Hi list, Trying to upgrade someone's workstation here to 5.2 (was installed from a 5.0 DVD I think). The RPMs on our internal mirror are in-tact and pass a 'rpm -- checksig' test, yet when I run a 'yum upgrade' a large portion of them are corrupted and fail the GPG check. This seems to be isolated to yum, as downloading the RPM directly via FTP with wget or lftpget provides an RPM that *does* pass the GPG check. I have upgraded key packages to the latest version (eg. yum upgrade 'yum*') and tried again to no avail. Anyone seen this before? Thanks, Tom -- Tom Lanyon Systems Administrator NetSpot Pty Ltd
On Sun, Aug 24, 2008 at 7:24 PM, Tom Lanyon <tom at netspot.com.au> wrote:> Hi list, > > Trying to upgrade someone's workstation here to 5.2 (was installed from a > 5.0 DVD I think). > > The RPMs on our internal mirror are in-tact and pass a 'rpm --checksig' > test, yet when I run a 'yum upgrade' a large portion of them are corrupted > and fail the GPG check. > > This seems to be isolated to yum, as downloading the RPM directly via FTP > with wget or lftpget provides an RPM that *does* pass the GPG check. > > I have upgraded key packages to the latest version (eg. yum upgrade 'yum*') > and tried again to no avail. > > Anyone seen this before? >The only time I have seen it is where there is a bad HTTP proxy in between you and the server. It caches a bad rpm and then keeps it til hell freezes over. -- Stephen J Smoogen. -- BSD/GNU/Linux How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice"
On Mon, Aug 25, 2008 at 10:54:05AM +0930, Tom Lanyon wrote:> Hi list, > > Trying to upgrade someone's workstation here to 5.2 (was installed from a > 5.0 DVD I think). > > The RPMs on our internal mirror are in-tact and pass a 'rpm --checksig' > test, yet when I run a 'yum upgrade' a large portion of them are corrupted > and fail the GPG check. > > This seems to be isolated to yum, as downloading the RPM directly via FTP > with wget or lftpget provides an RPM that *does* pass the GPG check. > > I have upgraded key packages to the latest version (eg. yum upgrade 'yum*') > and tried again to no avail. > > Anyone seen this before?How are you sync'ing the RPM's on your internal mirror? Do you run createrepo locally to generate the metadata yourself or just rely on the mirror's information? Ray
On 25/08/2008, at 10:54 AM, Tom Lanyon wrote:> Hi list, > > Trying to upgrade someone's workstation here to 5.2 (was installed > from a 5.0 DVD I think). > > The RPMs on our internal mirror are in-tact and pass a 'rpm -- > checksig' test, yet when I run a 'yum upgrade' a large portion of > them are corrupted and fail the GPG check. > > This seems to be isolated to yum, as downloading the RPM directly > via FTP with wget or lftpget provides an RPM that *does* pass the > GPG check. > > I have upgraded key packages to the latest version (eg. yum upgrade > 'yum*') and tried again to no avail. > > Anyone seen this before? > > Thanks, > TomThere's no proxy server in between these machines; nothing seems to corrupt the download when downloading manually via FTP. Also, yum seems to use the python URLGrabber module to download its RPMs. I just wrote a quick python test script to download some problematic RPMs using the URLGrabber module and they also passed the RPM GPG check! Yum is doing something crazy internally with the RPMs its downloading into memory, I think.
On Aug 24, 2008, at 9:25 PM, "Tom Lanyon" <tom at netspot.com.au> wrote:> Hi list, > > Trying to upgrade someone's workstation here to 5.2 (was installed > from a 5.0 DVD I think). > > The RPMs on our internal mirror are in-tact and pass a 'rpm -- > checksig' test, yet when I run a 'yum upgrade' a large portion of > them are corrupted and fail the GPG check. > > This seems to be isolated to yum, as downloading the RPM directly > via FTP with wget or lftpget provides an RPM that *does* pass the > GPG check. > > I have upgraded key packages to the latest version (eg. yum upgrade > 'yum*') and tried again to no avail. > > Anyone seen this before? >Make sure the mime type for .rpm files is text/plain and not x- application/octet-stream. -Ross ______________________________________________________________________ This e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify the sender and permanently delete the original and any copy or printout thereof.
On Sun, Aug 24, 2008 at 6:24 PM, Tom Lanyon <tom at netspot.com.au> wrote:> Hi list, > > Trying to upgrade someone's workstation here to 5.2 (was installed from a > 5.0 DVD I think). > > The RPMs on our internal mirror are in-tact and pass a 'rpm --checksig' > test, yet when I run a 'yum upgrade' a large portion of them are corrupted > and fail the GPG check. >Since yum has a local cache you may need to invoke one of the "clean" flags for yum. * clean [ packages | headers | metadata | dbcache | all ] If you do a clean all we will not know which of the set is bogus... My bet is the dbcache.... with metadata to show. Given what we now know, it might be good to copy the cache of packages and do a local compare of any that are freshly downloaded. Since yum depends on RPM you should be able to download individual packages and then inspect each with RPM tools as you are doing... -- NiftyCluster T o m M i t c h e l l