[Users] New and interesting problem with vzlinux CT

[Denis Silakov]

... resigned package has been sent to repos, should appear on 
repo.virtuozzo.com CDN in 1-2 hours.


On 06/21/2019 01:54 PM, Denis Silakov wrote:
> This package is indeed signed by Vz7 key, not VzLinux7 one. Will fix soon.
>
>
> On 06/21/2019 09:10 AM, Vasily Averin wrote:
>> Dear Jake,
>> thank you for reporting the problem,
>>
>> It looks strange for me too,
>> I do not see any difference between readykernel-scan-0.9-1.vl7.noarch.rpm and any other packages.
>> I can only assume the packet was probably somehow corrupted during transmission
>>
>> Could you please re-check signature of downloaded packet?
>>
>> # rpmkeys -v -K readykernel-scan-0.9-1.vl7.noarch.rpm
>> readykernel-scan-0.9-1.vl7.noarch.rpm:
>>       Header V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>>       Header SHA1 digest: OK (8ec92a2583e1f9113c192862f35cf47409b44fb5)
>>       V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>>       MD5 digest: OK (35e1bda4562bb30c5c6b6f97678440b6)
>> # rpmkeys -v -K readykernel-scan-0.8-1.vl7.noarch.rpm
>> readykernel-scan-0.8-1.vl7.noarch.rpm:
>>       Header V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>>       Header SHA1 digest: OK (c88b5c3ade303cf941f6589b5fba555bbb89fafc)
>>       V4 RSA/SHA1 Signature, key ID 44cdad2a: OK
>>       MD5 digest: OK (8c930bb8a80c80b2135bdabf3cec1d20)
>>
>> Thank you,
>> 	Vasily Averin
>>
>>
>> On 6/20/19 9:10 PM, jjs - mainphrame wrote:
>>> I was doing a yum update on a vzlinux CT, and at the end, I saw this:
>>> Very odd, since this key is exactly the same one as the host, and other vzlinux CTs.
>>>
>>> <... many lines snipped...>
>>> (187/188): xz-5.2.2-1.vl7.x86_64.rpm                         | 228 kB  00:00:01
>>> (188/188): zstd-1.4.0-1.vl7.x86_64.rpm                       | 358 kB  00:00:00
>>> ------------------------------------------------------------------------------------
>>> Total                                                  2.1 MB/s | 104 MB  00:49
>>> warning: /var/cache/yum/x86_64/7/virtuozzolinux-base/packages/readykernel-scan-0.9-1.vl7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 44cdad2a: NOKEY
>>> Retrieving key from file:///etc/pki/rpm-gpg/VZLINUX_GPG_KEY
>>>
>>>
>>> The GPG keys listed for the "VirtuozzoLinux-7 - Base" repository are already installed but they are not correct for this package.
>>> Check that the correct key URLs are configured for this repository.
>>>
>>>
>>>    Failing package is: readykernel-scan-0.9-1.vl7.noarch
>>>    GPG Keys are configured as: file:///etc/pki/rpm-gpg/VZLINUX_GPG_KEY
>>>
>>> CT-1548 #
>>>
>>> Jake
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users at openvz.org
>>> https://lists.openvz.org/mailman/listinfo/users
>>>
>> _______________________________________________
>> Users mailing list
>> Users at openvz.org
>> https://lists.openvz.org/mailman/listinfo/users

-- 
Regards,

Denis Silakov | Sr. Software Architect, Virtuozzo Linux Team Lead
Otradnaya street 2B/9, “Otradnoye” Business Center | Moscow | Russia
Phone: +7 916-222-9437 | dsilakov at virtuozzo.com
Skype: denis.silakov

Virtuozzo.com