search

varnishcache / pkg-varnish-cache

Package building scripts for official Debian and Redhat packages of Varnish Cache.
22 stars 32 forks source link

RPM packages for Varnish 6.0.7 not signed #145

Open jnk0 opened 3 years ago

jnk0 commented 3 years ago

Expected Behavior

If yum repo is configured on CentOS or RHEL servers, updates can be done via yum update.

Current Behavior

Update via yum fails with message "Package varnish-6.0.7-1.el7.x86_64.rpm is not signed".

Possible Solution

  1. Sign the packages in Packagecloud.
  2. Disable gpgcheck for package repository.

Steps to Reproduce (for bugs)

  1. Install yum repo (see https://packagecloud.io/varnishcache/varnish60lts/install#bash-rpm).
  2. Update to new Varnish version (yum update varnish*).

Context

RPMs for Varnish 6.0.6 for example were signed.

Your Environment

gquintard commented 3 years ago

assigning to me

jnk0 commented 3 years ago

@gquintard: Will you also make sure that the already released RPM packages for Varnish 6.0.7 will be re-released signed at Packagecloud?

gquintard commented 3 years ago

that will possibly wait until next LTS release, but we can possibly push one out just to get the signed packages

ninja-ops commented 3 years ago

6.0.8 still not signed

FabRons commented 3 years ago

Same thing on my side:

Package varnish-6.0.8-1.el7.x86_64.rpm is not signed

Temp fix:

yum install varnish --nogpgcheck

From Packagecloud rpm repo

Regards,

Fabien.

moutonnoireu commented 3 years ago

I had this problem too, could you sign your packages, please ?

Madko commented 2 weeks ago

Still occurs : $ rpm -qpi varnish-7.5.0-1.el9.x86_64.rpm Name : varnish Version : 7.5.0 Release : 1.el9 ... Signature : (none)

Any plan to fix that ?