[Bug 1360582] Re: Can't manually install clicks "Signature verification error" since #205
I solved adding option "--allow-untrusted": pkcon --allow-untrusted install-local provissima.username_0.1_all.click -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks "Signature verification error" since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks "Signature verification error" since #205
Same problem for me: phablet@ubuntu-phablet:~/Downloads$ pkcon install-local provissima.username_0.1_all.click Installing files [=] Finished [=] Installing files [=] Waiting for authentication[=] Starting [=] Finished [=] Fatal error: /home/phablet/Downloads/provissima.username_0.1_all.click failed to install. Cannot install /home/phablet/Downloads/provissima.username_0.1_all.click: Signature verification error: debsig: Origin Signature check failed. This deb might not be signed. There's a fix for this bug? Thank you -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks "Signature verification error" since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
This issue is still occuring in my system with: Ubuntu 14.04 LTS (upgraded from 12.04 LTS) qtcreator-plugin-ubuntu 3.1.1+14.10.20141029-0ubuntu1~0trusty3 click 0.4.33.1 Ubuntu image version 296 ** Attachment added: Screenshot from 2014-11-01 23:53:46.png https://bugs.launchpad.net/ubuntu/+source/phablet-tools/+bug/1360582/+attachment/4251116/+files/Screenshot%20from%202014-11-01%2023%3A53%3A46.png -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
The last piece of this was fixed a couple of days ago: phablet-tools (1.1+14.10.20140909-0ubuntu1) utopic; urgency=low [ Michael Vogt ] * click-buddy: adding --allow-untrusted to the pkcon install-local call. -- Ubuntu daily release ps-jenk...@lists.canonical.com Tue, 09 Sep 2014 20:43:43 + ** Changed in: phablet-tools (Ubuntu) Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Branch linked: lp:~mvo/phablet-tools/pkcon-allow-untrusted ** Changed in: phablet-tools (Ubuntu) Status: Confirmed = Fix Committed ** Changed in: phablet-tools (Ubuntu) Importance: Undecided = High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
This bug was fixed in the package qtcreator-plugin-ubuntu - 3.1.1+14.10.20140908-0ubuntu1 --- qtcreator-plugin-ubuntu (3.1.1+14.10.20140908-0ubuntu1) utopic; urgency=low [ Michael Vogt ] * Run pkcon with --allow-untrusted (LP: #1360582). (LP: #1360582) -- Ubuntu daily release ps-jenk...@lists.canonical.com Mon, 08 Sep 2014 09:47:27 + ** Changed in: qtcreator-plugin-ubuntu (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
This bug was fixed in the package click - 0.4.32.1 --- click (0.4.32.1) utopic; urgency=low [ Michael Vogt ] * fix autopkgtest failure found in 0.4.32 -- Ubuntu daily release ps-jenk...@lists.canonical.com Tue, 09 Sep 2014 10:02:00 + ** Changed in: click (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Branch linked: lp:ubuntu/utopic-proposed/qtcreator-plugin-ubuntu ** Branch linked: lp:ubuntu/utopic-proposed/click -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Also affects: qtcreator-plugin-ubuntu (Ubuntu) Importance: Undecided Status: New ** Changed in: qtcreator-plugin-ubuntu (Ubuntu) Status: New = In Progress ** Changed in: qtcreator-plugin-ubuntu (Ubuntu) Importance: Undecided = High ** Changed in: qtcreator-plugin-ubuntu (Ubuntu) Assignee: (unassigned) = Michael Vogt (mvo) ** Changed in: click (Ubuntu) Status: Confirmed = In Progress ** Changed in: click (Ubuntu) Importance: Undecided = High ** Changed in: click (Ubuntu) Assignee: (unassigned) = Michael Vogt (mvo) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Branch linked: lp:~mvo/click/lp1360582-honor-enum-only-trusted -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Branch linked: lp:~mvo/qtcreator-plugin-ubuntu/lp1360582 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Project changed: click = packagekit -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
The packagekit patch has landed upstream and I pushed it into utopic now. Next step is that the SDK need to run pkcon --allow-untrusted when it installs the locally build click. Plus it needs to add a versionized dependency to packagekit-tools (= 0.8.17-4ubuntu2) to ensure the commandline option is available. Then we can land the click change in lp:~mvo/click/lp1360582-honor-enum-only-trusted which will enable the authentication checks again. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Branch linked: lp:ubuntu/utopic-proposed/packagekit -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/packagekit/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
This bug also breaks the SDK (running application on the phone from QtCreator), since we use pkcon-local to install click packages. Our app launcher script needs to run as phablet user, so we have no way of running click install --allow-unauthenticated. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/phablet-tools/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
I tested on our rtm image r6; seems I can still install apps from store, which means we could backout the click change that introduced the signature checking. ** Also affects: click (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Tags added: lt-category-noissue lt-date-20140825 lt-prio-medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Tags removed: lt-prio-medium ** Tags added: lt-blocker lt-prio-high -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
