You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@couchdb.apache.org by GitBox <gi...@apache.org> on 2023/01/11 12:15:29 UTC
[GitHub] [couchdb] guillermo-jano opened a new issue, #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
guillermo-jano opened a new issue, #4368:
URL: https://github.com/apache/couchdb/issues/4368
Attempting to install the `couchdb` package on an EL 7 system with the [suggested repository configuration](https://couchdb.apache.org/repo/couchdb.repo) does not work because the package is not signed:
Package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
Of course this can be avoided by disabling GPG checks in repo configuration. But anyway I guess this should be addressed. I could confirm the previous RPM was signed whereas the latest one is not:
```
$ rpm --checksig https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.0-1.el7.x86_64.rpm https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.1-1.el7.x86_64.rpm
https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.0-1.el7.x86_64.rpm: rsa sha1 (md5) pgp md5 OK
https://apache.jfrog.io/artifactory/couchdb-rpm/el7/x86_64/couchdb-3.3.1-1.el7.x86_64.rpm: sha1 md5 OK
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [couchdb] guillermo-jano commented on issue #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
Posted by GitBox <gi...@apache.org>.
guillermo-jano commented on issue #4368:
URL: https://github.com/apache/couchdb/issues/4368#issuecomment-1379020145
Yes both EL 7 and 8 3.3.1-1 packages seem to be signed now. Thanks for fixing.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [couchdb] nickva commented on issue #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
Posted by GitBox <gi...@apache.org>.
nickva commented on issue #4368:
URL: https://github.com/apache/couchdb/issues/4368#issuecomment-1378974246
Thanks for your report @guillermo-jano
The rpms should be fixed. A command filed when signing them and I didn't noticed and uploaded them unsigned. Give it another try when you get a chance.
I verified centos 7 upgrade and centos 8 (rocky 8) install:
```
couchdb 14/14
Resolving Dependencies
--> Running transaction check
---> Package couchdb.x86_64 0:3.2.1-2.el7 will be updated
---> Package couchdb.x86_64 0:3.3.1-1.el7 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================================================================================
Package Arch Version Repository Size
================================================================================================================================================
Updating:
couchdb x86_64 3.3.1-1.el7 couchdb 31 M
Transaction Summary
================================================================================================================================================
Upgrade 1 Package
Total download size: 31 M
Is this ok [y/d/N]: y
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
couchdb-3.3.1-1.el7.x86_64.rpm | 31 MB 00:00:06
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : couchdb-3.3.1-1.el7.x86_64 1/2
warning: /opt/couchdb/etc/local.ini created as /opt/couchdb/etc/local.ini.rpmnew
Generating random cookie value.
Cleanup : couchdb-3.2.1-2.el7.x86_64 2/2
Verifying : couchdb-3.3.1-1.el7.x86_64 1/2
Verifying : couchdb-3.2.1-2.el7.x86_64 2/2
Updated:
couchdb.x86_64 0:3.3.1-1.el7
Complete!
```
```
yum install couchdb
Last metadata expiration check: 0:02:16 ago on Wed Jan 11 10:35:31 2023.
Dependencies resolved.
================================================================================================================================================
Package Architecture Version Repository Size
================================================================================================================================================
Installing:
couchdb x86_64 3.3.1-1.el8 couchdb 37 M
Transaction Summary
================================================================================================================================================
Install 1 Package
Total download size: 37 M
Installed size: 101 M
Is this ok [y/N]: y
Downloading Packages:
couchdb-3.3.1-1.el8.x86_64.rpm 5.5 MB/s | 37 MB 00:06
------------------------------------------------------------------------------------------------------------------------------------------------
Total 5.5 MB/s | 37 MB 00:06
couchdb 33 kB/s | 3.8 kB 00:00
Importing GPG key 0x7A00258D:
Userid : "The Apache Software Foundation (Package repository signing key) <ro...@apache.org>"
Fingerprint: 390E F70B B1EA 12B2 7739 6295 0EE6 2FB3 7A00 258D
From : https://couchdb.apache.org/repo/keys.asc
Is this ok [y/N]: y
Key imported successfully
couchdb 44 kB/s | 3.9 kB 00:00
Importing GPG key 0x9657A78E:
Userid : "Nicolae Vatamaniuc <va...@apache.org>"
Fingerprint: 0BD7 A984 99C4 AB41 C910 EE65 FC04 DFBC 9657 A78E
From : https://couchdb.apache.org/repo/rpm-package-key.asc
Is this ok [y/N]: y
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Running scriptlet: couchdb-3.3.1-1.el8.x86_64 1/1
Installing : couchdb-3.3.1-1.el8.x86_64 1/1
Running scriptlet: couchdb-3.3.1-1.el8.x86_64 1/1
Generating random cookie value.
Verifying : couchdb-3.3.1-1.el8.x86_64 1/1
Installed:
couchdb-3.3.1-1.el8.x86_64
Complete!
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [couchdb] nickva closed issue #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
Posted by GitBox <gi...@apache.org>.
nickva closed issue #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
URL: https://github.com/apache/couchdb/issues/4368
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [couchdb] guillermo-jano commented on issue #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
Posted by GitBox <gi...@apache.org>.
guillermo-jano commented on issue #4368:
URL: https://github.com/apache/couchdb/issues/4368#issuecomment-1378674160
EL 8 package exhibits the same problem:
```
$ rpm --checksig https://apache.jfrog.io/artifactory/couchdb-rpm/el8/x86_64/couchdb-3.3.1-1.el8.x86_64.rpm https://apache.jfrog.io/artifactory/couchdb-rpm/el8/x86_64/couchdb-3.3.0-1.el8.x86_64.rpm
https://apache.jfrog.io/artifactory/couchdb-rpm/el8/x86_64/couchdb-3.3.1-1.el8.x86_64.rpm: digests OK
https://apache.jfrog.io/artifactory/couchdb-rpm/el8/x86_64/couchdb-3.3.0-1.el8.x86_64.rpm: digests signatures OK
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [couchdb] janl commented on issue #4368: EL 7 RPM package couchdb-3.3.1-1.el7.x86_64.rpm is not signed
Posted by GitBox <gi...@apache.org>.
janl commented on issue #4368:
URL: https://github.com/apache/couchdb/issues/4368#issuecomment-1378801972
thanks, we’re looking into it!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@couchdb.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org