Created attachment 618012 [details] rpm verify commands of katello in RHEL5 (RHEL6 is similar) Description of problem: When you deploy CloudForms instance generated by System Engine by Cloud Engine, all packages in the system are signed except katello-agent. Version-Release number of selected component (if applicable): katello-agent-1.1.2-1.el5 katello-agent-1.1.2-1.el6cf How reproducible: Always Steps to Reproduce: 1. Create component outline in Katello 2. Import outline into CloudEngine, build, push and deploy the instance 3. Check all packages for signature Actual results: katello-agent is unsigned. Expected results: All packages are signed Additional info:
I suspect the katello-agent tested was installed from a puddle. Puddles are *not* signed. Installing katello-agent from RHN || CDN works as expected ... > # rpm -qvv katello-agent 2>&1 | grep -i signature > D: read h# 649 Header V3 RSA/SHA256 Signature, key ID f21541eb: OK > > # rpm -Vvv katello-agent 2>&1 | grep -i signature > D: read h# 649 Header V3 RSA/SHA256 Signature, key ID f21541eb: OK > D: read h# 640 Header V3 RSA/SHA256 Signature, key ID f21541eb: OK > D: read h# 641 Header V3 RSA/SHA256 Signature, key ID f21541eb: OK > D: read h# 642 Header V3 RSA/SHA256 Signature, key ID fd431d51: OK