I am trying to prepare the zones for pkg-get using zonemgr (I know I can use -G
to install packages, but I want our students to play around with pkg-get). My
problem is signature verification. I tried wget mirrors.html; gpg mirrors.html
as specified on blastwave, but for some reason gpg does not work.
Help would be great. (this is zonemgr 1.8.1)
Thanks
Manish
--- zone creation script ---
-bash-3.00# cat createzonesspring2007.sh
#!/usr/bin/bash
# usage ./createzonesspring2007.sh
zonename=testtorresd
ipaddress=131.247.16.175
rootpassword=test1234
zonepassword=test5678
echo ":$zonename:"
echo ":$ipaddress:"
echo ":$rootpassword:"
echo ":$zonepassword:"
zonemgr -a add -n $zonename -z "/export/home/zones" \
-P "$rootpassword" -R "/root|/usr/bin/bash" \
-I "$ipaddress|elxl0|25|$zonename" \
-s "basic|lock" -S ssh \
-C "/etc/default/login" \
-C "/etc/default/su" \
-C "/etc/nsswitch.conf" \
-C "/etc/resolv.conf" \
-C "/root/zonecfgs/chgpwd.sh|/root/chgpwd.sh" \
-G "expect" \
-X "/opt/csw/bin/wget http://www.blastwave.org/mirrors.html"; \
-X "/opt/csw/bin/gpg --import mirrors.html" \
-X "mkdir /export/home" \
-X "useradd -d /export/home/$zonename -m -s /usr/bin/bash
$zonename" \
-X "/root/chgpwd.sh $zonename $zonepassword" \
-C "/etc/ssh/sshd_config" &
wait
--- output ---
-bash-3.00# createzonesspring2007.sh
:testtorresd:
:131.247.16.175:
:test1234:
:test5678:
Checking to see if the zone IP address (131.247.16.175) is already in use...IP
is available.
zlogin: zone 'testtorresd' unknown
Usage: grep -hblcnsviw pattern file . . .
Error: The default route doesn't match the subnet of the zone IP address.
This may cause the zone to hang on reboot if the zone cannot connect to the
DNS server. To resolve this you may need to login to the console with
"zlogin -C testtorresd" and complete the DNS configuration in the console.
Preparing to install zone <testtorresd>.
Creating list of files to copy from the global zone.
Copying <16501> files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
Preparing to initialize <958> packages on the zone.
Initialized <958> packages on zone.
Zone <testtorresd> is initialized.
Installation of these packages generated warnings: <SUNWwgetu CSWcyrusimapd>
The file </export/home/zones/testtorresd/root/var/sadm/system/logs/install_log>
contains a log of the zone installation.
Creating the sysidcfg file for automated zone configuration.
Copying (/etc/default/login) from the global zone to (/etc/default/login) in
the non-global zone.
Copying (/etc/default/su) from the global zone to (/etc/default/su) in the
non-global zone.
Copying (/etc/nsswitch.conf) from the global zone to (/etc/nsswitch.conf) in
the non-global zone.
Copying (/etc/resolv.conf) from the global zone to (/etc/resolv.conf) in the
non-global zone.
Copying (/root/zonecfgs/chgpwd.sh) from the global zone to (/root/chgpwd.sh) in
the non-global zone.
Copying (/etc/ssh/sshd_config) from the global zone to (/etc/ssh/sshd_config)
in the non-global zone.
Copy completed.
Booting zone for the first time.
Waiting for first boot tasks to complete.
Updating netmask information.
Copying (/etc/nsswitch.conf) from the global zone to (/etc/nsswitch.conf) in
the non-global zone.
Copy completed.
Updating /etc/inet/hosts of the global zone with the testtorresd IP information.
Setting the root user's home directory to /root
Setting the root user's shell to /usr/bin/bash
Disabling un-necessary services via basic method for the default services.
/opt/csw/bin/zonemgr: line 3442: [: too many arguments
Install md5 package in zone testtorresd in order
to properly verify Blastwave packages...
