Bug 668031

Summary: yum --nogpg fails, doesn't honor gpgcheck=0
Product: [Fedora] Fedora Reporter: Horst H. von Brand <vonbrand>
Component: yumAssignee: Seth Vidal <skvidal>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: low    
Version: rawhideCC: ffesti, james.antill, maxamillion, metherid, pmatilai, tim.lauridsen
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-02-17 13:38:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Horst H. von Brand 2011-01-07 17:48:25 UTC
Description of problem:
The current yum complains about non-signed packages and doesn't install anything, even though GPG is disabled in the rawhide repo file, and --nogpg has no effect either

Version-Release number of selected component (if applicable):
yum-3.2.28-16.noarch

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 seth vidal 2011-01-07 17:55:55 UTC
Can you show the output and command you're running completely?

thanks

Comment 2 James Antill 2011-01-07 18:36:59 UTC
I just upgraded from -16 to -17 yum, in rawhide. Installed the new kernel, with -17, and have no downloaded a bunch of extra packages not via. drpms.

So I'm pretty sure this still works, in general.

Comment 3 Horst H. von Brand 2011-01-07 21:12:54 UTC
Whatever the problem was, it is certainly fixed in yum-3.2.28-17.fc15.noarch

Comment 4 Horst H. von Brand 2011-01-09 14:36:16 UTC
Sorry, wrong. But it complains differently now:

# yum -y install pybluez
Loaded plugins: aliases, auto-update-debuginfo, downloadonly, fastestmirror,
              : filter-data, keys, list-data, local, merge-conf, post-
              : transaction-actions, presto, priorities, protectbase, remove-
              : with-leaves, rpm-warm-cache, security, show-leaves, tmprepo,
              : tsflags, upgrade-helper, verify, versionlock
Repository texlive is listed more than once in the configuration
Found 69 installed debuginfo package(s)
Enabling rawhide-debuginfo: Fedora - Rawhide - Debug
Loading mirror speeds from cached hostfile
 * rawhide: ftp.cse.buffalo.edu
 * rawhide-debuginfo: ftp.cse.buffalo.edu
Skipping filters plugin, no data
0 packages excluded due to repository protections
Setting up Install Process
Resolving Dependencies
Skipping filters plugin, no data
--> Running transaction check
---> Package pybluez.x86_64 0:0.18-2.fc14 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package          Arch            Version                 Repository       Size
================================================================================
Installing:
 pybluez          x86_64          0.18-2.fc14             _local           82 k

Transaction Summary
================================================================================
Install       1 Package(s)

Total download size: 82 k
Installed size: 310 k
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 82 k
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 97a1071f: NOKEY
Public key for pybluez-0.18-2.fc14.x86_64.rpm is not installed


Public key for pybluez-0.18-2.fc14.x86_64.rpm is not installed

Comment 5 Horst H. von Brand 2011-01-10 03:55:50 UTC
Bah... new key for Fedora 14, which rawhide didn't get.

Comment 6 James Antill 2011-01-10 15:23:46 UTC
*nods* ... also the local plugin defaults to gpgcheck=true, so you'll want to turn that off if you are using it with rawhide (and def. make sure you are cleaning stuff out, given the rate of change fro rawhide :).

Comment 7 Horst H. von Brand 2011-01-10 16:09:11 UTC
BTW, it would be nice to give the defaults in the configuration files (or give commented out non-defaults).

Disabled local. After a yum run that failed to get Thunar, and trying again which did get Thunar, now I get:

# yum -y update --skip-broken --nogpg --exclude=texlive-release*
Loaded plugins: aliases, auto-update-debuginfo, changelog, downloadonly,
              : fastestmirror, filter-data, fs-snapshot, keys, list-data, merge-
              : conf, post-transaction-actions, presto, priorities, protectbase,
              : refresh-packagekit, refresh-updatesd, remove-with-leaves, rpm-
              : warm-cache, security, show-leaves, tmprepo, tsflags, upgrade-
              : helper, verify, versionlock
Loading mirror speeds from cached hostfile
 * rawhide: mirror.hiwaay.net
Skipping filters plugin, no data
0 packages excluded due to repository protections
Setting up Update Process
Resolving Dependencies
There are unfinished transactions remaining. You might consider running yum-complete-transaction first to finish them.
Skipping filters plugin, no data
--> Running transaction check
---> Package Thunar.x86_64 0:1.0.2-4.fc15 will be updated
---> Package Thunar.x86_64 0:1.1.6-1.fc15 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch            Version                  Repository       Size
================================================================================
Updating:
 Thunar          x86_64          1.1.6-1.fc15             _local          3.0 M

Transaction Summary
================================================================================
Upgrade       1 Package(s)

Total download size: 3.0 M
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 3.0 M
Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed


Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed
[root@quelen pluginconf.d]# yum -y update --skip-broken --nogpg --exclude=texlive-release*
Loaded plugins: aliases, auto-update-debuginfo, changelog, downloadonly,
              : fastestmirror, filter-data, fs-snapshot, keys, list-data, merge-
              : conf, post-transaction-actions, presto, priorities, protectbase,
              : refresh-packagekit, refresh-updatesd, remove-with-leaves, rpm-
              : warm-cache, security, show-leaves, tmprepo, tsflags, upgrade-
              : helper, verify, versionlock
Loading mirror speeds from cached hostfile
 * rawhide: archive.linux.duke.edu
Skipping filters plugin, no data
0 packages excluded due to repository protections
Setting up Update Process
Resolving Dependencies
There are unfinished transactions remaining. You might consider running yum-complete-transaction first to finish them.
Skipping filters plugin, no data
--> Running transaction check
---> Package Thunar.x86_64 0:1.0.2-4.fc15 will be updated
---> Package Thunar.x86_64 0:1.1.6-1.fc15 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch            Version                  Repository       Size
================================================================================
Updating:
 Thunar          x86_64          1.1.6-1.fc15             _local          3.0 M

Transaction Summary
================================================================================
Upgrade       1 Package(s)

Total download size: 3.0 M
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 3.0 M
Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed


Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed

Comment 8 Horst H. von Brand 2011-01-10 16:13:13 UTC
(In reply to comment #6)
> *nods* ... also the local plugin defaults to gpgcheck=true, so you'll want to
> turn that off if you are using it with rawhide (and def. make sure you are
> cleaning stuff out, given the rate of change fro rawhide :).

AFAIU, I'd need local to be able to downgrade packages (you know, for the very rare case that rawhide borks something). Any "automatic" cleanup options?

Thanks!

Comment 9 seth vidal 2011-01-10 16:18:49 UTC
1. if you want to dump out the current config settings run: yum-config-manager

2. you can use:
   repomanage -k 2 -o /path/to/local/repo | xargs rm -f 

   to clean up packages older than the latest 2 of any pkg name.arch

Comment 10 James Antill 2011-01-10 19:29:32 UTC
I've found the problem, fixed upstream.