Bug 277117

Summary:	YaST doesn't trust any gpg keys during second stage of installation
Product:	[openSUSE] openSUSE 10.3	Reporter:	Forgotten User DVG0Sx8gYR <forgotten_DVG0Sx8gYR>
Component:	Installation	Assignee:	Ladislav Slezák <lslezak>
Status:	RESOLVED DUPLICATE	QA Contact:	Jiri Srain <jsrain>
Severity:	Normal
Priority:	P5 - None	CC:	holgi
Version:	Alpha 4
Target Milestone:	---
Hardware:	i586
OS:	Other
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---
Attachments:	stage 2 YaST logs YaST2 logs from alpha5

Description Forgotten User DVG0Sx8gYR 2007-05-22 19:30:33 UTC

I've performed a minimal text install of 10.3 alpha 4 as a test, the reason given below. When it gets to the part in stage two where it asks about adding extra repositories, answering yes to the pre-selected factory repository results in YaST complaining that the key used is untrusted and asks if I wish to trust the key, and subsequently, if I wish to import the key.

I would have reported this bug earlier, but my earlier installation source was a custom built DVD using makeSUSEdvd. This bug wasn't present in the previous releases and, due to my making some changes, I was unsure if the failure was a result of changes to makeSUSEdvd, or something wrong in alpha 4.

To check, I built a new copy of the alpha3 DVD and installed with that. The alpha3 install didn't complain about untrusted keys so I then performed the minimal install using the CDs. Using only the CDs resulted in the untrusted key warning, confirming the failure wasn't due to makeSUSEdvd.

I've attached the y2log from the install. For ease of searching, the timestamp in the log where YaST2 shows the warning box is around 2007-05-22 14:45:59

Comment 1 Forgotten User DVG0Sx8gYR 2007-05-22 19:31:30 UTC

Created attachment 141560 [details]
stage 2 YaST logs

Comment 2 Duncan Mac-Vicar 2007-05-25 13:30:59 UTC

I confirm the bug. I confirm _I_ fixed gpg key import just before Alpha4. But I just verified and once the key is imported, it appears in rpm. So indeed the bug about asking the user zillions of time once the system was running (i.e zypper) is fixed.

The problem here seems to be the instsys doen't provide the suse key at the begining. I confirmed it doing rpm -a gpg* before the additional sources are added.

Stefen, is this your area?

Comment 3 Steffen Winterfeldt 2007-05-25 14:59:26 UTC

Whatever you did, I hope you are aware of bug 164001.

Comment 4 Duncan Mac-Vicar 2007-05-25 22:11:49 UTC

Thanks for the enlightenment. I thought the key was in the instsys and was imported to rpm manually.

But YaST uses the ZYpp bindings. With my changes, I broke the yas2-pkg-binding callback signatures (I thought only ZYpp used those).

Then the problem should go away with the patch I posted to yast-devel

http://lists.opensuse.org/yast-devel/2007-05/msg00024.html

Thanks again

Comment 5 Ladislav Slezák 2007-05-29 10:57:35 UTC

The patch has been applied in yast2-pkg-bindings-2.15.20

Comment 6 Duncan Mac-Vicar 2007-05-31 14:15:57 UTC

*** Bug 279464 has been marked as a duplicate of this bug. ***

Comment 7 Forgotten User DVG0Sx8gYR 2007-06-15 00:42:40 UTC

Created attachment 146420 [details]
YaST2 logs from alpha5

These are the YaST2 logs from alpha5 showing the bug is still present.

Comment 8 Forgotten User DVG0Sx8gYR 2007-06-15 00:53:35 UTC

Bug is still present in alpha5. Logs (as attachment #146420 [details]) show keys need importing as they are unknown/untrusted. For ease of searching, the time-stamp of the appearance of the first "import key / skip" dialog is: 2007-06-14 21:16:22

Comment 9 Duncan Mac-Vicar 2007-08-06 11:54:45 UTC

*** Bug 275153 has been marked as a duplicate of this bug. ***

Comment 10 Ladislav Slezák 2007-08-14 07:48:03 UTC

I cannot reproduce it in Beta1 - factory repository is added as disabled by default, enabling and refreshing works correctly.

Comment 11 Holger Sickenberg 2007-08-14 09:11:34 UTC

Have you tried it with the DVD version? It just appears here with the DVD.

Comment 12 Ladislav Slezák 2007-08-15 13:19:03 UTC

No, I have to test DVD installation...

Comment 13 Stanislav Visnovsky 2007-08-17 09:55:59 UTC


*** This bug has been marked as a duplicate of bug 283738 ***