Hi All, We just picked up a GPG Key error when running `dnf install ovirt-engine-appliance` in preparation of a fresh oVirt v4.5.5 install on RL v9.3: ~~~ oVirt upstream for CentOS Stream 9 - oVirt 4.5 79 kB/s | 1.6 kB 00:00 Importing GPG key 0x24901D0C: Userid : "oVirt <infra(a)ovirt.org&gt;&quot; Fingerprint: 3C98 E81D B93D EA6D 54DE 690E 44E4 75CB 2490 1D0C From : /etc/pki/rpm-gpg/RPM-GPG-KEY-oVirt-4.5 Is this ok [y/N]: y Key imported successfully Import of key(s) didn't help, wrong key(s)? Public key for ovirt-engine-appliance-4.5-20231201120201.1.el9.x86_64.rpm is not installed. Failing package is: ovirt-engine-appliance-4.5-20231201120201.1.el9.x86_64 GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oVirt-4.5 ~~~ An error? An issue with the repo definition? Can it safely be ignored (normally I'd say "No" but its from the oVirt Tam's own repo...)? Is the fingerprint above the correct one (and for that matter, where is the GPG Key's Fingerprint recorded on the oVirt Website so that we can check compliance ourselves)? Anyway, thought I'd let people know (further details can be provide upon request) Cheers Dulux-Oz _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/WILIDSO6CMH...

Hi Jorge, It's actually Rocky Linux v9.3 - I was using the term "RHEL" genrically - I suppose I should have used "EL" or "RL" instead. On 09/01/2024 00:20, Jorge Visentini wrote: > Hi. > > Why don't you use the ISO and just install the hosts using it, and > then deploy the engine? > Why install on RHEL now... I've been using CentOS Stream 9 with UEFI > for about 6 months and everything is working... > > Cheers! > > Em seg., 8 de jan. de 2024 às 04:07, Matthew J Black > <matthew(a)peregrineit.net&gt; escreveu: > > Hi All, > > We just picked up a GPG Key error when running `dnf install > ovirt-engine-appliance` in preparation of a fresh oVirt v4.5.5 > install on RL v9.3: > > ~~~ > oVirt upstream for CentOS Stream 9 - oVirt 4.5  79 kB/s | 1.6 kB  >    00:00 > Importing GPG key 0x24901D0C: >  Userid     : "oVirt <infra(a)ovirt.org&gt;&quot; >  Fingerprint: 3C98 E81D B93D EA6D 54DE 690E 44E4 75CB 2490 1D0C >  From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-oVirt-4.5 > Is this ok [y/N]: y > Key imported successfully > Import of key(s) didn't help, wrong key(s)? > Public key for > ovirt-engine-appliance-4.5-20231201120201.1.el9.x86_64.rpm is not > installed. Failing package is: > ovirt-engine-appliance-4.5-20231201120201.1.el9.x86_64 >  GPG Keys are configured as: > file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oVirt-4.5 > ~~~ > > An error? An issue with the repo definition? Can it safely be > ignored (normally I'd say "No" but its from the oVirt Tam's own > repo...)? Is the fingerprint above the correct one (and for that > matter, where is the GPG Key's Fingerprint recorded on the oVirt > Website so that we can check compliance ourselves)? > > Anyway, thought I'd let people know (further details can be > provide upon request) > > Cheers > > Dulux-Oz > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/WILIDSO6CMH... > > > > -- > Att, > Jorge Visentini > +55 55 98432-9868 <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&... Virus-free.www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&... <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> _______________________________________________ Users mailing list --users(a)ovirt.org To unsubscribe send an email tousers-leave(a)ovirt.org Privacy Statement:https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/QP...

