[packman] Error when importing Packman repomd.xml.key

[Dominik Heidler]

Hi,

this issue is still present.

As of now it is not possible to import the PackMan Repo gpg key on tumbleweed.

rpm --import https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key
error: https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Tumbleweed/repodata/repomd.xml.key: key 1 import failed.

At the same time importing keys eg. from my obs home project works fine:
rpm --import https://download.opensuse.org/repositories/home:/dheidler/openSUSE_Tumbleweed/repodata/repomd.xml.key

So I guess there is the need to update the packman repo key.

Regards,
Dominik

Am 19.10.21 um 18:05 schrieb S.:
> Hi everyone, an update to this...
> 
> I found that this is the cause of the error thanks to the updated version of rpm in the SLE Updates repo:
> - https://1password.community/discussion/123891/rpm-gpg-key-is-not-accepted-by-new-rpm-versions
> - https://github.com/rpm-software-management/rpm/commit/f22499a05d0a01e35dd10d7644f8d74391ba4222
> - https://itectec.com/unixlinux/yum-in-amazon-linux-2-still-asks-for-gpg-key-even-after-rpm-import-when-adding-kubernetes-repo/
> 
> They talk there in those threads about updating the key to remove the critical bit but keeping the same key, but that's all over my head. As it is, an updated Leap 15.3 system can not import the Packman key anymore without downgrading rpm to the initial Leap 15.3 release version.
> 
> 
> On 10/17/21 19:19, S. wrote:
>> Hi there, I'm struggling with a really weird error on a spin that I generate based on openSUSE Leap 15.3 + Packman, built with Kiwi. Both during the Kiwi image customization script and in the generated system, it is unable to import the Packman repomd.xml.key (https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Leap_15.3/repodata/repomd.xml.key) It just gives me a nondescript error:
>>
>>> :~> rpm --import /etc/zypp/repos.d/repomd.xml.key
>>>> error: /etc/zypp/repos.d/repomd.xml.key: key 1 import failed.
>>
>> There are several keys for other 3rd party and official openSUSE repos that are also imported in the exact same way, and they work fine. Also, if I add the Packman repo via YaST Repositories and accept the automatic prompt to import the key it also works fine.
>>
>> This exact same Kiwi recipe with the same keys worked fine back in June when I release my last set of ISOs. So all I can figure is there was an update to GPG or RPM or something that has broken this. But I'm stumped. Any ideas?
>>
>> Thanks a lot!
> 
> _______________________________________________
> Packman mailing list
> Packman at links2linux.de
> https://lists.links2linux.de/cgi-bin/mailman/listinfo/packman

-- 
Dominik Heidler
Senior Software Engineer

SUSE Software Solutions Germany GmbH
Frankenstraße 146
90461 Nürnberg
Germany

GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman
(HRB 36809, AG Nürnberg)