uyuni-project / uyuni

Source code for Uyuni
https://www.uyuni-project.org/
GNU General Public License v2.0
431 stars 180 forks source link

Uyuni 2022.02 + amazon linux aarch64 minion NOKEY error #5000

Closed eins closed 2 years ago

eins commented 2 years ago

Problem description

I can't update amazon linux aarch64 minion ec2 instance. I have the following error:

 yum update -y
Loaded plugins: extras_suggestions, langpacks, priorities, susemanagerplugin, update-motd, yumnotify
Resolving Dependencies
--> Running transaction check
---> Package python-simplejson.aarch64 0:3.2.0-1.amzn2.0.2 will be updated
---> Package python-simplejson.aarch64 0:3.3.1-2.10.uyuni will be an update
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================
 Package                          Arch            Version                  Repository                                                    Size
==============================================================================================================================================
Updating:
 python-simplejson                aarch64         3.3.1-2.10.uyuni         susemanager:amazonlinux2-uyuni-client-aarch64                108 k

Transaction Summary
Upgrade  1 Package

Total size: 108 k
Downloading packages:
warning: /var/cache/yum/aarch64/2/susemanager:amazonlinux2-uyuni-client-aarch64/packages/python-simplejson-3.3.1-2.10.uyuni.aarch64.rpm: Header V3 RSA/SHA256 Signature, key ID 0d20833e: NOKEY

Public key for python-simplejson-3.3.1-2.10.uyuni.aarch64.rpm is not installed

Client execution returned

file_|-mgrchannels_repo_|-/etc/yum.repos.d/susemanager:channels.repo_|-managed:
    comment: File /etc/yum.repos.d/susemanager:channels.repo is in the correct state
    name: /etc/yum.repos.d/susemanager:channels.repo
    start_time: '20:54:24.226719'
    result: true
    duration: 57.038
    __run_num__: 3.0
    __sls__: channels
    changes: {
    }
    __id__: mgrchannels_repo
? cmd_|-trust_suse_manager_tools_rhel_gpg_key_|-rpm --import https://uyuni.myuyuni-domain.here/pub/sle12-gpg-pubkey-39db7c82.key_|-run
:   comment: unless condition is true
    __id__: trust_suse_manager_tools_rhel_gpg_key
    __sls__: channels
    name: rpm --import https://uyuni.myuyuni-domain.here/pub/sle12-gpg-pubkey-39db7c82.key
    duration: 112.68
    __run_num__: 6.0
    start_time: '20:54:24.394990'
    skip_watch: true
    changes: {
    }
    result: true
file_|-mgrchannels_susemanagerplugin_conf_yum_|-/etc/yum/pluginconf.d/susemanagerplugin.conf_|-managed:
    comment: File /etc/yum/pluginconf.d/susemanagerplugin.conf is in the correct state
    name: /etc/yum/pluginconf.d/susemanagerplugin.conf
    start_time: '20:54:22.233274'
    result: true
    duration: 71.133
    __run_num__: 1.0
    __sls__: channels
    changes: {
    }
    __id__: mgrchannels_susemanagerplugin_conf_yum
file_|-mgrchannels_susemanagerplugin_yum_|-/usr/share/yum-plugins/susemanagerplugin.py_|-managed:
    comment: File /usr/share/yum-plugins/susemanagerplugin.py is in the correct state
    name: /usr/share/yum-plugins/susemanagerplugin.py
    start_time: '20:54:22.165794'
    result: true
    duration: 67.233
    __run_num__: 0.0
    __sls__: channels
    changes: {
    }
    __id__: mgrchannels_susemanagerplugin_yum
file_|-mgrchannels_enable_yum_plugins_|-/etc/yum.conf_|-replace:
    comment: onlyif condition is false
    __id__: mgrchannels_enable_yum_plugins
    __sls__: channels
    result: true
    duration: 1920.922
    __run_num__: 2.0
    start_time: '20:54:22.304627'
    skip_watch: true
    changes: {
    }
    name: /etc/yum.conf
cmd_|-mgrchannels_yum_clean_all_|-/usr/bin/yum clean all_|-run:
    comment: State was not run because none of the onchanges reqs changed
    __state_ran__: false
    result: true
    duration: 0.013
    __run_num__: 4.0
    start_time: '20:54:24.284541'
    __sls__: channels
    changes: {
    }
pkg_|-pkg_installed_|-pkg_installed_|-installed:
    comment: |-
    Error occurred installing package(s). Additional info follows:

