[Spacewalk-list] CentOS Updates Requiring a Red Hat GPG Key?

[Wojtak, Greg]

Ugh - so it does appear that's what's happening.

I'm surprised I haven't run into this before now.

Anyone want to place any bets as to how different the rpm's are for each distribution?  If it's just the key signature that's different, that's fine.  I can just add the Red Hat key to the rpm keyring and go on my way.  I just worry if there might be some sort of problems further along the line if there are slight mismatches. :/

Greg

-----Original Message-----
From: spacewalk-list-bounces at redhat.com [mailto:spacewalk-list-bounces at redhat.com] On Behalf Of Joshua Roys
Sent: Thursday, December 10, 2009 2:48 PM
To: spacewalk-list at redhat.com
Subject: Re: [Spacewalk-list] CentOS Updates Requiring a Red Hat GPG Key?

On 12/10/2009 01:22 PM, Wojtak, Greg wrote:
> I've got a setup wherein I have two RHEL 5 channels (i386 and x86_64) 
> as well as two CentOS 5 channels (also i386 and x86_64). After 
> updating the channels with the latest rpm's from the respective 
> channels, I am getting an error on the CentOS servers I am updating 
> looking for what appears to be the Red Hat GPG key. What gives? I've 
> verified that I didn't accidentally push packages from RHN into the 
> CentOS channels. It seems to do this for just about every rpm it tries 
> to update. Anyone have any ideas why this might happen? My first 
> thought was that the rpm's have the same names so spacewalk didn't 
> differentiate between the RHEL and CentOS packages, but I'd like to 
> give spacewalk a little more credit than to simply check file names. Anyone have any ideas?
>
> Spacewalk 0.6 running on CentOS 5.3 server, client I am testing with 
> is a CentOS 5.3 server that I am trying to update to 5.4 plus most 
> recent updates as of yesterday.
>
> Thanks!
>
> Greg
>

Go to channels and choose a centos channel.  Choose any package.  Grab the "File System Path."

# ls -l /var/satellite/$path
# rpm -K /var/satellite/$path
# rpm -qpi /var/satellite/$path

and look at the output of especially the third command...  what Key ID is it signed by?

Here's something to do that, kind of:
# rpm -q gpg-pubkey | grep $(rpm -qpi /var/satellite/$path | egrep -o 'Key ID .*$' | cut -d ' ' -f 3 | cut -c9-) | xargs rpm -qi

Josh