Howto: Configure Suse Repositories

Updated ==> How to disable Smart signature check.

The Yast script is not useful anymore for SuSE 10.1 and above. Probably I will delete it in the future.

Updated ==> How to disable Smart signature check.[/b]

why do you edit the file ? it will be replaced by the next update ...

you can disable the gpg-check via commandline:
smart config --set rpm-check-signatures∞=false (disable)
smart config --set rpm-check-signatures∞=true (enable)

and if you use a keyserver, there is no good reason to disable it:
smart config --set keyserver=<akeyserver>
smart config --set keyserver="pgp.mit.edu"

here are some gpg-keys for some special packages often found in SuSE-Repos (for samba-packages, etc)
(from http://www.linux-club.de/ftopic58782.html)

rpm --import http://suse.osuosl.org/people/kraxel/8690E...xel-gpg-key.asc
rpm --import http://suse.osuosl.org/people/kraxel/8750D...gpg-key-old.asc
rpm -Uvh http://folk.uio.no/oeysteio/apt/suse/rpmke....0-4.noarch.rpm
rpm --import http://www.version6.net/apt/gpg-pubk...2-41b8bcbe.asc
rpm --import http://www.jpackage.org/jpackage.asc
rpm --import http://ftp.suse.com/pub/projects/samba/414...lle-gpg-key.asc
rpm --import ftp://ftp4.gwdg.de/pub/linux/misc/suser-j...ey-8EAA1216.asc
rpm --import http://www.skype.com/download/skype/...public-key.asc
rpm --import http://download.opengroupware.org/nightly/...Y.opengroupware


and fyi, I provide a package suser-oc2pus-smart-channels for easy adapting a valid channel-definition for SuSE-10.1
and my repository is also available as YaST-Source and YUM-source 8repomd)

see also here:
[apt - smart - yum - YaST] suser-oc2pus Repository
http://www.linux-club.de/ftopic62383.html

you can disable the gpg-check via commandline: .... snipped ........
....... and if you use a keyserver, there is no good reason to disable it: ........ snipped ........
....... here are some gpg-keys for some special packages often found in SuSE-Repos (for samba-packages, etc) .....snipped ........
....... and fyi, I provide a package suser-oc2pus-smart-channels for easy adapting a valid channel-definition for SuSE-10.1 and my repository is also available as YaST-Source and YUM-source 8repomd) ... snipped ....[/b]

oc2pus, AWESOME post. Many thanks.

why do you edit the file ? it will be replaced by the next update ...

you can disable the gpg-check via commandline:

smart config --set rpm-check-signatures∞=false (disable)
smart config --set rpm-check-signatures∞=true (enable)

and if you use a keyserver, there is no good reason to disable it:

smart config --set keyserver=<akeyserver>
smart config --set keyserver="pgp.mit.edu"

here are some gpg-keys for some special packages often found in SuSE-Repos (for samba-packages, etc)
(from http://www.linux-club.de/ftopic58782.html)

rpm --import http://suse.osuosl.org/people/kraxel...el-gpg-key.asc
rpm --import http://suse.osuosl.org/people/kraxel...pg-key-old.asc
rpm -Uvh http://folk.uio.no/oeysteio/apt/suse...0-4.noarch.rpm
rpm --import http://www.version6.net/apt/gpg-pubk...2-41b8bcbe.asc
rpm --import http://www.jpackage.org/jpackage.asc
rpm --import http://ftp.suse.com/pub/projects/sam...le-gpg-key.asc
rpm --import ftp://ftp4.gwdg.de/pub/linux/misc/su...y-8EAA1216.asc
rpm --import http://www.skype.com/download/skype/...public-key.asc
rpm --import http://download.opengroupware.org/ni....opengroupware

and fyi, I provide a package suser-oc2pus-smart-channels for easy adapting a valid channel-definition for SuSE-10.1
and my repository is also available as YaST-Source and YUM-source 8repomd)
see also here:
[apt - smart - yum - YaST] suser-oc2pus Repository
http://www.linux-club.de/ftopic62383.html
[/b]

Great Post. I have updated the how to. Still missing the script for ZMD repositories. The basig command to use is something like this:

root@linux# /usr/lib/zen-updater/service-utility --add --uri=ftp://ftp.gwdg.de/pub/linux/misc/packman/suse/10.1/ --type=auto --name="PACKMAN: Multimedia Packages for SuSE Linux 10.1"

If rug package installed on the system:

root@linux# rug sa --type zypp ftp://ftp.gwdg.de/pub/linux/misc/packman/suse/10.1/ "PACKMAN: Multimedia Packages for SuSE Linux 10.1"

Before, the signature check issue should be faced: disabling it or giving a server key to use.

