On Wed Mar 21, 2001 at 10:51:30AM -0500, Steven Taetzsch wrote:

> Ok, this zip drive thing has me thinking of upgrading the kernel. I
> downloaded the files because Mandrakeupdate doesn't work. The Mandrake
> website says to run 'rpm --checksig package.rpm' before upgrading the
> kernel. Well it should say 'rpm --checksig /var/lib/rpm/packages.rpm',
> they don't seem to pay much attention to details at Mandrake. My 7.2
> is very buggy.

Ummm... no, you misunderstood the meaning of the 'rpm --checksig
package.rpm' you read.  It most definately does not mean to checksig
/var/lib/rpm/packages.rpm (not an rpm package!).  It means:

rpm --checksig [package].rpm

or

rpm --checksig [rpms_i_downloaded].rpm

or

rpm --checksig *.rpm

In other words, you want to check the signature of the kernel
packages, which in your case would be:

rpm --checksig kernel*.rpm

Which provides these results for me:

kernel-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-doc-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-fb-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-headers-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-linus-2.2.16-2mdk.i586.rpm: md5 gpg OK
kernel-pcmcia-cs-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-secure-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-smp-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-source-2.2.16-9mdk.i586.rpm: md5 gpg OK
kernel-utils-2.2.16-9mdk.i586.rpm: md5 gpg OK

> Anyway when I run checksig it fails with a message 
> # rpm --checksig /var/lib/rpm/packages.rpm
> exec failed!
> Could not run pgp.  Use --nopgp to skip PGP checks.
> /var/lib/rpm/packages.rpm: PGP NOT OK

Yes, this is because /var/lib/rpm/packages.rpm is not an actual RPM
package.

> If I use the --nopgp it passes. Am I ok? My reason for concern is that
> Mandrakeupdate fails ("error downloading package") and at one point I
> had to rebuild my rpm database. I never figured out how it was
> corrupted.

Well, check the packages you downloaded.  =)  Then you'll know if
you're ok.  I'm not sure why you're getting the error in MU, but you
should not use MU to upgrade the kernel (ever).

-- 
[EMAIL PROTECTED], OpenPGP key available on www.keyserver.net
1024D/FE6F2AFD   88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD
 - Danen Consulting Services    www.danen.net, www.freezer-burn.org
 - MandrakeSoft, Inc. Security  www.linux-mandrake.com

Current Linux kernel 2.4.2-13mdk uptime: 2 days 1 hour 5 minutes.

Reply via email to