We''re using RHN Satellite server to manage our packages and we have a custom package channel for third-party packages. Unfortunately, some of the packages in the channel are unsigned. Is there a way to get the Package Provider for yum to use the nogpgcheck option? Right now, I''m using an exec declaration instead of a package, but it seems kludgy to do this. Of course, from a larger perspective, I''d like to be able to pass any valid yum option via the package syntax in Puppet. (i.e. Download Only, Enable Repo, Group Install, etc.) thanks, Isaac -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Thu, 01 Apr 2010 22:19:39 -0400, Isaac Christoffersen <isaac.christoffersen@gmail.com> wrote:> We''re using RHN Satellite server to manage our packages and we have a > custom package channel for third-party packages. Unfortunately, some of > the packages in the channel are unsigned. > > Is there a way to get the Package Provider for yum to use the nogpgcheck > option? Right now, I''m using an exec declaration instead of a package, > but it seems kludgy to do this. > > Of course, from a larger perspective, I''d like to be able to pass any > valid yum option via the package syntax in Puppet. (i.e. Download Only, > Enable Repo, Group Install, etc.) > > thanks, > > IsaacAs an alternate idea, you could create your own GPG key and self-sign packages that don''t have a signature. This is what we do ourselves, since a lot of 3rd party vendors don''t sign their RPMs. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2/04/10 1:19 PM, Isaac Christoffersen wrote:> We''re using RHN Satellite server to manage our packages and we have a > custom package channel for third-party packages. Unfortunately, some of > the packages in the channel are unsigned. > > Is there a way to get the Package Provider for yum to use the nogpgcheck > option? Right now, I''m using an exec declaration instead of a package, > but it seems kludgy to do this. > > Of course, from a larger perspective, I''d like to be able to pass any > valid yum option via the package syntax in Puppet. (i.e. Download Only, > Enable Repo, Group Install, etc.) >There''s a ticket that relates to this: http://projects.reductivelabs.com/issues/2247 We''ve been tossing it around for a bit now. Feel free to add additional requirements/comments there. Cheers James Turnbull - -- Author of: * Pro Linux System Administration (http://tinyurl.com/linuxadmin) * Pulling Strings with Puppet (http://tinyurl.com/pupbook) * Pro Nagios 2.0 (http://tinyurl.com/pronagios) * Hardening Linux (http://tinyurl.com/hardeninglinux) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEVAwUBS7W7lyFa/lDkFHAyAQKaqQf9GNIuCatyJQa1U1xEU42yYheUp3M4kLje s9piruNYaW7RFmEMlBM/TbqAIZcOLKg/HbcnyUkKbzh82tFJ37//4UTeDHhwZe3V 369uRdUk1t+NsLM4fO3v9d3dfg2YROXHF9X+2IFd0xwuhLY5+RVOx/VuKW0cTCDf XE+EDmnaEvmddxY95cAFE0iO8JUo6G+crLjlLzQAQo5IMI+7s/kHPlPXpJGMwlih wmV/pfZmWumTKSMD0XXnjRgi+OksX+JBGMwQ/NsD99oMgk0Ebg6NoLn8o8q2UIjn PTFL45K5Sc9TsilW4/i1w/yqMho44RdkP9Gx02KHOCstuML6to3ZCQ==Vrr6 -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On 4/1/10 10:24 PM, James Cammarata wrote:> On Thu, 01 Apr 2010 22:19:39 -0400, Isaac Christoffersen > <isaac.christoffersen@gmail.com> wrote: > >> We''re using RHN Satellite server to manage our packages and we have a >> custom package channel for third-party packages. Unfortunately, some of >> the packages in the channel are unsigned. >> >> Is there a way to get the Package Provider for yum to use the nogpgcheck >> option? Right now, I''m using an exec declaration instead of a package, >> but it seems kludgy to do this. >> >> Of course, from a larger perspective, I''d like to be able to pass any >> valid yum option via the package syntax in Puppet. (i.e. Download Only, >> Enable Repo, Group Install, etc.) >> >> thanks, >> >> Isaac >> > As an alternate idea, you could create your own GPG key and self-sign > packages that don''t have a signature. This is what we do ourselves, since > a lot of 3rd party vendors don''t sign their RPMs. > >Yes. There are some reasons that we opted not to do this, mostly because we''re in a development/staging environment and would need to resign the packages for the release environment. