LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 05-05-2017, 01:55 PM   #1
bilbod
Member
 
Registered: Mar 2003
Posts: 134

Rep: Reputation: 33
Problem with slackrepo and slackpkg+?


I created a personal SBo repository using slackrepo.

I am trying to access it using slackpkg with slackpkg+ plugin.

1st I run

Code:
slackpkg update gpg
and it imports the gpg key for a Slackware website mirror, the slackpkg+ website, and my personal repository.

Then I run

Code:
slackpkg update
It starts downloading files (I think it is metadata) from the repositories.

Part way through I get this error:

Code:
                        !!! F A T A L !!!
    Repository 'mySlackRepo' FAILS the CHECKSUMS.md5 signature check
    The file may be corrupted or the gpg key may be not valid.
    Remember to import keys by launching 'slackpkg update gpg'.
Then it continues downloading more metadata files. At the finish:

Code:
  WARNING! One or more errors occurred while slackpkg was running
------------------------------------------------------------------------------
Repository 'mySlackRepo' FAILS the CHECKSUMS.md5 signature check.
Try to run 'slackpkg update gpg'
I ran

Code:
slackrepo lint
There were 2 Warnings.

Code:
================================================================================
SUMMARY                                                                 14:45:22
================================================================================

Logfile:     /var/log/slackrepo/SBo/slackrepo_2017-05-05_14:40:50.log
Runtime:     0h 4m 32s
Warnings:    2
  development/jdk: Source has been modified upstream.
  multimedia/pepperflash-plugin: Inappropriate directory. pepperflash-plugin-25.0.0.148-x86_64-2_SBo.tgz
I rebuilt the 2 offending packages ran

Code:
slackrepo lint
again but got the same 2 warnings.

Is there some way to get slackrepo to recreate all the metadata with the correct gpg key without rebuilding the entire repository (which takes many hours)?
 
Old 05-05-2017, 02:32 PM   #2
Panagiotis Nik
LQ Newbie
 
Registered: Jul 2014
Distribution: Slackware64-Current, Slackware64-14.2
Posts: 22

Rep: Reputation: Disabled
Did you have enable the Variables for calling gen_repos_files.sh in your slackrepo_ID.conf ?
...
# Change this to '1' if you want to enable gen_repos_files.sh
# If enabled, you *must* set correct values for all the variables below!
...

Also you can use alien bob script separately for your repo metadata
without involve slackrepo:
http://www.slackware.com/~alien/tool...repos_files.sh

Last edited by Panagiotis Nik; 05-05-2017 at 02:35 PM.
 
Old 05-05-2017, 02:47 PM   #3
bassmadrigal
LQ Guru
 
Registered: Nov 2003
Location: West Jordan, UT, USA
Distribution: Slackware
Posts: 6,012

Rep: Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682
It should regenerate all the repository files every time a single package is created/updated. Is slackrepo generating .asc files for your new packages?

Code:
================================================================================
SUMMARY                                                                 15:40:32
================================================================================

Logfile:     /var/log/slackrepo/SBo/slackrepo_2017-05-05_15:39:59.log
Runtime:     0h 0m 33s
Added:       1
  system/virtualbox-kernel/virtualbox-kernel-5.0.30_4.4.38-x86_64-1_SBo.tgz
Updated:     1
  multimedia/x265/x265-2.4-x86_64-1_SBo.tgz
Rebuilt:     1
  multimedia/ffmpeg/ffmpeg-3.2.4-x86_64-2_SBo.tgz
================================================================================
gen_repos_files.sh                                                      15:40:32
================================================================================

# -------------------------------------------------------------------#
# $Id: gen_repos_files.sh,v 1.92 2014/07/31 20:27:53 root Exp root $ #
# -------------------------------------------------------------------#
--- Generating repository metadata for /var/lib/slackrepo/SBo/packages/14.2/x86_64 ---
--- Repository owner is Jeremy Brent Hansen (bassmadrigal) <jebrhansen+SBo@gmail.com> ---

--> Generating .asc file for ffmpeg-3.2.4-x86_64-2_SBo.tgz
--> Generating .asc file for x265-2.4-x86_64-1_SBo.tgz
--> Generating .asc file for virtualbox-kernel-5.0.30_4.4.38-x86_64-1_SBo.tgz

Finished gen_repos_files.sh at 15:43:24
And I don't know if this would even help (possibly not this specific issue), but there's a thread I created with some setup procedures I used and then a bunch of questions I had. It turned into some great discussion and there might be some information in there that you could benefit from. Feel free to check it out.
 
