Bug 668031 - yum --nogpg fails, doesn't honor gpgcheck=0
Summary: yum --nogpg fails, doesn't honor gpgcheck=0
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Fedora
Classification: Fedora
Component: yum
Version: rawhide
Hardware: x86_64
OS: Linux
low
high
Target Milestone: ---
Assignee: Seth Vidal
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-01-07 17:48 UTC by Horst H. von Brand
Modified: 2014-01-21 23:17 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2011-02-17 13:38:34 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Horst H. von Brand 2011-01-07 17:48:25 UTC
Description of problem:
The current yum complains about non-signed packages and doesn't install anything, even though GPG is disabled in the rawhide repo file, and --nogpg has no effect either

Version-Release number of selected component (if applicable):
yum-3.2.28-16.noarch

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 seth vidal 2011-01-07 17:55:55 UTC
Can you show the output and command you're running completely?

thanks

Comment 2 James Antill 2011-01-07 18:36:59 UTC
I just upgraded from -16 to -17 yum, in rawhide. Installed the new kernel, with -17, and have no downloaded a bunch of extra packages not via. drpms.

So I'm pretty sure this still works, in general.

Comment 3 Horst H. von Brand 2011-01-07 21:12:54 UTC
Whatever the problem was, it is certainly fixed in yum-3.2.28-17.fc15.noarch

Comment 4 Horst H. von Brand 2011-01-09 14:36:16 UTC
Sorry, wrong. But it complains differently now:

# yum -y install pybluez
Loaded plugins: aliases, auto-update-debuginfo, downloadonly, fastestmirror,
              : filter-data, keys, list-data, local, merge-conf, post-
              : transaction-actions, presto, priorities, protectbase, remove-
              : with-leaves, rpm-warm-cache, security, show-leaves, tmprepo,
              : tsflags, upgrade-helper, verify, versionlock
Repository texlive is listed more than once in the configuration
Found 69 installed debuginfo package(s)
Enabling rawhide-debuginfo: Fedora - Rawhide - Debug
Loading mirror speeds from cached hostfile
 * rawhide: ftp.cse.buffalo.edu
 * rawhide-debuginfo: ftp.cse.buffalo.edu
Skipping filters plugin, no data
0 packages excluded due to repository protections
Setting up Install Process
Resolving Dependencies
Skipping filters plugin, no data
--> Running transaction check
---> Package pybluez.x86_64 0:0.18-2.fc14 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package          Arch            Version                 Repository       Size
================================================================================
Installing:
 pybluez          x86_64          0.18-2.fc14             _local           82 k

Transaction Summary
================================================================================
Install       1 Package(s)

Total download size: 82 k
Installed size: 310 k
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 82 k
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 97a1071f: NOKEY
Public key for pybluez-0.18-2.fc14.x86_64.rpm is not installed


Public key for pybluez-0.18-2.fc14.x86_64.rpm is not installed

Comment 5 Horst H. von Brand 2011-01-10 03:55:50 UTC
Bah... new key for Fedora 14, which rawhide didn't get.

Comment 6 James Antill 2011-01-10 15:23:46 UTC
*nods* ... also the local plugin defaults to gpgcheck=true, so you'll want to turn that off if you are using it with rawhide (and def. make sure you are cleaning stuff out, given the rate of change fro rawhide :).

Comment 7 Horst H. von Brand 2011-01-10 16:09:11 UTC
BTW, it would be nice to give the defaults in the configuration files (or give commented out non-defaults).

Disabled local. After a yum run that failed to get Thunar, and trying again which did get Thunar, now I get:

# yum -y update --skip-broken --nogpg --exclude=texlive-release*
Loaded plugins: aliases, auto-update-debuginfo, changelog, downloadonly,
              : fastestmirror, filter-data, fs-snapshot, keys, list-data, merge-
              : conf, post-transaction-actions, presto, priorities, protectbase,
              : refresh-packagekit, refresh-updatesd, remove-with-leaves, rpm-
              : warm-cache, security, show-leaves, tmprepo, tsflags, upgrade-
              : helper, verify, versionlock
Loading mirror speeds from cached hostfile
 * rawhide: mirror.hiwaay.net
Skipping filters plugin, no data
0 packages excluded due to repository protections
Setting up Update Process
Resolving Dependencies
There are unfinished transactions remaining. You might consider running yum-complete-transaction first to finish them.
Skipping filters plugin, no data
--> Running transaction check
---> Package Thunar.x86_64 0:1.0.2-4.fc15 will be updated
---> Package Thunar.x86_64 0:1.1.6-1.fc15 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch            Version                  Repository       Size
================================================================================
Updating:
 Thunar          x86_64          1.1.6-1.fc15             _local          3.0 M

Transaction Summary
================================================================================
Upgrade       1 Package(s)

Total download size: 3.0 M
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 3.0 M
Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed


Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed
[root@quelen pluginconf.d]# yum -y update --skip-broken --nogpg --exclude=texlive-release*
Loaded plugins: aliases, auto-update-debuginfo, changelog, downloadonly,
              : fastestmirror, filter-data, fs-snapshot, keys, list-data, merge-
              : conf, post-transaction-actions, presto, priorities, protectbase,
              : refresh-packagekit, refresh-updatesd, remove-with-leaves, rpm-
              : warm-cache, security, show-leaves, tmprepo, tsflags, upgrade-
              : helper, verify, versionlock
Loading mirror speeds from cached hostfile
 * rawhide: archive.linux.duke.edu
Skipping filters plugin, no data
0 packages excluded due to repository protections
Setting up Update Process
Resolving Dependencies
There are unfinished transactions remaining. You might consider running yum-complete-transaction first to finish them.
Skipping filters plugin, no data
--> Running transaction check
---> Package Thunar.x86_64 0:1.0.2-4.fc15 will be updated
---> Package Thunar.x86_64 0:1.1.6-1.fc15 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch            Version                  Repository       Size
================================================================================
Updating:
 Thunar          x86_64          1.1.6-1.fc15             _local          3.0 M

Transaction Summary
================================================================================
Upgrade       1 Package(s)

Total download size: 3.0 M
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 3.0 M
Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed


Package Thunar-1.1.6-1.fc15.x86_64.rpm is not signed

Comment 8 Horst H. von Brand 2011-01-10 16:13:13 UTC
(In reply to comment #6)
> *nods* ... also the local plugin defaults to gpgcheck=true, so you'll want to
> turn that off if you are using it with rawhide (and def. make sure you are
> cleaning stuff out, given the rate of change fro rawhide :).

AFAIU, I'd need local to be able to downgrade packages (you know, for the very rare case that rawhide borks something). Any "automatic" cleanup options?

Thanks!

Comment 9 seth vidal 2011-01-10 16:18:49 UTC
1. if you want to dump out the current config settings run: yum-config-manager

2. you can use:
   repomanage -k 2 -o /path/to/local/repo | xargs rm -f 

   to clean up packages older than the latest 2 of any pkg name.arch

Comment 10 James Antill 2011-01-10 19:29:32 UTC
I've found the problem, fixed upstream.


Note You need to log in before you can comment on or make changes to this bug.