[packman] Observing repomd.xml is unsigned message for packman.inodes.at site for tumbleweed

Wed Dec 6 14:45:25 CET 2017

Hello all:

I'm getting a message that the packman repomd.xml is unsigned for  tumbleweed, is anybody else seeing this?  Is it some local corruption or  is something else going on here?

$ sudo zypper lr -d
Repository priorities are without effect. All enabled repositories share the same priority.

#  | Alias                                  | Name                         | Enabled | GPG Check | Refresh | Priority | Type   | URI                                                                             | Service
---+----------------------------------------+-----------------------------+---------+-----------+---------+----------+--------+--------------------------------------------------------------------------------+--------
 1 | X11:Bumblebee                          | X11:Bumblebee               | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://download.opensuse.org/repositories/X11:/Bumblebee/openSUSE_Tumbleweed/  |

Index of /repositories/X11:/Bumblebee/openSUSE_Tumbleweed
download.opensuse.org
openSUSE download server. This is the download area of the openSUSE distribution and the openSUSE Build Service. If you are searching for a specific package for your ...
 2 | download.nvidia.com-tumbleweed         | nVidia Graphics Drivers     | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | https://download.nvidia.com/opensuse/tumbleweed                                |
 3 | games                                  | games                       | Yes     | (r ) Yes  | No      |   99     | rpm-md | http://download.opensuse.org/repositories/games/openSUSE_Tumbleweed/           |

Index of /repositories/games/openSUSE_Tumbleweed
download.opensuse.org
openSUSE download server. This is the download area of the openSUSE distribution and the openSUSE Build Service. If you are searching for a specific package for your ...
 4 | openSUSE-20171101-0                    | openSUSE-20171101-0          | No      | ----      | ----    |   99     | yast2  |  hd:///?device=/dev/disk/by-id/usb-SanDisk_Ultra_4C530001080721109210-0:0-part2  |
 5 | opensuse-guide.org-openSUSE_Tumbleweed | libdvdcss repository        | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://opensuse-guide.org/repo/openSUSE_Tumbleweed/                            |
 6 | packman.inode.at-openSUSE_Tumbleweed   | Packman Repository          | Yes     | (r ) Yes  | Yes     |   99     | rpm-md | http://packman.inode.at/suse/openSUSE_Tumbleweed/                              |
 7 | repo-debug                             | openSUSE-Tumbleweed-Debug   | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/debug/tumbleweed/repo/oss/                        |

Index of /tumbleweed/repo/oss - openSUSE
download.opensuse.org
openSUSE download server. This is the download area of the openSUSE distribution and the openSUSE Build Service. If you are searching for a specific package for your ...
10 | repo-source                            | openSUSE-Tumbleweed-Source  | No      | ----      | ----    |   99     | NONE   | http://download.opensuse.org/source/tumbleweed/repo/oss/                       |

Index of /repositories/openSUSE:/Factory:/Update/standard
download.opensuse.org
openSUSE download server. This is the download area of the openSUSE distribution and the openSUSE Build Service. If you are searching for a specific package for your ...

$ sudo zypper dup
Warning: You are about to do a distribution upgrade with all enabled  repositories. Make sure these repositories are compatible before you  continue. See 'man zypper' for more information about this command.
Retrieving repository 'Packman Repository' metadata  --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------[\]
Warning: File 'repomd.xml' from repository 'Packman Repository' is unsigned.

    Note: Signing data enables the recipient to verify that no modifications occurred after the data
    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
    and in extreme cases even to a system compromise.

    Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the
    whole repo.

    Warning: We can't verify that no one meddled with this file, so it might not be trustworthy
    anymore! You should not continue unless you know it's safe.

File 'repomd.xml' from repository 'Packman Repository' is unsigned, continue? [yes/no] (no): ^C

Is this due to some config error on my side or is something else triggering this?

With best regards:

Bill