    errors:
        - Running scope as unit run-31856.scope.
          Loaded plugins: extras_suggestions, langpacks, priorities, susemanagerplugin,
                : update-motd, yumnotify
          No package nss-softokn.aarch64-3.67.0-3.amzn2.0.1 available.
          No package krb5-libs.aarch64-1.15.1-37.amzn2.2.4 available.
          No package update-motd-1.1.2-2.amzn2.0.2 available.
          No package nss-sysinit.aarch64-3.67.0-4.amzn2.0.2 available.
          No package openssh-clients.aarch64-7.4p1-22.amzn2.0.1 available.
          No package cyrus-sasl-plain.aarch64-2.1.26-24.amzn2 available.
          No package python-libs.aarch64-2.7.18-1.amzn2.0.4 available.
          No package glibc.aarch64-2.26-57.amzn2 available.
          No package rpm-libs.aarch64-4.11.3-40.amzn2.0.6 available.
          No package dmidecode.aarch64-3.2-5.amzn2.1 available.
          No package python2-rpm.aarch64-4.11.3-40.amzn2.0.6 available.
          No package ec2-instance-connect-1.1-15.amzn2 available.
          No package systemd-python.aarch64-219-78.amzn2.0.15 available.
          No package libsss_nss_idmap.aarch64-1.16.5-10.amzn2.10 available.
          No package rpm.aarch64-4.11.3-40.amzn2.0.6 available.
          No package openssh-server.aarch64-7.4p1-22.amzn2.0.1 available.
          No package amazon-linux-extras-yum-plugin-2.0.1-1.amzn2 available.
          No package amazon-ssm-agent.aarch64-3.0.1124.0-1.amzn2 available.
          No package python-devel.aarch64-2.7.18-1.amzn2.0.4 available.
          No package python3.aarch64-3.7.10-1.amzn2.0.1 available.
          No package ca-certificates-2021.2.50-72.amzn2.0.3 available.
          No package bzip2.aarch64-1.0.6-13.amzn2.0.3 available.
          No package libmount.aarch64-2.30.2-2.amzn2.0.5 available.
          No package grub2-tools-minimal.aarch64-2.06-2.amzn2.0.6 available.
          No package dracut-config-ec2-2.0-3.amzn2 available.
          No package libxml2.aarch64-2.9.1-6.amzn2.5.4 available.
          No package vim-enhanced.aarch64-8.2.4314-1.amzn2.0.1 available.
          No package expat.aarch64-2.1.0-12.amzn2.0.3 available.
          No package bind-export-libs.aarch64-9.11.4-26.P2.amzn2.5.2 available.
          No package glibc-common.aarch64-2.26-57.amzn2 available.
          No package openssl.aarch64-1.0.2k-19.amzn2.0.10 available.
          No package glib2.aarch64-2.56.1-9.amzn2.0.2 available.
          No package nss-softokn-freebl.aarch64-3.67.0-3.amzn2.0.1 available.
          No package device-mapper-libs.aarch64-1.02.170-6.amzn2.5 available.
          No package device-mapper-event.aarch64-1.02.170-6.amzn2.5 available.
          No package vim-filesystem-8.2.4314-1.amzn2.0.1 available.
          No package libxml2-python.aarch64-2.9.1-6.amzn2.5.4 available.
          No package grub2-efi-aa64-modules-2.06-2.amzn2.0.6 available.
          No package systemd.aarch64-219-78.amzn2.0.15 available.
          No package grub2-efi-aa64.aarch64-2.06-2.amzn2.0.6 available.
          No package kernel.aarch64-4.14.268-205.500.amzn2 available.
          No package systemd-sysv.aarch64-219-78.amzn2.0.15 available.
          No package systemtap-runtime.aarch64-4.4-1.amzn2.0.2 available.
          No package python3-pip-20.2.2-1.amzn2.0.3 available.
          No package cyrus-sasl-lib.aarch64-2.1.26-24.amzn2 available.
          No package dhcp-libs.aarch64-4.2.5-77.amzn2.1.4 available.
          No package dracut-config-generic.aarch64-033-535.amzn2.1.5 available.
          No package device-mapper-event-libs.aarch64-1.02.170-6.amzn2.5 available.
          No package python-urllib3-1.25.9-1.amzn2.0.2 available.
          No package grub2.aarch64-2.06-2.amzn2.0.6 available.
          No package bind-libs.aarch64-9.11.4-26.P2.amzn2.5.2 available.
          No package libcrypt.aarch64-2.26-57.amzn2 available.
          No package system-release.aarch64-2-14.amzn2 available.
          No package libstdc++.aarch64-7.3.1-13.amzn2 available.
          No package grub2-tools-extra.aarch64-2.06-2.amzn2.0.6 available.
          No package nspr.aarch64-4.32.0-1.amzn2.0.1 available.
          No package python-simplejson.aarch64-3.3.1-2.10.uyuni available.
          No package libfdisk.aarch64-2.30.2-2.amzn2.0.5 available.
          No package libsss_idmap.aarch64-1.16.5-10.amzn2.10 available.
          No package cloud-init-19.3-45.amzn2 available.
          No package vim-common.aarch64-8.2.4314-1.amzn2.0.1 available.
