2015-12-23 18:14 GMT+09:00 Patrick Uiterwijk <puiterwijk(a)redhat.com>:
The latest build of your package is correctly signed:
hn-python2-python-test-2.7.11-3.el7.centos.x86_64.rpm: RSA sha1 ((MD5) PGP) md5 NOT OK
(MISSING KEYS: (MD5) PGP#1256a871)
Thanks for pointing me out.
I installed gpg keys manually with the following commands.
$ sudo curl -sL -o /etc/pki/rpm-gpg/hnscl-python2.pubkey.gpg
$ sudo curl -sL -o /etc/pki/rpm-gpg/hnscl-python2-python.pubkey.gpg
$ sudo rpm --import /etc/pki/rpm-gpg/hnscl-python2.pubkey.gpg
$ sudo rpm --import /etc/pki/rpm-gpg/hnscl-python2-python.pubkey.gpg
And I confirmed python-libs rpm is signed.
$ rpm -K hn-python2-python-libs-2.7.11-3.el7.centos.x86_64.rpm
hn-python2-python-libs-2.7.11-3.el7.centos.x86_64.rpm: rsa sha1 (md5) pgp md5 OK
However I still got the 'is not signed' error with yum install.
$ sudo yum install -y -v hn-python2-python
Loading "fastestmirror" plugin
Config time: 0.008
Yum version: 3.4.3
Package hn-python2-python-libs-2.7.11-3.el7.centos.x86_64.rpm is not signed
$ echo $?
I editted my *.repo files to use file:/// url for gpgkey instead of
https:// urls, still no luck.
$ cat /etc/yum.repos.d/hnakamur-hnscl-python2.repo
name=Copr repo for hnscl-python2 owned by hnakamur
$ cat /etc/yum.repos.d/hnakamur-hnscl-python2-python.repo
name=Copr repo for hnscl-python2-python owned by hnakamur
As a workaround, I confirmed I can install my rpms with yum --nogpgcheck option.
$ sudo yum install -y --nogpgcheck hn-python2-python
However I'd like to install rpm without --nogpgcheck option.
Could you give some advice?
Please note that the very first build in a COPR is not always signed due to a bug (or at
least, used to be), but any further builds should be signed.
With kind regards,
----- Original Message -----
> How to make sure rpms to be signed on copr?
> I tried to build my Python2 rpm. It was built successfully but is was
> not signed.
> I built other rpms and they are signed.
> I don't why my Python2 rpm was not signed.
> I'd like to know the way to make sure rpms are signed on copr.
> By the way, thanks for a great service like copr!
> It is very useful!
> Best regards,
> Hioraki Nakamura
> copr-devel mailing list
copr-devel mailing list
Hioraki Nakamura )hnakamur(a)gmail.com)