Bug 1469600
Summary: | Import of key(s) didn't help, wrong key(s)? | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Richard W.M. Jones <rjones> |
Component: | fedora-release | Assignee: | Dennis Gilmore <dennis> |
Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | rawhide | CC: | dennis, jdisnard, kellin, kevin, mboddu, pbrobinson, sergio, sgallagh, zbyszek |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2017-07-22 20:55:22 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Richard W.M. Jones
2017-07-11 14:25:04 UTC
> Userid : "Fedora 26 Primary (26) <fedora-26-primary>" > Fingerprint: E641 850B 77DF 4353 78D1 D7E2 812A 6B4B 64DA B85D > From : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-26-x86_64 > file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-26-x86_64 That's not the F-27 key. > 0. Install Fedora 26 (eg with Anaconda). > 1. # dnf install fedora-repos-rawhide > 2. Edit /etc/yum.repos.d/fedora-rawhide.repo to enable the repo. > 3. # dnf install bash dnf dnf-plugins-core emacs mlocate net-tools nfs-utils > ntp sudo telnet I can see the F-27 key, the key in fedora-rawhide.repo says: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch Which means you'll be getting the F-26 key and all F-27 content is signed with the F-27 key but it'll try to use the f26 key because $releasever is still 26. You should do distro-sync not the above procedure. Or add 1.1 "dnf upgrade fedora-re*" but it really is an ugly way to do it and YMMV Let's do distro-sync instead ... I still think there's something wrong here: --- $ sudo dnf install texi2html --enablerepo=rawhide --best Last metadata expiration check: 0:00:49 ago on Mon 17 Jul 2017 14:06:43 BST. Package texi2html-5.0-5.fc26.noarch is already installed, skipping. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Upgrading: texi2html noarch 5.0-6.fc27 rawhide 535 k Transaction Summary ================================================================================ Upgrade 1 Package Total download size: 535 k Is this ok [y/N]: y Downloading Packages: texi2html-5.0-6.fc27.noarch.rpm 1.0 MB/s | 535 kB 00:00 -------------------------------------------------------------------------------- Total 428 kB/s | 535 kB 00:01 warning: /var/cache/dnf/rawhide-2d95c80a1fa0a67d/packages/texi2html-5.0-6.fc27.noarch.rpm: Header V3 RSA/SHA256 Signature, key ID f5282ee4: NOKEY Importing GPG key 0x64DAB85D: Userid : "Fedora 26 Primary (26) <fedora-26-primary>" Fingerprint: E641 850B 77DF 4353 78D1 D7E2 812A 6B4B 64DA B85D From : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-26-x86_64 Is this ok [y/N]: y Key imported successfully Import of key(s) didn't help, wrong key(s)? --- It's using the Fedora 26 key for Rawhide, but the Fedora 27 key *is* installed: $ sudo dnf install /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-x86_64 Last metadata expiration check: 0:19:23 ago on Mon 17 Jul 2017 13:48:28 BST. Package fedora-repos-26-1.noarch is already installed, skipping. Dependencies resolved. Nothing to do. Complete! It's using the wrong key for whatever reason. It's using the wrong key because it has: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch which resolves to 26 on your f26 box. I'm not sure what the best answer here is. I guess we could have a rawhide key in the older repos, but it means updating them once we branch and make a new key. I also have a file /etc/yum.repos.d/fedora-rawhide.repo which has the gpgkey line as in comment 4. Perhaps it could use: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-$basearch Or another idea: gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-rawhide-$basearch plus there could be a symlink created in the filesystem? anyway this should be an fedora-repos package problem . please see bug #1456079 and bug #1364581 Yeah, lets close this in favor of #1456079 which is the same issue really... *** This bug has been marked as a duplicate of bug 1456079 *** |