Re: [suse-sles-e] Problem add yum repository in post-install of SLES10 SP1

From: Dag Wieers (dag_at_wieers.com)
Date: Mon Dec 10 2007 - 14:28:36 CET


Date: Mon, 10 Dec 2007 14:28:36 +0100 (CET)
From: Dag Wieers <dag@wieers.com>
Message-ID: <alpine.LRH.0.99999.0712101420200.29483@horsea.3ti.be>
Subject: Re: [suse-sles-e] Problem add yum repository in post-install of SLES10 SP1

On Fri, 7 Dec 2007, Marcus Meissner wrote:

> > In YaST apparently I still get a 'Signature Check Failed' warning that I
> > would like to disable. 'rug set-prefs security-level checksum' does not
> > seem to cut it though :-/ How do I either disable that message in advance,
> > or create a signature that it accepts ?
>
> the rug set-prefs should work.

As I said, it does not work for yast itself but it shuts up rug when
registering the repository. It would be useful if there was a way to shut
yast up when the repository is not signed.

(I would prefer an unsigned repository over a signed in my particular case)

> However you can also sign it, please see
> http://en.opensuse.org/Secure_Installation_Sources

I tried that and while the documentation may be sufficient for an
experienced user I had some troubles understanding what key it used.

Could you indicate in that document that you can use a different key using
--default-key '<name>' and replace a key by default using --yes ?

That would have saved me 20 minutes understanding that it takes by default
the key that is first in your keyring (which is a SuSE build key which
expires in 2008). Also adding the proper commands to create a new key may
be useful in that document as well.

But again thanks for showing me the path to success :) I am a few steps
closer to where I want to be. (Now doing the same for NLD9 will be a real
challenge :-/)

PS I am adding repository signing support in mrepo. YOU metadata
generation in mrepo is planned as well (for NLD9) but much harder to do as
NLD9 comes with a binary that I cannot rebuild on SLES10. Any pointers on
how to generate a YOU repository on SLES10 would be thankfully accepted
too :)

-- 
--   dag wieers,  dag@wieers.com,  http://dag.wieers.com/   --
[Any errors in spelling, tact or fact are transmission errors]
---------------------------------------------------------------------
To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
For additional commands, e-mail: suse-sles-e-help@suse.com


This archive was generated by hypermail 2.1.7 : Mon Dec 10 2007 - 03:29:00 CET