On Mon, Mar 11, 2019 at 7:30 PM Kevin Fenzi <kevin(a)scrye.com> wrote:
On 3/11/19 4:31 AM, Vít Ondruch wrote:
> Hi,
>
> Can somebody please enlighten me, how to update Rawhide after branching
> and not using --nogpgcheck?
Can you expand on the case here?
What should happen is:
* branching
* f30 repos gets the f31 key
* you update your f30-repos
* you jump to rawhide and dnf just imports the key.
How did you get on rawhide?
I'm having a similar problem, but with Silverblue / rawhide.
I installed the system when rawhide was still f30, but now I can't run
"rpm-ostree upgrade" anymore, due to this error:
Enabled rpm-md repositories: rawhide
Updating metadata for 'rawhide'... done
error: Failed to download gpg key for repo 'rawhide': Curl error (37):
Couldn't read a file:// file for
file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-31-x86_64 [Couldn't open file
/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-31-x86_64]
So I'm *VERY* sure that I didn't mess with the system myself (since it's a
Silverblue installation), but still it's broken due to the missing GPG keys.
Fabio
> It seems that Rawhide keys were added in fedora-repos-30-0.4. So
this is
> the package which is still "rawhide" package and has "f31" keys.
But
> this package was not probably signed, because this directory is empty:
>
>
https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.4/data/signed/
Yeah, no longer shipped packages have their signed packages removed
after a while to save space. You just want any newer one there.
https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.5/data/sign...
for example.
> Installing anything from Rawhide fails, because of missing GPG keys.
>
> So is there a way to get the GPG keys via DNF? Would it be possible to
> sign fedora-repos and fedora-release packages by older key to allow
> smooth updates?
The f30 repos should already include the f31 key.
https://src.fedoraproject.org/rpms/fedora-repos/c/81ae6bcd584818d890f7939...
You can also get it from there:
https://src.fedoraproject.org/rpms/fedora-repos/raw/f30/f/RPM-GPG-KEY-fed...
kevin
_______________________________________________
devel mailing list -- devel(a)lists.fedoraproject.org
To unsubscribe send an email to devel-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org