public inbox for [email protected]
help / color / mirror / Atom feedRe: Non-signed packages in PostgreSQL 14 repo for RHEL 9
2+ messages / 2 participants
[nested] [flat]
* Re: Non-signed packages in PostgreSQL 14 repo for RHEL 9
@ 2024-04-17 07:03 Magnus Hagander <[email protected]>
2024-04-22 18:20 ` Re: Non-signed packages in PostgreSQL 14 repo for RHEL 9 Devrim Gündüz <[email protected]>
0 siblings, 1 reply; 2+ messages in thread
From: Magnus Hagander @ 2024-04-17 07:03 UTC (permalink / raw)
To: pgsql-pkg-yum; +Cc: [email protected]; [email protected]
Hi!
Forwarding this one to the RPM maintrainers.
//Magnus
On Wed, Apr 17, 2024 at 8:58 AM <[email protected]> wrote:
> Hi,
>
>
>
> I’m not sure where to forward this to, since it’s not a bug in PostgreSQL,
> per se.
>
> But I noticed that there are unsigned packages in this repository:
> https://download.postgresql.org/pub/repos/yum/14/redhat/rhel-9-x86_64/
>
> I’m using reposync (reposync(1) - Linux manual page (man7.org)
> <https://www.man7.org/linux/man-pages/man1/reposync.1.html;) to mirror
> the repository but it fails with –gpgcheck since there are unsigned
> packages.
>
> This is the GPG key I’m using to verify the packages:
> https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL
>
> Every other package in the repository is signed and works as expected.
>
>
>
> Output from reposync:
>
> (946/952): postgis33_14-devel-3.3.6-3PGDG.rhel9 23 kB/s | 8.9 kB
> 00:00
>
> (947/952): postgis33_14-client-3.3.6-3PGDG.rhel 569 kB/s | 293 kB
> 00:00
>
> (948/952): postgis33_14-3.3.6-3PGDG.rhel9.x86_6 5.6 MB/s | 4.0 MB
> 00:00
>
> (949/952): postgis33_14-gui-3.3.6-3PGDG.rhel9.x 943 kB/s | 211 kB
> 00:00
>
> (950/952): postgis33_14-docs-3.3.6-3PGDG.rhel9. 10 MB/s | 4.8 MB
> 00:00
>
> (951/952): postgis33_14-llvmjit-3.3.6-3PGDG.rhe 9.4 MB/s | 1.1 MB
> 00:00
>
> (952/952): postgis33_14-utils-3.3.6-3PGDG.rhel9 345 kB/s | 43 kB
> 00:00
>
> Removing postgis33_14-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Removing postgis33_14-client-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-client-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Removing postgis33_14-devel-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-devel-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Removing postgis33_14-docs-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-docs-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Removing postgis33_14-gui-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-gui-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Removing postgis33_14-llvmjit-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-llvmjit-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Removing postgis33_14-utils-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> postgis33_14-utils-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
>
> Error: GPG signature check failed.
>
>
>
> Best regards,
>
> Gunnar Andersson,
>
> Trafikverket
>
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Non-signed packages in PostgreSQL 14 repo for RHEL 9
2024-04-17 07:03 Re: Non-signed packages in PostgreSQL 14 repo for RHEL 9 Magnus Hagander <[email protected]>
@ 2024-04-22 18:20 ` Devrim Gündüz <[email protected]>
0 siblings, 0 replies; 2+ messages in thread
From: Devrim Gündüz @ 2024-04-22 18:20 UTC (permalink / raw)
To: [email protected]; +Cc: Magnus Hagander <[email protected]>; pgsql-pkg-yum
Hi,
Apologies for the inconvenience. A network issue delayed this.
Should be fixed now.
Regards, Devrim
On Wed, 2024-04-17 at 09:03 +0200, Magnus Hagander wrote:
> Hi!
>
> Forwarding this one to the RPM maintrainers.
>
> //Magnus
>
> On Wed, Apr 17, 2024 at 8:58 AM <[email protected]>
> wrote:
>
> > Hi,
> >
> >
> >
> > I’m not sure where to forward this to, since it’s not a bug in
> > PostgreSQL,
> > per se.
> >
> > But I noticed that there are unsigned packages in this repository:
> > https://download.postgresql.org/pub/repos/yum/14/redhat/rhel-9-x86_64/
> >
> > I’m using reposync (reposync(1) - Linux manual page (man7.org)
> > <https://www.man7.org/linux/man-pages/man1/reposync.1.html;) to
> > mirror
> > the repository but it fails with –gpgcheck since there are unsigned
> > packages.
> >
> > This is the GPG key I’m using to verify the packages:
> > https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL
> >
> > Every other package in the repository is signed and works as
> > expected.
> >
> >
> >
> > Output from reposync:
> >
> > (946/952): postgis33_14-devel-3.3.6-3PGDG.rhel9 23 kB/s | 8.9 kB
> > 00:00
> >
> > (947/952): postgis33_14-client-3.3.6-3PGDG.rhel 569 kB/s | 293 kB
> > 00:00
> >
> > (948/952): postgis33_14-3.3.6-3PGDG.rhel9.x86_6 5.6 MB/s | 4.0 MB
> > 00:00
> >
> > (949/952): postgis33_14-gui-3.3.6-3PGDG.rhel9.x 943 kB/s | 211 kB
> > 00:00
> >
> > (950/952): postgis33_14-docs-3.3.6-3PGDG.rhel9. 10 MB/s | 4.8 MB
> > 00:00
> >
> > (951/952): postgis33_14-llvmjit-3.3.6-3PGDG.rhe 9.4 MB/s | 1.1 MB
> > 00:00
> >
> > (952/952): postgis33_14-utils-3.3.6-3PGDG.rhel9 345 kB/s | 43 kB
> > 00:00
> >
> > Removing postgis33_14-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Removing postgis33_14-client-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-client-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Removing postgis33_14-devel-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-devel-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Removing postgis33_14-docs-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-docs-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Removing postgis33_14-gui-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-gui-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Removing postgis33_14-llvmjit-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-llvmjit-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Removing postgis33_14-utils-3.3.6-3PGDG.rhel9.x86_64.rpm: Package
> > postgis33_14-utils-3.3.6-3PGDG.rhel9.x86_64.rpm is not signed
> >
> > Error: GPG signature check failed.
> >
> >
> >
> > Best regards,
> >
> > Gunnar Andersson,
> >
> > Trafikverket
> >
--
Devrim Gündüz
Open Source Solution Architect, PostgreSQL Major Contributor
Twitter: @DevrimGunduz , @DevrimGunduzTR
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2024-04-22 18:20 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-04-17 07:03 Re: Non-signed packages in PostgreSQL 14 repo for RHEL 9 Magnus Hagander <[email protected]>
2024-04-22 18:20 ` Devrim Gündüz <[email protected]>
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox