[PATCH v3 0/7] Support signed RPM package feeds

[PATCH v3 0/7] Support signed RPM package feeds

[Markus Lehtonen]

Changes since v2:
- bug id in the commit message of the last patch corrected

The following changes since commit df7f5221a56118da7654476f072c37ae1e75dc50:

  libinput: Upgrade 1.7.3 -> 1.8.1 (2017-08-09 09:25:47 +0100)

are available in the git repository at:

  git://git.openembedded.org/openembedded-core-contrib marquiz/fixes-11209
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=marquiz/fixes-11209

Markus Lehtonen (7):
  lib/oe/package_manager: re-implement rpm feed signing
  dnf: rrecommend gnupg
  sign_package_feed.bbclass: install signing key into rootfs
  package_manager.py: enable dnf's repo_gpgcheck if feed signing is
    enabled
  oeqa: fix dnf tests
  oeqa: fix temp file handling in dnf package feed test
  dnf: expand dnf selftest to test signed package feeds

 meta-selftest/files/signing/key.passphrase         |  1 +
 .../cases/{dnf-runtime.py => dnf_runtime.py}       | 12 +++++++----
 meta/classes/sign_package_feed.bbclass             |  3 +++
 meta/lib/oe/package_manager.py                     | 24 +++++++++++++++++++---
 meta/lib/oeqa/selftest/cases/runtime_test.py       | 14 +++++++++++--
 meta/recipes-devtools/dnf/dnf_2.5.1.bb             |  2 ++
 6 files changed, 47 insertions(+), 9 deletions(-)
 create mode 100644 meta-selftest/files/signing/key.passphrase
 rename meta-selftest/lib/oeqa/runtime/cases/{dnf-runtime.py => dnf_runtime.py} (80%)

-- 
2.12.3

Re: [PATCH v3 0/7] Support signed RPM package feeds

[Richard Purdie]

On Fri, 2017-08-11 at 18:43 +0300, Markus Lehtonen wrote:
> Changes since v2:
> - bug id in the commit message of the last patch corrected
> 
> The following changes since commit
> df7f5221a56118da7654476f072c37ae1e75dc50:
> 
>   libinput: Upgrade 1.7.3 -> 1.8.1 (2017-08-09 09:25:47 +0100)
> 
> are available in the git repository at:
> 
>   git://git.openembedded.org/openembedded-core-contrib marquiz/fixes-
> 11209
>   http://cgit.openembedded.org/openembedded-core-contrib/log/?h=marqu
> iz/fixes-11209
> 
> Markus Lehtonen (7):
>   lib/oe/package_manager: re-implement rpm feed signing
>   dnf: rrecommend gnupg
>   sign_package_feed.bbclass: install signing key into rootfs
>   package_manager.py: enable dnf's repo_gpgcheck if feed signing is
>     enabled
>   oeqa: fix dnf tests
>   oeqa: fix temp file handling in dnf package feed test
>   dnf: expand dnf selftest to test signed package feeds

This seemed to cause a failure in oe-selftest:

https://autobuilder.yocto.io/builders/nightly-oe-selftest/builds/446/steps/Running%20oe-selftest/logs/stdio

NOTE: recipe core-image-full-cmdline-1.0-r0: task do_rootfs: Started
ERROR: core-image-full-cmdline-1.0-r0 do_rootfs: Could not invoke dnf. Command '/home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/recipe-sysroot-native/usr/bin/dnf -y -c /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/rootfs/etc/dnf/dnf.conf --setopt=reposdir=/home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/rootfs/etc/yum.repos.d --repofrompath=oe-repo,/home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/oe-rootfs-repo --installroot=/home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/rootfs --setopt=logdir=/home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/temp --nogpgcheck install packagegroup-core-ssh-openssh signing-keys-packagefeed packagegroup-core-boot packagegroup-core-full-cmdline psplash rpm run-postinsts dnf locale-base-en-us locale-base-en-gb' returned 1:
Unable to detect release version (use '--releasever' to specify release version)
Added oe-repo repo from /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-oe-selftest/build/build/tmp/work/qemux86_64-poky-linux/core-image-full-cmdline/1.0-r0/oe-rootfs-repo
Last metadata expiration check: 0:00:01 ago on Mon 14 Aug 2017 01:38:25 AM UTC.
No package signing-keys-packagefeed available.
Error: Unable to find a match

ERROR: core-image-full-cmdline-1.0-r0 do_rootfs: Function failed: do_rootfs

Cheers,

Richard