The problem with nvidia is that it needs to compile drivers from source, and then you have to use your own key to sign it. Usually, dkms handles that (to some extent), but in this case that wouldn't work.
Personally, I avoid NVIDIA like the plague for that reason, but if you need GPUs, you probably can't. Yum can't completely skip GPG checks. You need to use rpm to install those RPMs. On Tue, Jul 23, 2024 at 9:08 AM keith.han...@lmco.com <keith.han...@lmco.com> wrote: > I am trying to add some nvidia rpms to a rhel7.9 diskless image and I am > getting some GPG errors I can work around. The below message is printed > during genimage. > > > > *“Warning: Enforcing GPG signature check globally as per active RPM > security policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this > message)”* > > > > > > And I get the errors below: > > > > otherpkgs3 37 MB/s | 46 kB 00:00 > > Dependencies resolved. > > > ================================================================================ > > Package Arch Version Repository > Size > > > ================================================================================ > > Installing: > > cuda-drivers x86_64 550.90.07-1 otherpkgs3 > 3.7 k > > Upgrading: > > kmod-nvidia-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 41 M > > nvidia-driver-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 125 M > > nvidia-driver-latest-dkms-NVML x86_64 3:550.90.07-1.el7 otherpkgs3 > 603 k > > nvidia-driver-latest-dkms-NvFBCOpenGL > > x86_64 3:550.90.07-1.el7 otherpkgs3 > 61 k > > nvidia-driver-latest-dkms-cuda x86_64 3:550.90.07-1.el7 otherpkgs3 > 452 k > > nvidia-driver-latest-dkms-cuda-libs x86_64 3:550.90.07-1.el7 otherpkgs3 > 56 M > > nvidia-driver-latest-dkms-devel x86_64 3:550.90.07-1.el7 otherpkgs3 > 19 k > > nvidia-driver-latest-dkms-libs x86_64 3:550.90.07-1.el7 otherpkgs3 > 133 M > > nvidia-modprobe-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 31 k > > nvidia-persistenced-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 38 k > > nvidia-xconfig-latest-dkms x86_64 3:550.90.07-1.el7 otherpkgs3 > 90 k > > Installing dependencies: > > nvidia-libXNVCtrl x86_64 3:550.90.07-2.el7 otherpkgs3 > 50 k > > nvidia-libXNVCtrl-devel x86_64 3:550.90.07-2.el7 otherpkgs3 > 59 k > > nvidia-settings x86_64 3:550.90.07-2.el7 otherpkgs3 > 1.5 M > > > > Transaction Summary > > > ================================================================================ > > Install 4 Packages > > Upgrade 11 Packages > > > > Total size: 358 M > > Downloading Packages: > > otherpkgs3 7.8 MB/s | 8.0 kB 00:00 > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x7CA8798C) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xFD431D51) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x2FA658E0) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xF4A80EB5) is > already installed > > GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x352C64E5) is > already installed > > The GPG keys listed for the "otherpkgs3" repository are already installed > but they are not correct for this package. > > Check that the correct key URLs are configured for this repository.. > Failing package is: cuda-drivers-550.90.07-1.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-libXNVCtrl-550.90.07-2.el7.x86_64.rpm is not > installed. Failing package is: nvidia-libXNVCtrl-3:550.90.07-2.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-libXNVCtrl-devel-550.90.07-2.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-libXNVCtrl-devel-3:550.90.07-2.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-settings-550.90.07-2.el7.x86_64.rpm is not > installed. Failing package is: nvidia-settings-3:550.90.07-2.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for kmod-nvidia-latest-dkms-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > kmod-nvidia-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-driver-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-NVML-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-NVML-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for > nvidia-driver-latest-dkms-NvFBCOpenGL-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-driver-latest-dkms-NvFBCOpenGL-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-cuda-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-cuda-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for > nvidia-driver-latest-dkms-cuda-libs-550.90.07-1.el7.x86_64.rpm is not > installed. Failing package is: > nvidia-driver-latest-dkms-cuda-libs-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-devel-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-devel-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-driver-latest-dkms-libs-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-driver-latest-dkms-libs-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-modprobe-latest-dkms-550.90.07-1.el7.x86_64.rpm is > not installed. Failing package is: > nvidia-modprobe-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-persistenced-latest-dkms-550.90.07-1.el7.x86_64.rpm > is not installed. Failing package is: > nvidia-persistenced-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Public key for nvidia-xconfig-latest-dkms-550.90.07-1.el7.x86_64.rpm is > not installed. Failing package is: > nvidia-xconfig-latest-dkms-3:550.90.07-1.el7.x86_64 > > GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release > > Error: GPG check FAILED > > yum invocation failed. > > > > > > I tried hacking the genimage code to force “yum --nogpgcheck -y -c” but I > still get the errors. For some reason genimage is creating the repos with > gpgcheck=1 and ALL the gpgkeys are the same as below. > > > > [otherpkgs3] > > name=otherpkgs3 > > > baseurl=file:///install/post/otherpkgs/rhels7.4/x86_64/nvidia-driver-local-repo-rhel7-550.90.07 > > gpgcheck=0 > > gpgkey=file:///XCAT/RPM-GPG-KEY-redhat-release > > skip_if_unavailable=True > > > > has anyone seen this problem and worked around it? > > _______________________ > > - Keith Hannum > > - keith.han...@lmco.com > > > _______________________________________________ > xCAT-user mailing list > xCAT-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/xcat-user >
_______________________________________________ xCAT-user mailing list xCAT-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/xcat-user
