[Users] New and interesting problem with vzlinux CT

[Denis Silakov]

This package is indeed signed by Vz7 key, not VzLinux7 one. Will fix soon.


On 06/21/2019 09:10 AM, Vasily Averin wrote:
> Dear Jake,
> thank you for reporting the problem,
>
> It looks strange for me too,
> I do not see any difference between readykernel-scan-0.9-1.vl7.noarch.rpm and any other packages.
> I can only assume the packet was probably somehow corrupted during transmission
>
> Could you please re-check signature of downloaded packet?
>
> # rpmkeys -v -K readykernel-scan-0.9-1.vl7.noarch.rpm
> readykernel-scan-0.9-1.vl7.noarch.rpm:
>      Header V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>      Header SHA1 digest: OK (8ec92a2583e1f9113c192862f35cf47409b44fb5)
>      V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>      MD5 digest: OK (35e1bda4562bb30c5c6b6f97678440b6)
> # rpmkeys -v -K readykernel-scan-0.8-1.vl7.noarch.rpm
> readykernel-scan-0.8-1.vl7.noarch.rpm:
>      Header V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>      Header SHA1 digest: OK (c88b5c3ade303cf941f6589b5fba555bbb89fafc)
>      V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>      MD5 digest: OK (8c930bb8a80c80b2135bdabf3cec1d20)
>
> Thank you,
> 	Vasily Averin
>
>
> On 6/20/19 9:10 PM, jjs - mainphrame wrote:
>> I was doing a yum update on a vzlinux CT, and at the end, I saw this:
>> Very odd, since this key is exactly the same one as the host, and other vzlinux CTs.
>>
>> <... many lines snipped...>
>> (187/188): xz-5.2.2-1.vl7.x86_64.rpm                         | 228 kB  00:00:01
>> (188/188): zstd-1.4.0-1.vl7.x86_64.rpm                       | 358 kB  00:00:00
>> ------------------------------------------------------------------------------------
>> Total                                                  2.1 MB/s | 104 MB  00:49
>> warning: /var/cache/yum/x86_64/7/virtuozzolinux-base/packages/readykernel-scan-0.9-1.vl7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 44cdad2a: NOKEY
>> Retrieving key from file:///etc/pki/rpm-gpg/VZLINUX_GPG_KEY
>>
>>
>> The GPG keys listed for the "VirtuozzoLinux-7 - Base" repository are already installed but they are not correct for this package.
>> Check that the correct key URLs are configured for this repository.
>>
>>
>>   Failing package is: readykernel-scan-0.9-1.vl7.noarch
>>   GPG Keys are configured as: file:///etc/pki/rpm-gpg/VZLINUX_GPG_KEY
>>
>> CT-1548 #
>>
>> Jake
>>
>> _______________________________________________
>> Users mailing list
>> Users at openvz.org
>> https://lists.openvz.org/mailman/listinfo/users
>>
> _______________________________________________
> Users mailing list
> Users at openvz.org
> https://lists.openvz.org/mailman/listinfo/users

-- 
Regards,

Denis Silakov | Sr. Software Architect, Virtuozzo Linux Team Lead
Otradnaya street 2B/9, “Otradnoye” Business Center | Moscow | Russia
Phone: +7 916-222-9437 | dsilakov at virtuozzo.com
Skype: denis.silakov

Virtuozzo.com