This is exactly the same procedure that using the GUI, but, since on a script, easier to replicate and faster to use.
Here more information: http://jamesots.blogspot.com/2006/05/worki...orks-setup.html

..... Still missing the script for ZMD repositories. The basig command to use is something like this:

* have a look at that kommander-script:
http://www.kde-apps.org/content/show.php?content=43378

"...Allows users to do the following conveniently with point'n'click:
- Add package repositories / installation sources
- Install multimedia codecs, Java and Flash
..."

it works for apt, smart and YaST, rug etc. At the moment only for SuSE-10.1


* another information according the key-servers:

if a key-server is using the HKP-protocol, your firewall must allow the outgoing tcp-port 11371

here a good explantation:
http://www.rossde.com/PGP/pgp_keyserv.html

and a list of public-key servers:
http://www.rossde.com/PGP/pgp_keyserv.html#pubserv

* the package smart-channel-suser-oc2pus contains ONLY the channel information for my repositories
the package from Pascal (suser-guru) contains all SuSE-channels, wine, mozilla, packman and suser-guru

* and a important information for SuSE-10.x is missing in your HowTo:
you must use a new version of apt, it must understand repomd repositories.
you can get it here (versions may have changed)
wget http://ftp.gwdg.de/pub/opensuse/repositori...2-12.1.i586.rpm
wget http://ftp.gwdg.de/pub/opensuse/repositori...2-12.1.i586.rpm
wget http://ftp.gwdg.de/pub/opensuse/repositori...2-12.1.i586.rpm

and of course this synaptic version can also use repomd-entries in the sources.list:
wget http://ftp.gwdg.de/pub/opensuse/repositori...2-11.3.i586.rpm

with this version you can extend your sources.list to use entries like:
repomd http://software.opensuse.org/download/KDE: KDE3 SUSE_Linux_10.1
repomd http://software.opensuse.org/download/KDE: Backports SUSE_Linux_10.1

the repomd format has to be used, because some repos are changing to the build-server.

* and a last tip for today:
to clean up your apt-cache or smart cache (or directories containing packages), to delete older versions you can use this little program:
http://www.kde-apps.org/content/show.php?content=42898 (QRepoClean)

it keeps the latest version in your cache and delete only the older ones.

..... Still missing the script for ZMD repositories. The basig command to use is something like this:

* have a look at that kommander-script:
http://www.kde-apps.org/content/show.php?content=43378

"...Allows users to do the following conveniently with point'n'click:
- Add package repositories / installation sources
- Install multimedia codecs, Java and Flash
..."

it works for apt, smart and YaST, rug etc. At the moment only for SuSE-10.1
* another information according the key-servers:

if a key-server is using the HKP-protocol, your firewall must allow the outgoing tcp-port 11371

here a good explantation:
http://www.rossde.com/PGP/pgp_keyserv.html

and a list of public-key servers:
http://www.rossde.com/PGP/pgp_keyserv.html#pubserv

* the package smart-channel-suser-oc2pus contains ONLY the channel information for my repositories
the package from Pascal (suser-guru) contains all SuSE-channels, wine, mozilla, packman and suser-guru

* and a important information for SuSE-10.x is missing in your HowTo:
you must use a new version of apt, it must understand repomd repositories.
you can get it here (versions may have changed)

wget http://ftp.gwdg.de/pub/opensuse/repo...-12.1.i586.rpm
wget http://ftp.gwdg.de/pub/opensuse/repo...-12.1.i586.rpm
wget http://ftp.gwdg.de/pub/opensuse/repo...-12.1.i586.rpm

and of course this synaptic version can also use repomd-entries in the sources.list:

wget http://ftp.gwdg.de/pub/opensuse/repo...-11.3.i586.rpm

with this version you can extend your sources.list to use entries like:

repomd http://software.opensuse.org/download/KDE:KDE3 SUSE_Linux_10.1**
repomd http://software.opensuse.org/download/KDE:Backports SUSE_Linux_10.1

the repomd format has to be used, because some repos are changing to the build-server.

* and a last tip for today:
to clean up your apt-cache or smart cache (or directories containing packages), to delete older versions you can use this little program:
http://www.kde-apps.org/content/show.php?content=42898 (QRepoClean)

it keeps the latest version in your cache and delete only the older ones.
[/b]

Great Post !!!!! Thank you very much.

APT repositories updated. Still not completed, but some important 10.1 repos has been added.

[EDIT] I have seen that each repository has the digital signature on a .asc. Probably I will write a script that add all the digital signatures of the different servers. Should be easy to pack the script inside a rpm file. I can't find any package or script that download all the digital signarure and add to the current rpm databe information.

