On 3/11/19 4:31 AM, Vít Ondruch wrote:
Hi,
Can somebody please enlighten me, how to update Rawhide after branching
and not using --nogpgcheck?
Can you expand on the case here?
What should happen is:
* branching
* f30 repos gets the f31 key
* you update your f30-repos
* you jump to rawhide and dnf just imports the key.
How did you get on rawhide?
It seems that Rawhide keys were added in fedora-repos-30-0.4. So this
is
the package which is still "rawhide" package and has "f31" keys. But
this package was not probably signed, because this directory is empty:
https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.4/data/signed/
Yeah, no longer shipped packages have their signed packages removed
after a while to save space. You just want any newer one there.
https://kojipkgs.fedoraproject.org/packages/fedora-repos/30/0.5/data/sign...
for example.
Installing anything from Rawhide fails, because of missing GPG keys.
So is there a way to get the GPG keys via DNF? Would it be possible to
sign fedora-repos and fedora-release packages by older key to allow
smooth updates?
The f30 repos should already include the f31 key.
https://src.fedoraproject.org/rpms/fedora-repos/c/81ae6bcd584818d890f7939...
You can also get it from there:
https://src.fedoraproject.org/rpms/fedora-repos/raw/f30/f/RPM-GPG-KEY-fed...
kevin