[Spacewalk-list] Package rpm is not signed

[John Hodrien]

On Fri, 12 Jun 2009, John McNulty wrote:

>
> Hi.  Could use a bit of guidance here please.
>
> We have a channel for some 32-bit systems with a single child channel underneath for misc layered products.  i.e.
>
> rhel-5-2-i386-base
> |__ layered-products
>
> The layered-products channel contains 3 rpms that come from NX Nomachine:
>
> nxclient-3.3.0-6.i386.rpm
> nxnode-3.3.0-17.i386.rpm
> nxserver-3.3.0-22.i386.rpm
>
> And these rpms are not signed.  So when trying to install them from a
> subscribed server yum barfs with:
>
> "Package nxserver-3.3.0-22.i386.rpm is not signed"
>
> Turning off gpgcheck in yum.conf doesn't work and there isn't a repo file
> for this channel either.  Not that I really want to turn off gpgcheck
> because of the extra security it gives.  So what's the proper and correct
> solution to this?

Personally, I'd describe the solution as blissfully simple; sign the rpms.

jh

-- 
"Only wimps use tape backup real men just upload their important stuff on ftp,
  and let the rest of the world mirror it."           -- Linus Torvalds