Old 05-05-2017, 03:27 PM   #4
bilbod
Member
 
Registered: Mar 2003
Posts: 134

Original Poster
Rep: Reputation: 33
Quote:
Originally Posted by Panagiotis Nik View Post
Did you have enable the Variables for calling gen_repos_files.sh in your slackrepo_ID.conf ?
...
# Change this to '1' if you want to enable gen_repos_files.sh
# If enabled, you *must* set correct values for all the variables below!
...

Also you can use alien bob script separately for your repo metadata
without involve slackrepo:
http://www.slackware.com/~alien/tool...repos_files.sh
Code:
USE_GENREPOS='1'
I have that set up correctly.

I tried running the script directly but it failed. It was looking for RSS_UUID. That is in my slackrepo_ID.conf file but it does not read that file and I could find no docs on a config file for for gen_repos_files.sh.
 
Old 05-05-2017, 03:43 PM   #5
bilbod
Member
 
Registered: Mar 2003
Posts: 134

Original Poster
Rep: Reputation: 33
Quote:
Originally Posted by bassmadrigal View Post
It should regenerate all the repository files every time a single package is created/updated. Is slackrepo generating .asc files for your new packages?

And I don't know if this would even help (possibly not this specific issue), but there's a thread I created with some setup procedures I used and then a bunch of questions I had. It turned into some great discussion and there might be some information in there that you could benefit from. Feel free to check it out.
I did read your tutorial and it helped me get slackrepo configured.

slackrepo is generating .asc files for my packages.

Code:
Repository 'mySlackRepo' FAILS the CHECKSUMS.md5 signature check.
The offending file is CHECKSUMS.md5. If I delete that file, will slackrepo recreate it when I run

Code:
slackrepo lint
Also, something I forgot to mention. When I was setting up slackrepo, I generated several gpg keys. It is possible that a couple of packages were signed with a different gpg key than is currently in use. Is there a way to check that?
 
Old 05-05-2017, 09:26 PM   #6
bassmadrigal
LQ Guru
 
Registered: Nov 2003
Location: West Jordan, UT, USA
Distribution: Slackware
Posts: 6,012

Rep: Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682Reputation: 3682
It should recreate CHECKSUMS.md5 every time a package is added/updated/removed.

As for checking what key signed what, that's beyond my knowledge. I created a gpg key for the first time when using slackrepo and my knowledge is mainly limited to that (which I've likely mostly forgotten at this point). My first thought would be to write a bash script using a for loop to run gpg -verify (it goes gpg -verify packagename.tgz.asc packagename.tgz) against all the packages in your repo. There's probably a better way to do it, but I'm not aware of one.
 
Old 05-05-2017, 11:24 PM   #7
bilbod
Member
 
Registered: Mar 2003
Posts: 134

Original Poster
Rep: Reputation: 33
Quote:
Originally Posted by bassmadrigal View Post
It should recreate CHECKSUMS.md5 every time a package is added/updated/removed.

As for checking what key signed what, that's beyond my knowledge. I created a gpg key for the first time when using slackrepo and my knowledge is mainly limited to that (which I've likely mostly forgotten at this point). My first thought would be to write a bash script using a for loop to run gpg -verify (it goes gpg -verify packagename.tgz.asc packagename.tgz) against all the packages in your repo. There's probably a better way to do it, but I'm not aware of one.
I looked at the date stamp for GPG-KEY file and rebuilt all packages built on that date or earlier. There were only a hand full and it took about 3 minutes.

I tried slackpkg+ again and it gives the same error so that is not the problem.

I tried gpg -verify on CHECKSUMS.md5 on the repo server and it passed. So I looked at the gpg keys and the server is using a different key than is in the GPG-KEY file on the server. So I recreated the GPG-KEY file

Code:
gpg --list-keys "$REPOSOWNERGPG" > GPG-KEY
gpg -a --export "$REPOSOWNERGPG" >> GPG-KEY

The second command creates ascii armored output and exports it to a GPG-KEY file (I got those commands from gen_repos_files.sh).

I ran

Code:
slackpkg update gpg
slackpkg update

No errors, Problem Solved.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Can't Build qt5 with slackrepo in VM bilbod Slackware 15 05-03-2017 02:30 AM
[SOLVED] slackrepo Problem with gpg bilbod Slackware 5 04-28-2017 06:54 AM
[SOLVED] How To Install Slackrepo? bilbod Slackware 16 04-26-2017 09:56 PM
slackrepo and custom SlackBuild atelszewski Slackware 4 11-01-2016 06:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 09:47 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration