# Note: Not all popt aliases are documented. This is a decision on my # part as to which are the more important aliases. Feel free to clip # a copy of the alias/exec here and place in /etc/popt or ~/.popt with # your own words added. It's easier than arguing about how many options # fit on the head of an executable :-) [...] # Minimally preserve commonly used switches from cli split-up [...] rpm exec --checksig rpmkeys --checksig rpm exec -K rpmkeys --checksig
So this documentation is in "man rpmkeys", and will not be documented in "man rpm".
-- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))
participants (4)
-
Andrei Borzenkov -
Carl Hartung -
Carlos E. R. -
George from the tribe