[packman] gpg key expires tomorrow

Marc Schiffbauer marc at links2linux.de
Fri Sep 13 11:15:17 CEST 2024


* Joachim Weber schrieb am 13.09.24 um 10:19 Uhr:
> I think, the file repomd.xml must be signed with the new key.
> 
> I got the following message at zypper refresh:
> Warning: The gpg key signing file 'repomd.xml' has expired

I had a look into this and hopefully fixed it.

What happened?

I updated the main pubkey in the packman root-folder 
(gpg-pubkey-1abd1afb.asc), but I forgot that this file is hardlinked to 
all the fedora and suse repos underneath (repomd.xml.key).

So to not break these hardlinks you must not replace the file in a way 
that creates a new inode, which is exactly what I did. :-(

I recreated all the hardlinks now so all repomd.xml.key files are noew 
updated as well.

~ $ gpg --show-key ./pub/packman/suse/openSUSE_Slowroll/Multimedia/repodata/repomd.xml.key
pub   rsa4096 2006-09-18 [SC] [expires: 2026-09-03]
      F8875B880D518B6B8C530D1345A1D0671ABD1AFB
uid                      PackMan Project (signing key) <packman at links2linux.de>


So it was my fault, sorry for that.

Can anybody confirm that this is fixed now?

(You have to wait until the next repo update / sync)

Cheers
-Marc

> 
> Greetings
> 
> Am 13.09.24 um 10:11 schrieb Javier Llorente:
> > El viernes, 13 de septiembre de 2024 9:24:18 (CEST), Marc Schiffbauer escribió:
> > > * Olaf Hering schrieb am 13.09.24 um 07:36 Uhr:
> > > > Thu, 12 Sep 2024 16:53:42 +0200 Marc Schiffbauer <marc at links2linux.de>:
> > > > > Then the package that contains that key must be updated as well.
> > > > 
> > > > Which package is that?
> > > 
> > > I thought the package is called "packman-keys" or something like that,
> > > no?
> > > 
> > 
> > There is a package called rpmkey-packman.
> > 
> > Greetings,
> > 
> > 
> > _______________________________________________
> > Packman mailing list
> > Packman at links2linux.de
> > https://lists.links2linux.de/cgi-bin/mailman/listinfo/packman
> --
> Joachim Weber, Bonn
> Retired IT-Dinosaurier
> PC Hilfe/Notdienst und Systemprogrammierung (z/OS und Linux)
> 
> private Homepage: https://www.joachimweber.name
> Social-Networks.:
> Mastodon........: https://bonn.social/@trex
> Friendica.......: https://anonsys.net/profile/trex
> Pixelfed........: https://pixelfed.de/T-Rex
> 
> https://www.kuketz-blog.de/das-fediverse-social-media-losgeloest-von-den-fesseln-kommerzieller-interessen/
> 
> 
> _______________________________________________
> Packman mailing list
> Packman at links2linux.de
> https://lists.links2linux.de/cgi-bin/mailman/listinfo/packman

-- 





More information about the Packman mailing list