          No package aws-cfn-bootstrap-2.0-10.amzn2 available.
          No package chrony.aarch64-4.0-3.amzn2.0.2 available.
          No package grub2-tools.aarch64-2.06-2.amzn2.0.6 available.
          No package nss-tools.aarch64-3.67.0-4.amzn2.0.2 available.
          No package libblkid.aarch64-2.30.2-2.amzn2.0.5 available.
          No package amazon-linux-extras-2.0.1-1.amzn2 available.
          No package glibc-all-langpacks.aarch64-2.26-57.amzn2 available.
          No package util-linux.aarch64-2.30.2-2.amzn2.0.5 available.
          No package openssl-libs.aarch64-1.0.2k-19.amzn2.0.10 available.
          No package libcurl.aarch64-7.79.1-1.amzn2.0.1 available.
          No package vim-minimal.aarch64-8.2.4314-1.amzn2.0.1 available.
          No package ec2-net-utils-1.6-1.amzn2 available.
          No package libuuid.aarch64-2.30.2-2.amzn2.0.5 available.
          No package tzdata-2021e-1.amzn2 available.
          No package grubby.aarch64-8.28-23.amzn2.0.3 available.
          No package grub2-common-2.06-2.amzn2.0.6 available.
          No package glibc-locale-source.aarch64-2.26-57.amzn2 available.
          No package openssh.aarch64-7.4p1-22.amzn2.0.1 available.
          No package bind-utils.aarch64-9.11.4-26.P2.amzn2.5.2 available.
          No package libgomp.aarch64-7.3.1-13.amzn2 available.
          No package bzip2-libs.aarch64-1.0.6-13.amzn2.0.3 available.
          No package libgcc.aarch64-7.3.1-13.amzn2 available.
          No package cloud-utils-growpart-0.31-3.amzn2 available.
          No package rsyslog.aarch64-8.24.0-57.amzn2.1 available.
          No package rpm-plugin-systemd-inhibit.aarch64-4.11.3-40.amzn2.0.6 available.
          No package bind-license-9.11.4-26.P2.amzn2.5.2 available.
          No package lvm2.aarch64-2.02.187-6.amzn2.5 available.
          No package lvm2-libs.aarch64-2.02.187-6.amzn2.5 available.
          No package nss.aarch64-3.67.0-4.amzn2.0.2 available.
          No package curl.aarch64-7.79.1-1.amzn2.0.1 available.
          No package device-mapper.aarch64-1.02.170-6.amzn2.5 available.
          No package sssd-client.aarch64-1.16.5-10.amzn2.10 available.
          No package kernel-tools.aarch64-4.14.268-205.500.amzn2 available.
          No package python.aarch64-2.7.18-1.amzn2.0.4 available.
          No package glibc-minimal-langpack.aarch64-2.26-57.amzn2 available.
          No package systemd-libs.aarch64-219-78.amzn2.0.15 available.
          No package dhclient.aarch64-4.2.5-77.amzn2.1.4 available.
          No package libwebp.aarch64-0.3.0-10.amzn2 available.
          No package openldap.aarch64-2.4.44-23.amzn2.0.2 available.
          No package bind-libs-lite.aarch64-9.11.4-26.P2.amzn2.5.2 available.
          No package nss-util.aarch64-3.67.0-1.amzn2.0.1 available.
          No package dracut.aarch64-033-535.amzn2.1.5 available.
          No package kpatch-runtime-0.9.4-3.amzn2 available.
          No package python3-libs.aarch64-3.7.10-1.amzn2.0.1 available.
          No package ec2-utils-1.2-47.amzn2 available.
          No package libsmartcols.aarch64-2.30.2-2.amzn2.0.5 available.
          No package rpm-build-libs.aarch64-4.11.3-40.amzn2.0.6 available.
          No package dhcp-common.aarch64-4.2.5-77.amzn2.1.4 available.
          Error: Nothing to do
    name: pkg_installed
    start_time: '20:54:24.508785'
    result: false
    duration: 19714.061
    __run_num__: 7.0
    __sls__: packages.pkginstall
    changes: {
    }
    __id__: pkg_installed
cmd_|-trust_res_gpg_key_|-rpm --import https://uyuni.myuyuni-domain.here:443/pub/res-gpg-pubkey-0182b964.key_|-run:
    comment: unless condition is true
    __id__: trust_res_gpg_key
    __sls__: channels
    name: rpm --import https://uyuni.myuyuni-domain.here:443/pub/res-gpg-pubkey-0182b964.key
    duration: 110.04
    __run_num__: 5.0
    start_time: '20:54:24.284617'
    skip_watch: true
    changes: {
    }
    result: true

the Amazon Linux 2 Core aarch64 channel is up today.

How can I fix this issue?

mcalmer commented 2 years ago

Seems we do not trust the uyuni package key automatically on bootstrapping. You can find the key on the server in the pub/ directory as uyuni-gpg-pubkey-0d20833e.key .

You can call on the client:

$> rpm --import https://uyuni.myuyuni-domain.here:443/pub/uyuni-gpg-pubkey-0d20833e.key
eins commented 2 years ago

I'm closing this issue because I don't have this problem anymore in Uyuni 2022.08 anymore.