[EDIT] I have seen that each repository has the digital signature on a .asc. Probably I will write a script that add all the digital signatures of the different servers. Should be easy to pack the script inside a rpm file. I can't find any package or script that download all the digital signarure and add to the current rpm databe information.
[/b]

so the basic information from SuSE is here:
http://en.opensuse.org/Secure_Installation...llation_sources

thats the way SuSE want us "free-packagers" to build and sign repositories. Perhaps this will help you to write a script.

so the basic information from SuSE is here:
http://en.opensuse.org/Secure_Installation...llation_sources

thats the way SuSE want us "free-packagers" to build and sign repositories. Perhaps this will help you to write a script.
[/b]

Thank you very much.

Meanwhile, a good set of digital signatures is added using install-apt4suse script. On the How To can be found the way to install it.

I haven't review it, but may be there is an option that install all the necessary digital signatures. I will take a look, may be is already done by SuSE.

---------------------

I think they are doing a good job with SuSE. I know there is no other option if you want to survive on the complex desktop segment, but still a good work.

As a brief overview:

Solaris has been opened 2 years ago ( http://www.opensolaris.org/os/ ) and offer the "Sun Java Desktop" based on GNOME + StarOffice, Red Hat has its own desktop, Novell too, Mac is always there and, of couse, the omnipresent Windows; just to mention the most important desktops (aside Xandros, Linspire and so on).

From other point of view, mobile phones has more a more power, and the laptops tends to be smaller on some product segments. The mobile is going to be a small PC, the laptop is going to be a mobile? Then, which operating system, Symbian, Windows, Linux?

So, not easy marketplace: always good for the end-user. What should we expect from Windows? May be it open the system; of course not now, since still 90% of all machines over the world run in Windows ( http://marketshare.hitslink.com/report.asp...p;qptimeframe=Y ).

Anyway, Linux is advancing pretty well, mostly on servers sector ( http://news.com.com/Microsoft+still+rules+..._3-5088233.html ). I think, on long terms, can compete with Windows also on the Desktop. But there are two big problems to solve: psychological and technical.


PSYCHOLOGICAL PROBLEM: AFRAID TO THE UNKNOWN

Nobody changes once he learns one system (think on people outside the IT business). There is no way, it should give so many advantages over the known one, including lower cost and easy to use.

I have a theory on this point: human is an habit animal. The repetition of an action give us a security feeling (it works). If any problem occur doing an action, the insecurity is placed. Reasons? The new environment, not us. So, for changing from one OS to other, everything should works without a glitch, and exactly on the same way we worked before. If any problem occurs ==> this is a bad system (simply cause different and we don't know how to solve the issue, as we know on the other).

Recently I've installed a Linux system to a Windows user (a young engineer), he wants exactly the same things. Even the Outlook Express. Try to use Thunderbird with Outlook feeling: no way. Every time he couldn't found the way to do something on the exact way he does in WIndows, the system was the problem.

I observed this mechanism on him (a young technical prepared person), think what's happening on an old not technical prepared person. The insecurity is going to be higher, with a fewer amount of possible responses when a problem appears.

Pretty hard the change for these persons: just learn to use a PC is a heavy step for them, the change is really difficult. They will resist to it with every fiber fo their body, so if any glitch occur, forget it.


TECHNICAL PROBLEMS: ENTERTAINMENT AND NOT "OUT OF THE BOX" WORKING

As far as I know, Windows is still the best OS for entertaiment. Just think on games (although I prefered Linux for multimedia).

The other annoying aspect is that some things are not "out of the box", as multimedia, browser plugins and so on. OK is the same on Windows (you have to install everything separately), but usually people when try to change they forgot what they did on the Windows installation, just sees that some things are not working ==> The system is the problem.

Some examples:

-> Pictures on Konqueror=> there are many tools for images visualization, but non of them allow you to move from one picture to the other just with the cursors. The konqueror visualization tool usually do not work with some formats (as JPG).

At the end, the user see that they can't watch photos on a simple way.

-> Videos on Browser => it should come preinstalled on the system (I am talking about mplayer plugin). Some pages are not well manage by this plugin, anyway

Repository list updated for adding OC2PUS repository.

Cesar

PD.: Still some problems with the mirrors. Usually are not added properly, since smart gui do not show any mirror. This should be something related to the syntax that Smart requires when edditing the channels. As soon as I found which is the syntax problem, I will update the How TO.

If anyone knows which is the problem (some space, or baseurl should right over the mirrors declaration), please, let me know.

Repository list updated for adding OC2PUS repository.

Cesar

PD.: Still some problems with the mirrors. Usually are not added properly, since smart gui do not show any mirror. This should be something related to the syntax that Smart requires when edditing the channels. As soon as I found which is the syntax problem, I will update the How TO.

If anyone knows which is the problem (some space, or baseurl should right over the mirrors declaration), please, let me know.
[/b]

Problem fixed, how to updated. Some troubles with visualization on firefox and now I can't edit it anymore due to login issues in wikka.