Bug 1531780
| Summary: | [RFE] Add ability for pulp to gpg sign repository metadata] | ||
|---|---|---|---|
| Product: | Red Hat Satellite | Reporter: | Jason Dickerson <jdickers> |
| Component: | Repositories | Assignee: | satellite6-bugs <satellite6-bugs> |
| Status: | CLOSED DUPLICATE | QA Contact: | Lukáš Hellebrandt <lhellebr> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.2.12 | CC: | bmbouter, daviddavis, dgross, dkliban, ggainey, ipanova, kenyon, lhellebr, mhrivnak, mmccune, patalber, pcreech, rchan, redhatbugs, ttereshc |
| Target Milestone: | Unspecified | Keywords: | FutureFeature, Triaged |
| Target Release: | Unused | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-11-06 20:48:59 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Jason Dickerson
2018-01-05 22:01:38 UTC
The Pulp upstream bug status is at ON_QA. Updating the external tracker on this bug. The Pulp upstream bug priority is at Normal. Updating the external tracker on this bug. All upstream Pulp bugs are at MODIFIED+. Moving this bug to POST. The Pulp upstream bug status is at CLOSED - CURRENTRELEASE. Updating the external tracker on this bug. I can't get this to work. It is possible that I am doing something wrong, but I am using the instructions from https://docs.pulpproject.org/plugins/pulp_rpm/tech-reference/yum-plugins.html . When I set gpg_sign_metadata to true, the metadata is still not signed. 1) Create "/etc/pulp/server/plugins.conf.d/yum_distributor.json", enter "{ "gpg_sign_metadata": true }" 2) # katello-service restart 3) publish the repo to a content view, with "Force Yum Metadata Regeneration" checked, promote it 4) # find / -name repomd.xml.asc -> doesn't find anything 5) # yum install -y <package_in_repo> [...] https://<FQDN>/pulp/repos/Default_Organization/test/testcv/custom/test/test/repodata/repomd.xml.asc: [Errno 14] HTTPS Error 404 - Not Found Trying other mirror. To address this issue please refer to the below knowledge base article https://access.redhat.com/articles/1320623 If above article doesn't help to resolve this issue please open a ticket with Red Hat Support. Default_Organization_test_test | 2.1 kB 00:00:00 [...] failure: repodata/repomd.xml.asc from Default_Organization_test_test: [Errno 256] No more mirrors to try. https://<FQDN>/pulp/repos/Default_Organization/test/testcv/custom/test/test/repodata/repomd.xml.asc: [Errno 14] HTTPS Error 404 - Not Found Uploading Enabled Repositories Report Loaded plugins: product-id, subscription-manager Requesting needsinfo from upstream developer dkliban, ttereshc because the 'FailedQA' flag is set. Requesting needsinfo from upstream developer daviddavis because the 'FailedQA' flag is set. You need to also set the 'gpgkey' on the distributor. Full docs: https://docs.pulpproject.org/en/2.16/plugins/pulp_rpm/tech-reference/yum-plugins.html#gpg-signing-of-repository-metadata After Discussion with Dennis, failing this again because: 1) The feature is not documented in downstream at all. 2) The feature is not integrated well with the Satellite - it requires some manual configuration in config files. 3) I wasn't able to use the feature at all. Dennis thinks it's because wrong SELinux rules for GPG keys in /home/apache/.gnupg and is going to report it. Requesting needsinfo from upstream developer dkliban, ttereshc, daviddavis because the 'FailedQA' flag is set. All upstream Pulp bugs are at MODIFIED+. Moving this bug to POST. This is a duplicate of https://bugzilla.redhat.com/show_bug.cgi?id=1410638 Comments 29 and 30 in that bug list additional unreleased changes which are required to effectively use this feature and to integrate this feature with Satellite. We are going to handle this in https://bugzilla.redhat.com/show_bug.cgi?id=1410638 The pulp backend changes will land in 6.5 but the full support for this RFE will be handled and tracked in 1410638. Based upon comment 19, I'll move this to ON_DEV since the pulp changes are in. It should be noted that katello integration work will be done as part of bug 1410638 and planned for a future release. Closing this one as a duplicate of older bug 1410638. That bugzilla references this one and also indicates that it is a duplicate. *** This bug has been marked as a duplicate of bug 1410638 *** |