[packman] Tumbleweed GPG key expiring 03 Sep 2026

[Manfred Hollstein]

Moin,

On Tue, 01 Sep 2026, 13:55:21 +0200, Manfred Hollstein wrote:
> Hi Marc,
> 
> On Tue, 01 Sep 2026, 13:38:46 +0200, Marc Schiffbauer wrote:
> > * Manfred Hollstein schrieb am 01.09.26 um 08:51 Uhr:
> > > On Sun, 23 Aug 2026, 01:05:43 +0200, Marc Schiffbauer wrote:
> > > > Thanks! I will extend the key expiry date soon
> > > 
> > > the key will still expire in two days. Can you please extend them before
> > > then?
> > 
> > I already did a couple of days ago (on Aug 24).
> > 
> > And I can see the new key on all mirrors as well. What else is required?  
> > Did I miss something?
> 
> it's probably as Bernhard just wrote that we need a new publish event to
> have them sync'ed to the mirrors. I still don't see them on ftp.uni-erlangen.de::packman/suse
> 
> Anyway, thanks for extending them and for your work through all the
> years!

new packages have been published last night (ffmpeg-8 and libheif, at
least), still no change:

  sudo zypper ref -f
  ...
  Looking for gpg keys in repository packman-multimedia.local.
    gpgkey=http://www/repos/suse/packman/openSUSE_Tumbleweed/Multimedia/repodata/repomd.xml.key
  The gpg key signing file 'repomd.xml' will expire in 1 day.
    Repository:       packman-multimedia.local
    Key Fingerprint:  F887 5B88 0D51 8B6B 8C53 0D13 45A1 D067 1ABD 1AFB
    Key Name:         PackMan Project (signing key) <packman at links2linux.de>
    Key Algorithm:    RSA 4096
    Key Created:      Tue Sep  3 22:21:04 2024
    Key Expires:      Thu Sep  3 22:20:39 2026 (expires in 1 day)
    Rpm Name:         gpg-pubkey-1abd1afb-66d76fb0
  ...
  Looking for gpg keys in repository packman.local.
    gpgkey=http://www/repos/suse/packman/openSUSE_Tumbleweed/Essentials/repodata/repomd.xml.key
  The gpg key signing file 'repomd.xml' will expire in 1 day.
    Repository:       packman.local
    Key Fingerprint:  F887 5B88 0D51 8B6B 8C53 0D13 45A1 D067 1ABD 1AFB
    Key Name:         PackMan Project (signing key) <packman at links2linux.de>
    Key Algorithm:    RSA 4096
    Key Created:      Tue Sep  3 22:21:04 2024
    Key Expires:      Thu Sep  3 22:20:39 2026 (expires in 1 day)
    Rpm Name:         gpg-pubkey-1abd1afb-66d76fb0

Both repositories are mirrors synced via rsync from
ftp.uni-erlangen.de::packman/suse this morning. I also have the probably
not so well known repositories directly via pmbs.links2linux.de and they
don't show this problem; fwiw, I extended the keys for them on
pmbs.links2linux.de myself last week using

  osc -A pmbs signkey --extend Essentials
  osc -A pmbs signkey --extend Multimedia

Don't know how to deal with the keys on the mirrors!

Cheers.

l8er
manfred
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 870 bytes
Desc: not available
URL: <http://lists.links2linux.de/pipermail/packman/attachments/20260902/4b0d6a21/attachment.sig>