CoreOS changed signing subkey

[quinncomendant]

I'm using corectl 0.7.18 and getting this error with corectl pull -f:

[q@x/0 ~] corectl -d pull -f
[WARN] /Users/q/.coreos/images/alpha/1520.1.0/coreos_production_pxe.vmlinuz missing - alpha/1520.1.0 ignored
---> downloading and verifying alpha/1520.1.0
[DEBUG] Trusted hex key id 50E0885593D2DCB4 is decimal [80 224 136 85 147 210 220 180]
[ERROR] Signature check for DIGESTS failed.

Corectl needs an updated key to verify the signature.

Ping @AntonioMeireles :)

[mffrench]

+1

[jacobat]

Dupe of #120 ?

[asridharan]

Don't see a new release that fixes this?

[mtrimmatdyn]

i too have this problem

[aberfeldy]

same for me, any progress?

[bw2]

same here

[giphyvera]

@mtrimmatdyn @bw2 @aberfeldy @asridharan Just clone this repository and run make all. It should compile normally and "just work"

[jacobat]

Doesn't work for me:

$ make all
cd components/common/assets; \
                /bin/rm -rf assets_vfsdata.go ; \
                GOPATH=/Users/jacob/Code/go GO15VENDOREXPERIMENT=1 GOOS=darwin GOARCH=amd64 CGO_ENABLED=1 go run assets_generator.go -tags=dev
/bin/sh: line 0: cd: components/common/assets: No such file or directory
stat assets_generator.go: no such file or directory
make: *** [components/common/assets] Error 1

[giphyvera]

Derp you can just run make

[jacobat]

$ make
/bin/rm -rf /Users/jacob/Code/go/src/github.com/TheNewNormal/corectl/bin/corectl
/bin/rm -rf /Users/jacob/Code/go/src/github.com/TheNewNormal/corectl/bin/corectld
/bin/mkdir -p /Users/jacob/Code/go/src/github.com/TheNewNormal/corectl/bin
cd cmd; GOPATH=/Users/jacob/Code/go GO15VENDOREXPERIMENT=1 GOOS=darwin GOARCH=amd64 CGO_ENABLED=1 go build -o /Users/jacob/Code/go/src/github.com/TheNewNormal/corectl/bin/corectl \
                -gcflags "" -ldflags " -w -s -X github.com/TheNewNormal/corectl/release.Version=v0.7.18-19-g074c74 -X github.com/TheNewNormal/corectl/release.BuildDate=2017-12-01T10:20:49CET"
/bin/sh: line 0: cd: cmd: No such file or directory
can't load package: package github.com/TheNewNormal/corectl: no Go files in /Users/jacob/Code/go/src/github.com/TheNewNormal/corectl
make: *** [cmd] Error 1

[giphyvera]

¯_(ツ)_/¯ maybe you need to double-check your branch and make sure you've done all the opam setup that is required?

 15:10:06  giphyvera@wie-fur-mich-ich-bin-ein-absoluter-Abgrund  ...github.com/TheNewNormal/corectl  ♦️ 2.4.1  🐍 3.6.2  ⬡ v6.3.0   update_hyperkit ✘ ✹ 
$  make clean
cd components/common/assets; \
    /bin/rm -rf assets_vfsdata.go ; \
    GOPATH=/Users/giphyvera/src/go GO15VENDOREXPERIMENT=1 GOOS=darwin GOARCH=amd64 CGO_ENABLED=1 go run assets_generator.go -tags=dev
/bin/rm -rf /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/*
/bin/rm -rf hyperkit qcow-tool
/bin/rm -rf documentation/
/bin/rm -rf corectl-0.7.19-1-gc9d8c6+untagged.tar.gz

