<div dir="ltr">You could always use SSM to execute remote commands on your hosts, (consisting of a curl/wget to download key to their local filesystems and import the keys...) Then you should be able to upgrade the packages.</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Feb 12, 2016 at 12:37 PM, Matt Bayliss <span dir="ltr"><<a href="mailto:aarrgghh765@gmail.com" target="_blank">aarrgghh765@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div><div>OK, so I pushed out the package <code>rhncfg-actions so I could run remote commands. I figured I could set up a configuration channel to push out the gpg key and then use a remote command to install it. I found that I could not use configuration channels or use remote commands until I logged onto each server and enabled the functionality with 'rhn-actions-control --enable-all' (why is this not on by default?!).<br><br></code></div><code>Anyway, I've finally jumped through enough hoops to run the 'gpg --import RPM-GPG-KEY-spacewalk-2015' command, p</code><code>roblem is though is that the 2.4-client packages still won't install and I'm getting the same "</code>Error while executing packages action: Public key for rhn-setup-2.4.11-1.el6.noarch.rpm is not installed [[6]]"<br></div><br></div>GPG keys on my system are:<br><span style="font-family:monospace,monospace"># rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n'</span><br><br><span style="font-family:monospace,monospace">gpg-pubkey-c105b9de-4e0fd3a3 --> gpg(CentOS-6 Key (CentOS 6 Official Signing Key) <<a href="mailto:centos-6-key@centos.org" target="_blank">centos-6-key@centos.org</a>>)<br>gpg-pubkey-863a853d-4f55f54d --> gpg(Spacewalk <<a href="mailto:spacewalk-devel@redhat.com" target="_blank">spacewalk-devel@redhat.com</a>>)<br>gpg-pubkey-0608b895-4bd22942 --> gpg(EPEL (6) <<a href="mailto:epel@fedoraproject.org" target="_blank">epel@fedoraproject.org</a>>)</span><br><br></div>It seems that the key has not been imported properly. I'll check the file I pushed out again.<br><br><span style="font-family:monospace,monospace"># gpg --with-fingerprint RPM-GPG-KEY-spacewalk-2015<br>pub 1024D/B8002DE1 2015-04-17 Spacewalk <<a href="mailto:spacewalk-devel@redhat.com" target="_blank">spacewalk-devel@redhat.com</a>><br> Key fingerprint = A5FC 508C DD3C C46D 3C3B 4612 DCC9 81CD B800 2DE1</span><br><br></div>OK, so that looks right,. I'll try and import it again..<br><br><span style="font-family:monospace,monospace"># gpg --import RPM-GPG-KEY-spacewalk-2015<br>gpg: key B8002DE1: "Spacewalk <<a href="mailto:spacewalk-devel@redhat.com" target="_blank">spacewalk-devel@redhat.com</a>>" not changed<br>gpg: Total number processed: 1<br>gpg: unchanged: 1</span><br><br></div>It's processed and unchanged but it's still not in my list:<br><br><span style="font-family:monospace,monospace"># rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n'<br>gpg-pubkey-c105b9de-4e0fd3a3 --> gpg(CentOS-6 Key (CentOS 6 Official Signing Key) <<a href="mailto:centos-6-key@centos.org" target="_blank">centos-6-key@centos.org</a>>)<br>gpg-pubkey-863a853d-4f55f54d --> gpg(Spacewalk <<a href="mailto:spacewalk-devel@redhat.com" target="_blank">spacewalk-devel@redhat.com</a>>)<br>gpg-pubkey-0608b895-4bd22942 --> gpg(EPEL (6) <<a href="mailto:epel@fedoraproject.org" target="_blank">epel@fedoraproject.org</a>>)</span><br><br></div>wtf? Why won't the key import/update?<br></div><div class="gmail_extra"><br><div class="gmail_quote"><div><div class="h5">On 12 February 2016 at 15:18, Dimitri Yioulos <span dir="ltr"><<a href="mailto:dyioulos@netatlantic.com" target="_blank">dyioulos@netatlantic.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"> <div link="#0563C1" vlink="#954F72" lang="EN-US"> <div> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Matt,<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">I think you can use Manage|Provisioning|Run remote commands against a group of servers. If you use Ansible in your environment, I have a simple playbooks to accomplish installing the public key which I’m happy to share with you.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Dimitri<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a> [mailto:<a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a>] <b>On Behalf Of </b>Matt Bayliss<br> <b>Sent:</b> Friday, February 12, 2016 9:41 AM<br> <b>To:</b> <a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a><br> <b>Subject:</b> [Spacewalk-list] Upgrading clients to 2.4<u></u><u></u></span></p><div><div> <p class="MsoNormal"><u></u> <u></u></p> <div> <p class="MsoNormal" style="margin-bottom:12.0pt">I'm trying to bring a bunch of Spacewalk clients which are currently using the 2.2-client version, up to 2.4-client.<u></u><u></u></p> <div> <p class="MsoNormal" style="margin-bottom:12.0pt">I created a new channel & repo and used the SSM to transfer systems over to the new channel. The updates then appeaar as available and I scheduled the upgrade.<u></u><u></u></p> </div> <div> <p class="MsoNormal" style="margin-bottom:12.0pt">The problem is that I receive the error "Error while executing packages action: Public key for rhn-setup-2.4.11-1.el6.noarch.rpm is not installed [[6]]" as the 2015 key is not installed by my clients.<u></u><u></u></p> </div> <div> <p class="MsoNormal" style="margin-bottom:12.0pt">What's the best way to fix this using Spacewalk, I'd rather avoid having to import the key manually on each system.<u></u><u></u></p> </div> <div> <p class="MsoNormal" style="margin-bottom:12.0pt">Thanks,<u></u><u></u></p> </div> <div> <p class="MsoNormal">Matt<u></u><u></u></p> </div> </div> </div></div></div> </div> <br></div></div>_______________________________________________<br> Spacewalk-list mailing list<br> <a href="mailto:Spacewalk-list@redhat.com" target="_blank">Spacewalk-list@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br></blockquote></div><br></div> <br>_______________________________________________<br> Spacewalk-list mailing list<br> <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br></blockquote></div><br></div>