dehaansa opened a new issue #3949: URL: https://github.com/apache/couchdb/issues/3949
## Description The `couchdb-3.2.1-2.el7.x86_64.rpm` package appears to be signed by a key in `https://downloads.apache.org/couchdb/KEYS` named `[ultimate] Adam Kocoloski (CODE SIGNING KEY) <[email protected]>` when that key is not provided in the `couchdb.repo` file. ## Steps to Reproduce Follow the install process provided [in the documentation](https://docs.couchdb.org/en/stable/install/unix.html). ``` $ sudo yum install -y yum-utils Loaded plugins: fastestmirror Determining fastest mirrors epel/x86_64/metalink | 14 kB 00:00:00 * base: mirror.netdepot.com * epel: linux-mirrors.fnal.gov * extras: repos.forethought.net * updates: ftpmirror.your.org base | 3.6 kB 00:00:00 epel | 4.7 kB 00:00:00 extras | 2.9 kB 00:00:00 google-cloud-sdk | 1.4 kB 00:00:00 google-compute-engine | 1.4 kB 00:00:00 updates | 2.9 kB 00:00:00 (1/9): base/7/x86_64/group_gz | 153 kB 00:00:00 (2/9): epel/x86_64/group_gz | 96 kB 00:00:00 (3/9): base/7/x86_64/primary_db | 6.1 MB 00:00:00 (4/9): epel/x86_64/updateinfo | 1.1 MB 00:00:00 (5/9): extras/7/x86_64/primary_db | 243 kB 00:00:00 (6/9): google-cloud-sdk/primary | 320 kB 00:00:00 (7/9): epel/x86_64/primary_db | 7.0 MB 00:00:00 (8/9): google-compute-engine/primary | 3.8 kB 00:00:00 (9/9): updates/7/x86_64/primary_db | 14 MB 00:00:02 google-cloud-sdk 2364/2364 google-compute-engine 10/10 Resolving Dependencies --> Running transaction check ---> Package yum-utils.noarch 0:1.1.31-54.el7_8 will be installed --> Processing Dependency: python-kitchen for package: yum-utils-1.1.31-54.el7_8.noarch --> Processing Dependency: libxml2-python for package: yum-utils-1.1.31-54.el7_8.noarch --> Running transaction check ---> Package libxml2-python.x86_64 0:2.9.1-6.el7_9.6 will be installed ---> Package python-kitchen.noarch 0:1.1.1-5.el7 will be installed --> Processing Dependency: python-chardet for package: python-kitchen-1.1.1-5.el7.noarch --> Running transaction check ---> Package python-chardet.noarch 0:2.2.1-3.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================================================================================ Package Arch Version Repository Size ================================================================================================================================================ Installing: yum-utils noarch 1.1.31-54.el7_8 base 122 k Installing for dependencies: libxml2-python x86_64 2.9.1-6.el7_9.6 updates 247 k python-chardet noarch 2.2.1-3.el7 base 227 k python-kitchen noarch 1.1.1-5.el7 base 267 k Transaction Summary ================================================================================================================================================ Install 1 Package (+3 Dependent packages) Total download size: 863 k Installed size: 4.3 M Downloading packages: (1/4): libxml2-python-2.9.1-6.el7_9.6.x86_64.rpm | 247 kB 00:00:00 (2/4): python-chardet-2.2.1-3.el7.noarch.rpm | 227 kB 00:00:00 (3/4): python-kitchen-1.1.1-5.el7.noarch.rpm | 267 kB 00:00:00 (4/4): yum-utils-1.1.31-54.el7_8.noarch.rpm | 122 kB 00:00:00 ------------------------------------------------------------------------------------------------------------------------------------------------ Total 2.5 MB/s | 863 kB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : python-chardet-2.2.1-3.el7.noarch 1/4 Installing : python-kitchen-1.1.1-5.el7.noarch 2/4 Installing : libxml2-python-2.9.1-6.el7_9.6.x86_64 3/4 Installing : yum-utils-1.1.31-54.el7_8.noarch 4/4 Verifying : python-kitchen-1.1.1-5.el7.noarch 1/4 Verifying : yum-utils-1.1.31-54.el7_8.noarch 2/4 Verifying : libxml2-python-2.9.1-6.el7_9.6.x86_64 3/4 Verifying : python-chardet-2.2.1-3.el7.noarch 4/4 Installed: yum-utils.noarch 0:1.1.31-54.el7_8 Dependency Installed: libxml2-python.x86_64 0:2.9.1-6.el7_9.6 