Installing package "expect" in zone testtorresd...
Running "/opt/csw/bin/wget http://www.blastwave.org/mirrors.html"; in zone
testtorresd...
--19:47:28-- http://www.blastwave.org/mirrors.html
=> `mirrors.html'
Resolving www.blastwave.org... 66.225.151.251
Connecting to www.blastwave.org|66.225.151.251|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 19,089 (19K) [text/html]
0K .......... ........ 100% 116.86 KB/s
19:47:28 (116.86 KB/s) - `mirrors.html' saved [19089/19089]
Running "/opt/csw/bin/gpg --import mirrors.html" in zone testtorresd...
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: directory `//.gnupg' created
gpg: can't open `/opt/csw/share/gnupg/options.skel': No such file or directory
gpg: keyring `//.gnupg/secring.gpg' created
gpg: keyring `//.gnupg/pubring.gpg' created
gpg: //.gnupg/trustdb.gpg: trustdb created
gpg: key E12E9D2F: public key "Distribution Manager <[EMAIL PROTECTED]>"
imported
gpg: Total number processed: 1
gpg: imported: 1
gpg: no ultimately trusted keys found
Running "mkdir /export/home" in zone testtorresd...
Running "useradd -d /export/home/testtorresd -m -s /usr/bin/bash testtorresd"
in zone testtorresd...
UX: useradd: testtorresd name too long.
64 blocks
Running "/root/chgpwd.sh testtorresd test5678" in zone testtorresd...
spawn passwd testtorresd
New Password: test5678
Re-enter new Password: test5678
passwd: password successfully changed for testtorresd
Zone testtorresd is complete and ready to use.
-bash-3.00# zlogin -C testtorresd
[Connected to zone 'testtorresd' console]
testtorresd console login: testtorresd
Password:
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
-bash-3.00$ su - root
Password:
Feb 8 19:48:22 testtorresd su: 'su root' succeeded for testtorr on /dev/console
Sun Microsystems Inc. SunOS 5.10 Generic January 2005
--- trying to install apache
---------------------------------------------------------------
-bash-3.00# pkg-get install apache
WARNING: no catalog file for site ibiblio.org
Updating catalog file first
Getting catalog...
--19:48:30--
http://ibiblio.org/pub/packages/solaris/csw/unstable/i386/5.10/catalog
=> `catalog'
Resolving ibiblio.org... 152.46.7.80
Connecting to ibiblio.org|152.46.7.80|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location:
ftp://ftp.ibiblio.org/pub/packages/solaris/csw/unstable/i386/5.10/catalog
[following]
--19:48:30--
ftp://ftp.ibiblio.org/pub/packages/solaris/csw/unstable/i386/5.10/catalog
=> `catalog'
Resolving ftp.ibiblio.org... 152.46.7.80
Connecting to ftp.ibiblio.org|152.46.7.80|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done. ==> PWD ... done.
==> TYPE I ... done. ==> CWD /pub/packages/solaris/csw/unstable/i386/5.10 ...
done.
==> PASV ... done. ==> RETR catalog ... done.
Length: 190,824 (186K) (unauthoritative)
100%[====================================>] 190,824 538.63K/s
19:48:31 (536.48 KB/s) - `catalog' saved [190824]
gpg: WARNING: using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
gpg: Signature made Tue Feb 06 00:49:22 2007 EST using DSA key ID E12E9D2F
gpg: Can't check signature: public key not found
ERROR: catalog failed signature check (status 2)
You need to install the public key, either manually,
or automatically through a keyserver.
For keyserver use, try one of
echo keyserver search.keyserver.net >>/.gnupg/options
echo keyserver search.keyserver.net >>/.gnupg/gpg.conf
For manual install of the key (recommended), try
wget http://www.blastwave.org/mirrors.html
gpg --import mirrors.html
Catalog failed signature verify. Quitting.
-bash-3.00#
This message posted from opensolaris.org
_______________________________________________
zones-discuss mailing list
zones-discuss@opensolaris.org
