<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> I want to be able to take a host that is alredy registered to Spacewalk and add a new software channel to it and then have the related GPG key automatically installed on the host. I’d really like this to NOT involve any human interaction at all, but it always seems to involve a human having to add the GPG key to the host manually somehow. <o:p></o:p> <o:p> </o:p> Here’s what I’m currently trying:<o:p></o:p> <o:p> </o:p> I’ve got an (unsigned) RPM which drops various GPG keys into /etc/pki/rpm-gpg on my hosts. (This seemed the simplest way to be able to add/update keys in the future on my hosts, but I’m not glued to this idea.) Next, I configured my Spacewalk software channels to use the GPG keys from that RPM, setting location as ‘file:///etc/pki/rpm-gpg/blah….’. Once I enable this software channel for a host, I would expect that when I push packages to my host from Spacewalk, the needed channel GPG key would automatically be added to the RPM keyring on the host. That doesn’t seem to be happening. After scheduling some package to be installed on the host, I run ‘rhn_check –vv’ (on the host) and I see the following error:<o:p></o:p> <o:p> </o:p> D: keyurl = <a href="file:///\\etc\pki\rpm-gpg\%3cRPM"> file:///etc/pki/rpm-gpg/<RPM</a> KEY FILE>, isn’t a known Red Hat key, so this will not be imported. Manually import this key or set gpgcheck=0 in the RHN yum plugin configuration file<o:p></o:p> <o:p> </o:p> (This tells me that it is finding the correct GPG file as configured in the software channel, but it just doesn’t like my key because I’m not Red Hat.)<o:p></o:p> <o:p> </o:p> I don’t want to re configure my hosts to disable gpgcheck, and I can’t find any way through Spacewalk to do the equivalent of ‘yum –y’ (to auto-accept the key when prompted), so unless I’m really doing something wrong here, it doesn’t look like I can simply add a host to a software channel and start pushing packages until a human goes to the host and either runs ‘rpm –import <gpg file>’ or some variation on ‘yum –y install <some package from target channel’>.<o:p></o:p> <o:p> </o:p> Help?<o:p></o:p> <o:p> </o:p> --<o:p></o:p> Chris Snyder<o:p></o:p> SRA Senior Linux Geek Energystar Network O+M Team ESTAR Issues: <a href="https://estar18.energystar.gov/">https://estar18.energystar.gov/</a><o:p></o:p> <o:p> </o:p> </div> </body> </html>