python-chardet.noarch 0:2.2.1-3.el7 python-kitchen.noarch 0:1.1.1-5.el7 Complete! $ sudo yum-config-manager --add-repo https://couchdb.apache.org/repo/couchdb.repo Loaded plugins: fastestmirror adding repo from: https://couchdb.apache.org/repo/couchdb.repo grabbing file https://couchdb.apache.org/repo/couchdb.repo to /etc/yum.repos.d/couchdb.repo repo saved to /etc/yum.repos.d/couchdb.repo $ sudo yum install -y couchdb Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.netdepot.com * epel: linux-mirrors.fnal.gov * extras: repos.forethought.net * updates: ftpmirror.your.org couchdb/7/x86_64/signature | 1.5 kB 00:00:00 Retrieving key from https://couchdb.apache.org/repo/keys.asc Importing GPG key 0x7A00258D: Userid : "The Apache Software Foundation (Package repository signing key) <[email protected]>" Fingerprint: 390e f70b b1ea 12b2 7739 6295 0ee6 2fb3 7a00 258d From : https://couchdb.apache.org/repo/keys.asc Retrieving key from https://couchdb.apache.org/repo/rpm-package-key.asc couchdb/7/x86_64/signature | 1.4 kB 00:00:00 ... couchdb/7/x86_64/primary | 36 kB 00:00:00 couchdb 8/8 Resolving Dependencies --> Running transaction check ---> Package couchdb.x86_64 0:3.2.1-2.el7 will be installed --> Processing Dependency: couch-js = 1:1.8.5 for package: couchdb-3.2.1-2.el7.x86_64 --> Processing Dependency: libmozjs185.so.1.0()(64bit) for package: couchdb-3.2.1-2.el7.x86_64 --> Running transaction check ---> Package couch-js.x86_64 1:1.8.5-21.el7 will be installed --> Finished Dependency Resolution Dependencies Resolved ================================================================================================================================================ Package Arch Version Repository Size ================================================================================================================================================ Installing: couchdb x86_64 3.2.1-2.el7 couchdb 28 M Installing for dependencies: couch-js x86_64 1:1.8.5-21.el7 couchdb 2.0 M Transaction Summary ================================================================================================================================================ Install 1 Package (+1 Dependent package) Total download size: 30 M Installed size: 70 M Downloading packages: warning: /var/cache/yum/x86_64/7/couchdb/packages/couch-js-1.8.5-21.el7.x86_64.rpm: Header V4 RSA/SHA256 Signature, key ID 9657a78e: NOKEY- ETA Public key for couch-js-1.8.5-21.el7.x86_64.rpm is not installed (1/2): couch-js-1.8.5-21.el7.x86_64.rpm | 2.0 MB 00:00:01 (2/2): couchdb-3.2.1-2.el7.x86_64.rpm | 28 MB 00:00:01 ------------------------------------------------------------------------------------------------------------------------------------------------ Total 15 MB/s | 30 MB 00:00:02 warning: /var/cache/yum/x86_64/7/couchdb/packages/couchdb-3.2.1-2.el7.x86_64.rpm: Header V4 RSA/SHA1 Signature, key ID 232ef177: NOKEY Retrieving key from https://couchdb.apache.org/repo/keys.asc Importing GPG key 0x7A00258D: Userid : "The Apache Software Foundation (Package repository signing key) <[email protected]>" Fingerprint: 390e f70b b1ea 12b2 7739 6295 0ee6 2fb3 7a00 258d From : https://couchdb.apache.org/repo/keys.asc Retrieving key from https://couchdb.apache.org/repo/rpm-package-key.asc Importing GPG key 0x9657A78E: Userid : "Nicolae Vatamaniuc <[email protected]>" Fingerprint: 0bd7 a984 99c4 ab41 c910 ee65 fc04 dfbc 9657 a78e From : https://couchdb.apache.org/repo/rpm-package-key.asc Public key for couchdb-3.2.1-2.el7.x86_64.rpm is not installed Failing package is: couchdb-3.2.1-2.el7.x86_64 GPG Keys are configured as: https://couchdb.apache.org/repo/keys.asc, https://couchdb.apache.org/repo/rpm-package-key.asc ``` ## Expected Behaviour I expect installation to work. ## Your Environment Basic GCP Centos 7 image. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