 15:10:15  giphyvera@wie-fur-mich-ich-bin-ein-absoluter-Abgrund  ...github.com/TheNewNormal/corectl  ♦️ 2.4.1  🐍 3.6.2  ⬡ v6.3.0   update_hyperkit ✘ ✖ ✹ 
$  make hyperkit documentation
# - ocaml stack
#   - 1st run
#     - brew install opam libev
#     - opam init -y
#     - opam install --yes uri qcow-format ocamlfind conf-libev
#   - maintenance
#     - opam update && opam upgrade -y
#   - build
#     - make clean
#     - eval `opam config env` && make all
/bin/mkdir -p /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin
/bin/rm -rf hyperkit
/usr/bin/git clone "https://github.com/moby/hyperkit.git"
Cloning into 'hyperkit'...
cd hyperkit; \
    /usr/bin/git checkout 81fa627; \
    /usr/bin/git checkout 2c8a736c9bd1c86c95b7c4dac0c159c5712ac604 src/lib/block_if.c; \
    /usr/local/bin/gmake clean; \
    CAML_LD_LIBRARY_PATH="/Users/giphyvera/.opam/4.03.0/lib/stublibs"; export CAML_LD_LIBRARY_PATH; OPAMUTF8MSGS="1"; export OPAMUTF8MSGS; MANPATH=":/Users/giphyvera/.opam/4.03.0/man:/opt/DTT/Man"; export MANPATH; PERL5LIB="/Users/giphyvera/.opam/4.03.0/lib/perl5:"; export PERL5LIB; OCAML_TOPLEVEL_PATH="/Users/giphyvera/.opam/4.03.0/lib/toplevel"; export OCAML_TOPLEVEL_PATH; PATH="/Users/giphyvera/.opam/4.03.0/bin:/usr/local/var/rbenv/shims:/usr/local/var/rbenv/bin:/usr/local/Cellar/pyenv-virtualenv/HEAD-e690650/shims:/usr/local/var/nodenv/shims:/Users/giphyvera/.pyenv/shims:/usr/local/bin:/usr/local/sbin:/Applications/Xcode.app/Contents/Developer/usr/bin:/opt/pkg/bin:/opt/pkg/sbin:/usr/local/opt/gnu-sed/libexec/gnubin:/usr/local/opt/gnu-tar/libexec/gnubin:/usr/local/opt/ccache/libexec:/usr/local/opt/e2fsprogs/sbin:/usr/local/opt/e2fsprogs/bin:/sbin:/usr/sbin:/usr/bin:/Users/giphyvera/src/depot_tools:/Users/giphyvera/.vimpkg/bin:/Users/giphyvera/bin:/bin:/Users/giphyvera/.zgen/unixorn/warhol.plugin.zsh-master/bin:/Users/giphyvera/.zgen/unixorn/git-extra-commands-master/bin:/usr/local/opt/coreutils/libexec:/opt/DTT/Bin:/Users/giphyvera/src/go/bin:/usr/local/opt/go/libexec/bin:/usr/local/opt/fzf/bin"; export PATH; /usr/local/bin/gmake all
Note: checking out '81fa627'.

You are in 'detached HEAD' state. You can look around, make experimental
changes and commit them, and you can discard any commits you make in this
state without impacting any branches by performing another checkout.

If you want to create a new branch to retain commits you create, you may
do so (now or later) by using -b with the checkout command again. Example:

