On Mon, Mar 11, 2019 at 7:30 PM Kevin Fenzi <kevin@scrye.com> wrote:
On 3/11/19 4:31 AM, Vít Ondruch wrote:
> Hi,
>
> Can somebody please enlighten me, how to update Rawhide after branching
> and not using --nogpgcheck?

Can you expand on the case here?

What should happen is:

* branching
* f30 repos gets the f31 key
* you update your f30-repos
* you jump to rawhide and dnf just imports the key.

How did you get on rawhide?

I'm having a similar problem, but with Silverblue / rawhide.

I installed the system when rawhide was still f30, but now I can't run "rpm-ostree upgrade" anymore, due to this error:

    Enabled rpm-md repositories: rawhide
    Updating metadata for 'rawhide'... done
    error: Failed to download gpg key for repo 'rawhide': Curl error (37): Couldn't read a file:// file for file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-31-x86_64 [Couldn't open file /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-31-x86_64]

So I'm *VERY* sure that I didn't mess with the system myself (since it's a Silverblue installation), but still it's broken due to the missing GPG keys.

Fabio
 
> It seems that Rawhide keys were added in fedora-repos-30-0.4. So this is
> the package which is still "rawhide" package and has "f31" keys. But
> this package was not probably signed, because this directory is empty:
>
> https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.4/data/signed/

Yeah, no longer shipped packages have their signed packages removed
after a while to save space. You just want any newer one there.
https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.5/data/signed/cfc659b9/
for example.

> Installing anything from Rawhide fails, because of missing GPG keys.
>
> So is there a way to get the GPG keys via DNF? Would it be possible to
> sign fedora-repos and fedora-release packages by older key to allow
> smooth updates?

The f30 repos should already include the f31 key.

https://src.fedoraproject.org/rpms/fedora-repos/c/81ae6bcd584818d890f7939658884c5c9ec2e85c?branch=f30

You can also get it from there:
https://src.fedoraproject.org/rpms/fedora-repos/raw/f30/f/RPM-GPG-KEY-fedora-31-primary

kevin

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org