| Summary: | NGN 4.0: Package "imgbased" is not signed. | ||
|---|---|---|---|
| Product: | [oVirt] ovirt-node | Reporter: | cshao <cshao> |
| Component: | General | Assignee: | Fabian Deutsch <fdeutsch> |
| Status: | CLOSED NOTABUG | QA Contact: | cshao <cshao> |
| Severity: | high | Docs Contact: | |
| Priority: | low | ||
| Version: | 4.0 | CC: | bugs, fdeutsch, huiwa, huzhao, leiwang, weiwang, yaniwang, ycui |
| Target Milestone: | ovirt-4.0.0-beta | Flags: | fdeutsch:
ovirt-4.0.0?
rule-engine: planning_ack? fdeutsch: devel_ack+ cshao: testing_ack+ |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-05-17 17:02:38 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Node | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
It's not critical right now, but in future we want it signed. package "ovirt-node-ng-image-update" is also not signed.
Test version:
squashfs.20160415
imgbased-0.6-0.201604150305git1e3b28f.el7.centos.noarch
ovirt-node-ng-image-update-placeholder-007-1.el7.noarch
ovirt-release-host-node-007-1.el7.noarch
ovirt-node-ng-image-update-3.6.5-1.20160420.0.el7.noarch
ovirt-node-ng-image-update-3.6.5-1.20160419.0.el7.noarch
Test steps:
1. Install NGN 4.0(squashfs.20160415)
2. yum update to ovirt-node-ng-image-update-3.6.5-1.20160419.0.el7.noarch
3. yum update to ovirt-node-ng-image-update-3.6.5-1.20160420.0.el7.noarch
4. check packages whether signed:
# rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGP:pgpsig})\n' | grep -v "Key ID"
Actual result:
After step4, the output:
ovirt-node-ng-image-update-3.6.5-1.20160420.0.el7.noarch ((none))
imgbased-0.6-0.201604150305git1e3b28f.el7.centos.noarch ((none))
ovirt-node-ng-image-update-3.6.5-1.20160419.0.el7.noarch ((none))
Excepted result:
After step4, there is nothing output.
Moving from 4.0 alpha to 4.0 beta since 4.0 alpha has been already released and bug is not ON_QA. Please reopen if the the buidl is still unsigned after GA. Pre-GA it is okay that the build is unsigned |
Description of problem: Package "imgbased" is not signed. Version-Release number of selected component (if applicable): ovirt-node-ng-installer-master-20160405.iso squashfs.20160405 ovirt-node-ng-image-update-placeholder-4.0.0-0.2.alpha1.20160405123556.gitbd184ec.el7.noarch imgbased-0.5-0.201604040928gitd6a85f8.el7.centos.noarch ovirt-release-host-node-4.0.0-0.2.alpha1.20160405123556.gitbd184ec.el7.noarch How reproducible: 100% Steps to Reproduce: 1. Install ngn 4.0 build. 2. Run command #rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGP:pgpsig})\n' | grep -v "Key ID" Actual results: # rpm -qa --qf '%{name}-%{version}-%{release}.%{arch} (%{SIGPGP:pgpsig})\n' | grep -v "Key ID" imgbased-0.5-0.201604040928gitd6a85f8.el7.centos.noarch ((none)) Expected results: All package are signed. Additional info: