I am trying to prepare the zones for pkg-get using zonemgr (I know I can use -G to install packages, but I want our students to play around with pkg-get). My problem is signature verification. I tried wget mirrors.html; gpg mirrors.html as specified on blastwave, but for some reason gpg does not work.
Help would be great. (this is zonemgr 1.8.1) Thanks Manish --- zone creation script --- -bash-3.00# cat createzonesspring2007.sh #!/usr/bin/bash # usage ./createzonesspring2007.sh zonename=testtorresd ipaddress=131.247.16.175 rootpassword=test1234 zonepassword=test5678 echo ":$zonename:" echo ":$ipaddress:" echo ":$rootpassword:" echo ":$zonepassword:" zonemgr -a add -n $zonename -z "/export/home/zones" \ -P "$rootpassword" -R "/root|/usr/bin/bash" \ -I "$ipaddress|elxl0|25|$zonename" \ -s "basic|lock" -S ssh \ -C "/etc/default/login" \ -C "/etc/default/su" \ -C "/etc/nsswitch.conf" \ -C "/etc/resolv.conf" \ -C "/root/zonecfgs/chgpwd.sh|/root/chgpwd.sh" \ -G "expect" \ -X "/opt/csw/bin/wget http://www.blastwave.org/mirrors.html" \ -X "/opt/csw/bin/gpg --import mirrors.html" \ -X "mkdir /export/home" \ -X "useradd -d /export/home/$zonename -m -s /usr/bin/bash $zonename" \ -X "/root/chgpwd.sh $zonename $zonepassword" \ -C "/etc/ssh/sshd_config" & wait --- output --- -bash-3.00# createzonesspring2007.sh :testtorresd: :131.247.16.175: :test1234: :test5678: Checking to see if the zone IP address (131.247.16.175) is already in use...IP is available. zlogin: zone 'testtorresd' unknown Usage: grep -hblcnsviw pattern file . . . Error: The default route doesn't match the subnet of the zone IP address. This may cause the zone to hang on reboot if the zone cannot connect to the DNS server. To resolve this you may need to login to the console with "zlogin -C testtorresd" and complete the DNS configuration in the console. Preparing to install zone <testtorresd>. Creating list of files to copy from the global zone. Copying <16501> files to the zone. Initializing zone product registry. Determining zone package initialization order. Preparing to initialize <958> packages on the zone. Initialized <958> packages on zone. Zone <testtorresd> is initialized. Installation of these packages generated warnings: <SUNWwgetu CSWcyrusimapd> The file </export/home/zones/testtorresd/root/var/sadm/system/logs/install_log> contains a log of the zone installation. Creating the sysidcfg file for automated zone configuration. Copying (/etc/default/login) from the global zone to (/etc/default/login) in the non-global zone. Copying (/etc/default/su) from the global zone to (/etc/default/su) in the non-global zone. Copying (/etc/nsswitch.conf) from the global zone to (/etc/nsswitch.conf) in the non-global zone. Copying (/etc/resolv.conf) from the global zone to (/etc/resolv.conf) in the non-global zone. Copying (/root/zonecfgs/chgpwd.sh) from the global zone to (/root/chgpwd.sh) in the non-global zone. Copying (/etc/ssh/sshd_config) from the global zone to (/etc/ssh/sshd_config) in the non-global zone. Copy completed. Booting zone for the first time. Waiting for first boot tasks to complete. Updating netmask information. Copying (/etc/nsswitch.conf) from the global zone to (/etc/nsswitch.conf) in the non-global zone. Copy completed. Updating /etc/inet/hosts of the global zone with the testtorresd IP information. Setting the root user's home directory to /root Setting the root user's shell to /usr/bin/bash Disabling un-necessary services via basic method for the default services. /opt/csw/bin/zonemgr: line 3442: [: too many arguments Install md5 package in zone testtorresd in order to properly verify Blastwave packages... Installing package "expect" in zone testtorresd... Running "/opt/csw/bin/wget http://www.blastwave.org/mirrors.html" in zone testtorresd... --19:47:28-- http://www.blastwave.org/mirrors.html => `mirrors.html' Resolving www.blastwave.org... 66.225.151.251 Connecting to www.blastwave.org|66.225.151.251|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 19,089 (19K) [text/html] 0K .......... ........ 100% 116.86 KB/s 19:47:28 (116.86 KB/s) - `mirrors.html' saved [19089/19089] Running "/opt/csw/bin/gpg --import mirrors.html" in zone testtorresd... gpg: WARNING: using insecure memory! gpg: please see http://www.gnupg.org/faq.html for more information gpg: directory `//.gnupg' created gpg: can't open `/opt/csw/share/gnupg/options.skel': No such file or directory gpg: keyring `//.gnupg/secring.gpg' created gpg: keyring `//.gnupg/pubring.gpg' created gpg: //.gnupg/trustdb.gpg: trustdb created gpg: key E12E9D2F: public key "Distribution Manager <[EMAIL PROTECTED]>" imported gpg: Total number processed: 1 gpg: imported: 1 gpg: no ultimately trusted keys found Running "mkdir /export/home" in zone testtorresd... Running "useradd -d /export/home/testtorresd -m -s /usr/bin/bash testtorresd" in zone testtorresd... UX: useradd: testtorresd name too long. 64 blocks Running "/root/chgpwd.sh testtorresd test5678" in zone testtorresd... spawn passwd testtorresd New Password: test5678 Re-enter new Password: test5678 passwd: password successfully changed for testtorresd Zone testtorresd is complete and ready to use. -bash-3.00# zlogin -C testtorresd [Connected to zone 'testtorresd' console] testtorresd console login: testtorresd Password: Sun Microsystems Inc. SunOS 5.10 Generic January 2005 -bash-3.00$ su - root Password: Feb 8 19:48:22 testtorresd su: 'su root' succeeded for testtorr on /dev/console Sun Microsystems Inc. SunOS 5.10 Generic January 2005 --- trying to install apache --------------------------------------------------------------- -bash-3.00# pkg-get install apache WARNING: no catalog file for site ibiblio.org Updating catalog file first Getting catalog... --19:48:30-- http://ibiblio.org/pub/packages/solaris/csw/unstable/i386/5.10/catalog => `catalog' Resolving ibiblio.org... 152.46.7.80 Connecting to ibiblio.org|152.46.7.80|:80... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: ftp://ftp.ibiblio.org/pub/packages/solaris/csw/unstable/i386/5.10/catalog [following] --19:48:30-- ftp://ftp.ibiblio.org/pub/packages/solaris/csw/unstable/i386/5.10/catalog => `catalog' Resolving ftp.ibiblio.org... 152.46.7.80 Connecting to ftp.ibiblio.org|152.46.7.80|:21... connected. Logging in as anonymous ... Logged in! ==> SYST ... done. ==> PWD ... done. ==> TYPE I ... done. ==> CWD /pub/packages/solaris/csw/unstable/i386/5.10 ... done. ==> PASV ... done. ==> RETR catalog ... done. Length: 190,824 (186K) (unauthoritative) 100%[====================================>] 190,824 538.63K/s 19:48:31 (536.48 KB/s) - `catalog' saved [190824] gpg: WARNING: using insecure memory! gpg: please see http://www.gnupg.org/faq.html for more information gpg: Signature made Tue Feb 06 00:49:22 2007 EST using DSA key ID E12E9D2F gpg: Can't check signature: public key not found ERROR: catalog failed signature check (status 2) You need to install the public key, either manually, or automatically through a keyserver. For keyserver use, try one of echo keyserver search.keyserver.net >>/.gnupg/options echo keyserver search.keyserver.net >>/.gnupg/gpg.conf For manual install of the key (recommended), try wget http://www.blastwave.org/mirrors.html gpg --import mirrors.html Catalog failed signature verify. Quitting. -bash-3.00# This message posted from opensolaris.org _______________________________________________ zones-discuss mailing list zones-discuss@opensolaris.org