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On 4/2/10 5:40 AM, James Turnbull wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 2/04/10 1:19 PM, Isaac Christoffersen wrote: > >> We''re using RHN Satellite server to manage our packages and we have a >> custom package channel for third-party packages. Unfortunately, some of >> the packages in the channel are unsigned. >> >> Is there a way to get the Package Provider for yum to use the nogpgcheck >> option? Right now, I''m using an exec declaration instead of a package, >> but it seems kludgy to do this. >> >> Of course, from a larger perspective, I''d like to be able to pass any >> valid yum option via the package syntax in Puppet. (i.e. Download Only, >> Enable Repo, Group Install, etc.) >> >> > There''s a ticket that relates to this: > > http://projects.reductivelabs.com/issues/2247 > > We''ve been tossing it around for a bit now. Feel free to add > additional requirements/comments there. > > Cheers > > James Turnbull > > - -- > Author of: > * Pro Linux System Administration (http://tinyurl.com/linuxadmin) > * Pulling Strings with Puppet (http://tinyurl.com/pupbook) > * Pro Nagios 2.0 (http://tinyurl.com/pronagios) > * Hardening Linux (http://tinyurl.com/hardeninglinux) > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.7 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iQEVAwUBS7W7lyFa/lDkFHAyAQKaqQf9GNIuCatyJQa1U1xEU42yYheUp3M4kLje > s9piruNYaW7RFmEMlBM/TbqAIZcOLKg/HbcnyUkKbzh82tFJ37//4UTeDHhwZe3V > 369uRdUk1t+NsLM4fO3v9d3dfg2YROXHF9X+2IFd0xwuhLY5+RVOx/VuKW0cTCDf > XE+EDmnaEvmddxY95cAFE0iO8JUo6G+crLjlLzQAQo5IMI+7s/kHPlPXpJGMwlih > wmV/pfZmWumTKSMD0XXnjRgi+OksX+JBGMwQ/NsD99oMgk0Ebg6NoLn8o8q2UIjn > PTFL45K5Sc9TsilW4/i1w/yqMho44RdkP9Gx02KHOCstuML6to3ZCQ=> =Vrr6 > -----END PGP SIGNATURE----- > >Thanks. I''ll make sure to do so. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
A not-so-elegant solution is to write your own yum provider that allows you to do this. In my case I found one online -- if you google yum_plus.rb you should be able to find it. If not let me know and I''ll post the work here. On Thu, Apr 1, 2010 at 10:19 PM, Isaac Christoffersen <isaac.christoffersen@gmail.com> wrote:> We''re using RHN Satellite server to manage our packages and we have a custom > package channel for third-party packages. Unfortunately, some of the > packages in the channel are unsigned. > > Is there a way to get the Package Provider for yum to use the nogpgcheck > option? Right now, I''m using an exec declaration instead of a package, but > it seems kludgy to do this. > > Of course, from a larger perspective, I''d like to be able to pass any valid > yum option via the package syntax in Puppet. (i.e. Download Only, Enable > Repo, Group Install, etc.) > > thanks, > > Isaac > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Sat, Apr 3, 2010 at 3:46 AM, Eric Shamow <eric.shamow@gmail.com> wrote:> A not-so-elegant solution is to write your own yum provider that > allows you to do this. In my case I found one online -- if you google > yum_plus.rb you should be able to find it. If not let me know and > I''ll post the work here. > > On Thu, Apr 1, 2010 at 10:19 PM, Isaac Christoffersen > <isaac.christoffersen@gmail.com> wrote: > > We''re using RHN Satellite server to manage our packages and we have a > custom > > package channel for third-party packages. Unfortunately, some of the > > packages in the channel are unsigned. > > > > Is there a way to get the Package Provider for yum to use the nogpgcheck > > option? Right now, I''m using an exec declaration instead of a package, > but > > it seems kludgy to do this. > > > > Of course, from a larger perspective, I''d like to be able to pass any > valid > > yum option via the package syntax in Puppet. (i.e. Download Only, Enable > > Repo, Group Install, etc.) > > > > thanks, > > > > Isaac > > > > > > -- >I just created a separate repository for those packages, and turned off gpgcheck. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.