Hi,
I suspect it's a chicken and egg issue:
* Look at /etc/yum.repos.d/fedora-rawhide.repo
* You can see the line:
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-$releasever-$basearch
* But "$releasever" is determined by the version of "fedora-release" package.
* So dnf, tries to (re)import f30 gpg key.
* The import is OK, but doesn't help, because packages are signed with f31 key.
I cannot test it now, since I already did the "manual upgrade" workaround
yesterday.
Anyone that want to check it:
* Temporarily edit "gpgkey" and modify "$releasever" to "31"
* Use dnf to upgrade and check if it imports the new GPG key and work
correctly.
Bye,
--
Oron Peled Voice: +972-4-8228492
"If you take a class in large-scale robotics, can you end up in a
situation where the homework eats your dog?"
-- Jean-Baptiste Queru
On Monday, 11 March 2019 15:05:17 IST Steven A. Falco wrote:
> On 3/11/19 7:31 AM, Vít Ondruch wrote:
> > Hi,
> >
> > Can somebody please enlighten me, how to update Rawhide after branching
> > and not using --nogpgcheck?
> >
> > It seems that Rawhide keys were added in fedora-repos-30-0.4. So this is
> > the package which is still "rawhide" package and has "f31" keys. But
> > this package was not probably signed, because this directory is empty:
> >
> > https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.4/data/signed/
> >
> > Installing anything from Rawhide fails, because of missing GPG keys.
> >
> > So is there a way to get the GPG keys via DNF? Would it be possible to
> > sign fedora-repos and fedora-release packages by older key to allow
> > smooth updates?
>
> I was able to update by first manually updating the keys via:
>
> cd /var/cache/dnf/rawhide-2d95c80a1fa0a67d/packages
> rpm -Uvh \
> fedora-gpg-keys-31-0.1.noarch.rpm \
> fedora-release-31-0.1.noarch.rpm \
> fedora-release-common-31-0.1.noarch.rpm \
> fedora-repos-31-0.1.noarch.rpm \
> fedora-repos-rawhide-31-0.1.noarch.rpm
>
> Then I was able to do a normal "dnf update --refresh".
>
> Note that your package directory location may be slightly different. I don't
> know if the "rawhide-2d95c80a1fa0a67d" part is consistent or just where mine
> happened to be. But if you search for one of the "keys" packages inside the
> dnf cache area you should be able to find it.
>
> Steve
> _______________________________________________
> devel mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[email protected]
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