I think the correct fix is as follows: * PackageKit has a transaction flag on the InstallFiles method for whether it's allowed to install unsigned files. We should certainly honour that, and return one of the values accepted by pk_backend_job_error_code_is_need_untrusted, then I believe that pkcon will fall back to trying the transaction in allow-unsigned mode. * We need to figure out how to allow untrusted installations via pkcon from the command line but not from the scope. I think it may be possible to do something with PolicyKit here. Sadly the scope uses InstallFiles rather than InstallPackages, or else it would be relatively trivial. I haven't had a chance to figure this out in detail, but note that click/pk-plugin/pk-plugin-click.c:pk_plugin_transaction_get_action accepts the org.freedesktop.packagekit.package-install-untrusted action. If you really need to revert anything for now, then please don't revert the whole thing. Rather, just revert r499 from lp:click/devel (that is, reinstate r497). That way we'll keep the signing framework in general, packages that are signed with an invalid signature will still be rejected, and we'll have less work to put things back later. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: click (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
Thanks Colin for your input on this. I looked into this and attached is a patch to the click plugin that implements setting the PK_ERROR_ENUM_MISSING_GPG_SIGNATURE, and honoring PK_TRANSACTION_FLAG_ENUM_ONLY_TRUSTED. However this will not work for us as it requires the user to answer a interactive question which seems to be inelegant. The alternative approach would be to add code to pkcon to honor either a environment variable or a commandline swtich and pass that directly in the task to avoid the interactive prompt. I will work on this next and attach code for that. ** Patch added: Click plugin patch that uses ENUM_ONLY_TRUSTED/ERROR_MISSING_GPG_SIGNATURE https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+attachment/4186910/+files/lp1360582-crude.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
will SDK work without further changes with the patch by mvo or do we need to coordinate some landing? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
Hi, this is doing it in a different way than my previous patch that does not require a interactive answer during install. It does require however that the patch goes to the packagekit upstream people. This needs the lp:~mvo/click/lp1360582-honor-enum-only-trusted/ branch too. ** Patch added: packagekit patch https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+attachment/4186998/+files/pk-allow-unauthenticated.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Bug watch added: freedesktop.org Bugzilla #83075 https://bugs.freedesktop.org/show_bug.cgi?id=83075 ** Also affects: click via https://bugs.freedesktop.org/show_bug.cgi?id=83075 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
Launchpad has imported 1 comments from the remote bug at https://bugs.freedesktop.org/show_bug.cgi?id=83075. If you reply to an imported comment from within Launchpad, your comment will be sent to the remote bug automatically. Read more about Launchpad's inter-bugtracker facilities at https://help.launchpad.net/InterBugTracking. On 2014-08-26T00:20:27+00:00 Michael Vogt wrote: Created attachment 105257 add a new --allow-unauthenticated option to pkcon In order to install packages without a signature (e.g. to test locally build projects) it would be nice to have a way to tell packagekit in advance that its ok to install a package without authentication (i.e. avoid the interactive question during the task execution). The use case is a SDK that can build a test package from your project and install it into a emulator to do a full end-to-end test of the project. Attached is a patch that implements a pkcon --allow-unauthenticated option that clear the PK_TRANSACTION_FLAG_ENUM_ONLY_TRUSTED flag when this option is used. Feedback welcome! If that looks acceptable I'm happy to do the man-page addition as well. Thanks, Michael Reply at: https://bugs.launchpad.net/ubuntu/+source/phablet- tools/+bug/1360582/comments/10 ** Changed in: click Status: Unknown = Confirmed ** Changed in: click Importance: Unknown = Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
@alexander: we definitely need to coordinate the landing. For a hotfix I created lp:~mvo/click/lp1360582-hotfix that implements Colins suggestion in #5. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/click/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1360582] Re: Can't manually install clicks Signature verification error since #205
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: phablet-tools (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1360582 Title: Can't manually install clicks Signature verification error since #205 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/phablet-tools/+bug/1360582/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
