View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0017848 | CentOS-7 | -OTHER | public | 2020-11-12 15:53 | 2020-11-12 16:24 |
Reporter | avij | Assigned To | |||
Priority | normal | Severity | minor | Reproducibility | always |
Status | resolved | Resolution | fixed | ||
Product Version | 7.9.2009 | ||||
Summary | 0017848: base repomd.xml signature outdated | ||||
Description | On a server which has had CentOS 7.8 + CR packages installed, running "yum update" after 7.9 was released yields this output: # yum update Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile epel/x86_64/metalink | 21 kB 00:00:00 * base: ftp.funet.fi * epel: www.nic.funet.fi * extras: mirror.scaleuptech.com * updates: ftp.funet.fi base/7/x86_64/signature | 811 B 00:00:00 Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7 Importing GPG key 0xF4A80EB5: Userid : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>" Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5 Package : centos-release-7-8.2003.0.el7.centos.x86_64 (@b) From : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7 Is this ok [y/N]: y base/7/x86_64/signature | 3.6 kB 00:00:00 !!! http://ftp.funet.fi/pub/mirrors/centos.org/7.9.2009/os/x86_64/repodata/repomd.xml: [Errno -1] repomd.xml signature could not be verified for base Trying other mirror. base/7/x86_64/signature | 811 B 00:00:00 Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7 Importing GPG key 0xF4A80EB5: Userid : "CentOS-7 Key (CentOS 7 Official Signing Key) <security@centos.org>" Fingerprint: 6341 ab27 53d7 8a78 a7c2 7bb1 24c6 a8a7 f4a8 0eb5 Package : centos-release-7-8.2003.0.el7.centos.x86_64 (@b) From : /etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7 Is this ok [y/N]: y .. and it will eventually output: Gpg Keys not imported, cannot verify repomd.xml for repo base Looking at http://mirror.centos.org/centos/7.9.2009/os/x86_64/repodata/ I see: [TXT] repomd.xml 2020-10-29 20:03 3.6K [TXT] repomd.xml.asc 2020-10-26 16:51 811 meaning that repomd.xml was updated at some point, but the corresponding .asc signature wasn't. | ||||
Steps To Reproduce | Set repo_gpgcheck=1 in CentOS-Base.repo's [base] section, run "yum update". | ||||
Tags | No tags attached. | ||||
abrt_hash | |||||
URL | |||||
As expected, this is also the case on at least the Everything.iso image: # mkdir 79 # mount -r -o loop CentOS-7-x86_64-Everything-2009.iso 79 # ls -l 79/repodata/ total 28850 -rw-r--r--. 1 root root 2994847 Oct 29 22:02 2b479c0f3efa73f75b7fb76c82687744275fff78e4a138b5b3efba95f91e099e-primary.xml.gz -rw-r--r--. 1 root root 7474108 Oct 29 22:02 5319616dde574d636861a6e632939f617466a371e59b555cf816cf1f52f3e873-filelists.xml.gz -rw-r--r--. 1 root root 6351994 Oct 29 22:03 6d0c3a488c282fe537794b5946b01e28c7f44db79097bb06826e1c0c88bad5ef-primary.sqlite.bz2 -rw-r--r--. 1 root root 1623852 Oct 29 22:02 845e42288d3b73a069e781b4307caba890fc168327baba20ce2d78a7507eb2af-other.xml.gz -rw-r--r--. 1 root root 156763 Oct 29 22:03 a4e2b46586aa556c3b6f814dad5b16db5a669984d66b68e873586cd7c7253301-c7-x86_64-comps.xml.gz -rw-r--r--. 1 root root 744670 Oct 29 22:03 cca56f3cffa18f1e52302dbfcf2f0250a94c8a37acd8347ed6317cb52c8369dc-c7-x86_64-comps.xml -rw-r--r--. 1 root root 7508416 Oct 29 22:02 d6d94c7d406fe7ad4902a97104b39a0d8299451832a97f31d71653ba982c955b-filelists.sqlite.bz2 -rw-r--r--. 1 root root 2676918 Oct 29 22:02 ecaab5cc3b9c10fefe6be2ecbf6f9fcb437231dac3e82cab8d9d2cf70e99644d-other.sqlite.bz2 -rw-r--r--. 1 root root 3736 Oct 29 22:03 repomd.xml -rw-r--r--. 1 root root 811 Oct 26 18:51 repomd.xml.asc |
|
Thanks for the report Anssi. I've asked Johnny to have a look and fix it | |
New repomd.xml.asc are pushed to the mirrors. | |
Date Modified | Username | Field | Change |
---|---|---|---|
2020-11-12 15:53 | avij | New Issue | |
2020-11-12 16:06 | avij | Note Added: 0037879 | |
2020-11-12 16:13 | arrfab | Status | new => acknowledged |
2020-11-12 16:13 | arrfab | Note Added: 0037880 | |
2020-11-12 16:24 | JohnnyHughes | Status | acknowledged => resolved |
2020-11-12 16:24 | JohnnyHughes | Resolution | open => fixed |
2020-11-12 16:24 | JohnnyHughes | Note Added: 0037882 |