Hi Jirka and Matthew, We think that we resolved the issue, which included re-signing the packages and re-creating the oVirt 4.5 yum repo. Could you please try to re-fetch the packages in question and see if that solves the problem for you? Thanks in advance and sorry for the issue, On Tue, Jan 9, 2024 at 1:34 PM Jirka Simon <jirka(a)vesim.cz&gt; wrote: Hi Matthew, I reported this like 3 weeks ago :( just use dnf  -y install ovirt-engine-appliance --nogpgcheck  before hosted-engine --deploy Jirka On 1/8/24 17:14, Matthew J Black wrote: > > Hi Jorge, > > It's actually Rocky Linux v9.3 - I was using the term "RHEL" > genrically - I suppose I should have used "EL" or "RL" instead. > > On 09/01/2024 00:20, Jorge Visentini wrote: >> Hi. >> >> Why don't you use the ISO and just install the hosts using it, >> and then deploy the engine? >> Why install on RHEL now... I've been using CentOS Stream 9 with >> UEFI for about 6 months and everything is working... >> >> Cheers! >> >> Em seg., 8 de jan. de 2024 às 04:07, Matthew J Black >> <matthew(a)peregrineit.net&gt; escreveu: >> >> Hi All, >> >> We just picked up a GPG Key error when running `dnf install >> ovirt-engine-appliance` in preparation of a fresh oVirt >> v4.5.5 install on RL v9.3: >> >> ~~~ >> oVirt upstream for CentOS Stream 9 - oVirt 4.5            79 >> kB/s | 1.6 kB     00:00 >> Importing GPG key 0x24901D0C: >>  Userid     : "oVirt <infra(a)ovirt.org&gt;&quot; >>  Fingerprint: 3C98 E81D B93D EA6D 54DE 690E 44E4 75CB 2490 1D0C >>  From       : /etc/pki/rpm-gpg/RPM-GPG-KEY-oVirt-4.5 >> Is this ok [y/N]: y >> Key imported successfully >> Import of key(s) didn't help, wrong key(s)? >> Public key for >> ovirt-engine-appliance-4.5-20231201120201.1.el9.x86_64.rpm >> is not installed. Failing package is: >> ovirt-engine-appliance-4.5-20231201120201.1.el9.x86_64 >>  GPG Keys are configured as: >> file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oVirt-4.5 >> ~~~ >> >> An error? An issue with the repo definition? Can it safely >> be ignored (normally I'd say "No" but its from the oVirt >> Tam's own repo...)? Is the fingerprint above the correct one >> (and for that matter, where is the GPG Key's Fingerprint >> recorded on the oVirt Website so that we can check >> compliance ourselves)? >> >> Anyway, thought I'd let people know (further details can be >> provide upon request) >> >> Cheers >> >> Dulux-Oz >> _______________________________________________ >> Users mailing list -- users(a)ovirt.org >> To unsubscribe send an email to users-leave(a)ovirt.org >> Privacy Statement: https://www.ovirt.org/privacy-policy.html >> oVirt Code of Conduct: >> https://www.ovirt.org/community/about/community-guidelines/ >> List Archives: >> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WILIDSO6CMH... >> >> >> >> -- >> Att, >> Jorge Visentini >> +55 55 98432-9868 > > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&... > Virus-free.www.avast.com > <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&... > > > <#m_3968352809059148212_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> > > _______________________________________________ > Users mailing list --users(a)ovirt.org > To unsubscribe send an email tousers-leave(a)ovirt.org > Privacy Statement:https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ > List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/QP... _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/GWLT4VZBP4D...

Some more context: # rpm --checksig --verbose /var/cache/dnf/ovirt-45-upstream-62781357e04a3932/packages/ovirt-node-ng-image-update-4.5.5-1.el8.noarch.rpm /var/cache/dnf/ovirt-45-upstream-62781357e04a3932/packages/ovirt-node-ng-image-update-4.5.5-1.el8.noarch.rpm: Header V4 RSA/SHA256 Signature, key ID 24901d0c: NOKEY Header SHA256 digest: OK Header SHA1 digest: OK Payload SHA256 digest: OK V4 RSA/SHA256 Signature, key ID 24901d0c: NOKEY MD5 digest: OK _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/A2KA6MLNPUJ...

Hi Lev Thanks a lot, I can confirm that the signature now correctly verifies with the new key. Thanks also for updating the oVirt site with the new key! Regards Jonas On 26.02.24 15:45, Lev Veyde wrote: > Hi Jonas, > > New packages are currently being signed with the new 4096 bit key, which > can be downloaded from: > https://resources.ovirt.org/pub/keys/RPM-GPG-ovirt-v4 > <https://resources.ovirt.org/pub/keys/RPM-GPG-ovirt-v4> > > It was supplied automatically for EL9/C9S releases, but missed the > EL8/C8S release packages. > > Can you please try to import the new key manually and check if it helps? > > Thanks in advance, > > On Sat, Feb 24, 2024 at 11:35 AM Jonas <jonas(a)rabe.ch > <mailto:jonas@rabe.ch>> wrote: > > Some more context: > > # rpm --checksig --verbose > /var/cache/dnf/ovirt-45-upstream-62781357e04a3932/packages/ovirt-node-ng-image-update-4.5.5-1.el8.noarch.rpm > > /var/cache/dnf/ovirt-45-upstream-62781357e04a3932/packages/ovirt-node-ng-image-update-4.5.5-1.el8.noarch.rpm: > Header V4 RSA/SHA256 Signature, key ID 24901d0c: NOKEY > Header SHA256 digest: OK > Header SHA1 digest: OK > Payload SHA256 digest: OK > V4 RSA/SHA256 Signature, key ID 24901d0c: NOKEY > MD5 digest: OK > _______________________________________________ > Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org> > To unsubscribe send an email to users-leave(a)ovirt.org > <mailto:users-leave@ovirt.org> > Privacy Statement: https://www.ovirt.org/privacy-policy.html > <https://www.ovirt.org/privacy-policy.html> > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > <https://www.ovirt.org/community/about/community-guidelines/> > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/A2KA6MLNPUJ... < https://lists.ovirt.org/archives/list/users@ovirt.org/message/A2KA6MLNPUJ... > > > > > -- > > LEV VEYDE > > SENIOR SOFTWARE ENGINEER, RHCE | RHCVA | MCITP > > Red Hat Israel > > <https://www.redhat.com/> > > lev(a)redhat.com <mailto:lev@redhat.com> | lveyde(a)redhat.com > <mailto:lveyde@redhat.com> > > <https://red.ht/sig> > TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>