  git checkout -b <new-branch-name>

HEAD is now at 81fa627... Merge pull request #165 from akimd/argv0
gmake[1]: Entering directory '/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/hyperkit'
gmake[1]: Leaving directory '/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/hyperkit'
gmake[1]: Entering directory '/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/hyperkit'
gen src/lib/dtrace.d
cc src/lib/vmm/intel/vmcs.c
cc src/lib/vmm/intel/vmx.c
cc src/lib/vmm/intel/vmx_msr.c
cc src/lib/vmm/io/vatpic.c
cc src/lib/vmm/io/vatpit.c
cc src/lib/vmm/io/vhpet.c
cc src/lib/vmm/io/vioapic.c
cc src/lib/vmm/io/vlapic.c
cc src/lib/vmm/io/vpmtmr.c
cc src/lib/vmm/io/vrtc.c
cc src/lib/vmm/vmm.c
cc src/lib/vmm/vmm_api.c
cc src/lib/vmm/vmm_callout.c
cc src/lib/vmm/vmm_host.c
cc src/lib/vmm/vmm_instruction_emul.c
cc src/lib/vmm/vmm_ioport.c
cc src/lib/vmm/vmm_lapic.c
cc src/lib/vmm/vmm_mem.c
cc src/lib/vmm/vmm_stat.c
cc src/lib/vmm/vmm_util.c
cc src/lib/vmm/x86.c
cc src/lib/acpitbl.c
cc src/lib/atkbdc.c
cc src/lib/block_if.c
cc src/lib/consport.c
cc src/lib/dbgport.c
cc src/lib/fwctl.c
cc src/lib/inout.c
cc src/lib/ioapic.c
cc src/lib/md5c.c
cc src/lib/mem.c
cc src/lib/mevent.c
cc src/lib/mptbl.c
cc src/lib/pci_ahci.c
cc src/lib/pci_emul.c
cc src/lib/pci_hostbridge.c
cc src/lib/pci_irq.c
cc src/lib/pci_lpc.c
cc src/lib/pci_uart.c
cc src/lib/pci_virtio_9p.c
cc src/lib/pci_virtio_block.c
cc src/lib/pci_virtio_net_tap.c
cc src/lib/pci_virtio_net_vmnet.c
cc src/lib/pci_virtio_net_vpnkit.c
cc src/lib/pci_virtio_rnd.c
cc src/lib/pci_virtio_sock.c
cc src/lib/pm.c
cc src/lib/post.c
cc src/lib/rtc.c
cc src/lib/smbiostbl.c
cc src/lib/task_switch.c
cc src/lib/uart_emul.c
cc src/lib/virtio.c
cc src/lib/xmsr.c
cc src/lib/firmware/bootrom.c
cc src/lib/firmware/kexec.c
cc src/lib/firmware/fbsd.c
cc src/lib/firmware/multiboot.c
cc src/lib/mirage_block_c.c
cc src/hyperkit.c
ml src/lib/mirage_block_ocaml.ml
ocamlfind: [WARNING] The DLL libasmrun_shared.so occurs in multiple directories: /Users/giphyvera/.opam/4.03.0/lib/ocaml
ocamlfind: [WARNING] The DLL libasmrun_shared.so occurs in multiple directories: /usr/local/lib/ocaml
ocamlfind: [WARNING] The DLL libcamlrun_shared.so occurs in multiple directories: /Users/giphyvera/.opam/4.03.0/lib/ocaml
ocamlfind: [WARNING] The DLL libcamlrun_shared.so occurs in multiple directories: /usr/local/lib/ocaml
ocamlfind: [WARNING] The DLL libasmrun_shared.so occurs in multiple directories: /Users/giphyvera/.opam/4.03.0/lib/ocaml
ocamlfind: [WARNING] The DLL libasmrun_shared.so occurs in multiple directories: /usr/local/lib/ocaml
ocamlfind: [WARNING] The DLL libcamlrun_shared.so occurs in multiple directories: /Users/giphyvera/.opam/4.03.0/lib/ocaml
ocamlfind: [WARNING] The DLL libcamlrun_shared.so occurs in multiple directories: /usr/local/lib/ocaml
ld hyperkit.sym
ld: warning: could not create compact unwind for _caml_start_program: dwarf uses DW_CFA_same_value
dsym hyperkit.dSYM
strip hyperkit
gmake[1]: Leaving directory '/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/hyperkit'
/bin/cp hyperkit/build/hyperkit /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectld.runner
/bin/rm -rf examples/dtrace
cd hyperkit; \
    /usr/bin/sed -i.bak -e "s,hyperkit,corectld.runner,g" dtrace/*.d; \
    /bin/rm -rf dtrace/*.bak ; \
    /bin/cp -r dtrace ../examples
/bin/rm -rf /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectl
/bin/rm -rf /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectld
/bin/mkdir -p /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin
cd cmd; GOPATH=/Users/giphyvera/src/go GO15VENDOREXPERIMENT=1 GOOS=darwin GOARCH=amd64 CGO_ENABLED=1 go build -o /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectl \
    -gcflags "" -ldflags " -w -s -X github.com/TheNewNormal/corectl/release.Version=0.7.19-1-gc9d8c6+untagged -X github.com/TheNewNormal/corectl/release.BuildDate=2017-12-18T15:10:19EST"
cd /Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin; /bin/ln -sf corectl corectld
/bin/rm -rf documentation/man
/bin/mkdir -p documentation/man
/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectl utils genManPages
/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectld utils genManPages
for p in $(ls documentation/man/*.1); do \
    /usr/bin/sed -i.bak "s/$(/bin/date '+%h %Y')//" "$p" ;\
    /usr/bin/sed -i.bak "/spf13\/cobra$/d" "$p" ;\
    /bin/rm -rf "$p.bak" ;\
done
/bin/rm -rf documentation/markdown
/bin/mkdir -p documentation/markdown
/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectl utils genMarkdownDocs
/Users/giphyvera/src/go/src/github.com/TheNewNormal/corectl/bin/corectld utils genMarkdownDocs
for p in $(ls documentation/markdown/*.md); do \
    /usr/bin/sed -i.bak "/spf13\/cobra/d" "$p" ;\
    /bin/rm -rf "$p.bak" ;\
done
/usr/bin/git status
On branch update_hyperkit
Changes not staged for commit:
  (use "git add <file>..." to update what will be committed)
  (use "git checkout -- <file>..." to discard changes in working directory)

    modified:   Makefile
    modified:   components/common/assets/assets_vfsdata.go

no changes added to commit (use "git add" and/or "git commit -a")
38.66s user 7.20s system 233% cpu 19.632s total

[jancajthaml]

any progress on releasing new Corectl.app ?

[superbogy]

anyone had resolved this problem?

[sekaijin]

Idem for me

[srl295]

rebuilt corectl from HEAD (homebrew) but still getting the failure

$ corectld start
Started corectld:
 Version:   f9d212+untagged
 Go Version:    go1.10.1
 Built:     Thu Apr 26 13:52:29 PDT 2018
 OS/Arch:   darwin/amd64

 Pid:       54205
 Uptime:    2 seconds ago

srl@gozo:~/.coreos/images
$ corectl pull
---> downloading and verifying alpha/1758.0.0
[ERROR] Signature check for DIGESTS failed.