I am not able to install balena-etcher in OpenSuse Tembleweed via terminal or via yast

Hey guys

I am not able to install balena-etcher in OpenSuse Tembleweed via terminal or via yast.
The error message appears that the header of the application is not signed, see image below.

The problem occurs in any version of balena-etcher

Error: INVALID:balena-etcher-1.18.4-1.x86_64 (file-60781681): Signature verification failed [6-The file is not signed]
     Header SHA256 digest: OK
     Header SHA1 digest: OK
     Payload SHA256 digest: OK
     MD5 digestion: OK
     The packet header is not signed!

Note: On the VM it installed normally. On HD this application does not install.
I tested the last 5 versions of balena-etcher and I think it must be another problem.

What if you ignore the warning error and install it anyway? I think you got this option with yast.

Hello

Thanks for the feedback!
Yes, there is this option, but I was afraid to go ahead and break something.

Iā€™m going to opt for the fix so I can install normally, in case thereā€™s really something to be fixed.

As you did not follow the instructions how to install it correctly with the repo, you didnā€™t import the signing key. By following the procedure, you will add the repo, import the signing key and it installs just fine.

leap@leaptest:~/Downloads> curl -1sLf \
> 'https://dl.cloudsmith.io/public/balena/etcher/setup.rpm.sh' \
> | sudo -E bash
Executing the  setup script for the 'balena/etcher' repository ...

   OK: Checking for required executable 'curl' ...
   OK: Checking for required executable 'rpm' ...
   OK: Detecting your OS distribution and release using system methods ...
 ^^^^: ... Detected/provided for your OS/distribution, version and architecture:
 >>>>:
 >>>>: ... distro=opensuse-leap  version=15.4  codename=15.4  arch=x86_64  
 >>>>:
   OK: Importing 'balena/etcher' repository GPG keys into rpm ...
   OK: Checking for available package manager (DNF/Microdnf/YUM/Zypper) ...
 ^^^^: ... Detected package manager as 'zypper'
   OK: Checking if upstream install config is OK ...
   OK: Fetching 'balena/etcher' repository configuration ...
   OK: Installing 'balena/etcher' repository via zypper ...
   OK: Updating the zypper cache to fetch the new repository metadata ...
   OK: The repository has been installed successfully - You're ready to rock!

leap@leaptest:~/Downloads> sudo zypper up
Metadaten von Repository 'balena-etcher-noarch' abrufen .............................................................................................................................................................................................................[fertig]
Cache fĆ¼r Repository 'balena-etcher-noarch' erzeugen ................................................................................................................................................................................................................[fertig]
Repository-Daten werden geladen...
Installierte Pakete werden gelesen...

Die folgenden 10 Paketaktualisierungen werden NICHT installiert:
  ffmpeg-4 libavcodec58_134 libavdevice58_13 libavfilter7_110 libavformat58_76 libavresample4_0 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9
Keine auszufĆ¼hrenden Aktionen.
leap@leaptest:~/Downloads> sudo zypper install balena-etcher
Repository-Daten werden geladen...
Installierte Pakete werden gelesen...
PaketabhƤngigkeiten werden aufgelƶst...

Das folgende NEUE Paket wird installiert:
  balena-etcher

1 neues Paket zu installieren.
GesamtgrĆ¶ĆŸe des Downloads: 64,5 MiB. Bereits im Cache gespeichert: 0 B. Nach der Operation werden zusƤtzlich 215,7 MiB belegt.
Fortfahren? [j/n/v/...? zeigt alle Optionen] (j): j
Paket balena-etcher-1.14.3-1.x86_64 abrufen                                                                                                                                                                                             (1/1),  64,5 MiB (215,7 MiB entpackt)
Abrufen: balena-etcher-1.14.3.x86_64.rpm ................................................................................................................................................................................................................[fertig (5,9 MiB/s)]

ƜberprĆ¼fung auf Dateikonflikte lƤuft: ...............................................................................................................................................................................................................................[fertig]
(1/1) Installieren: balena-etcher-1.14.3-1.x86_64 ...................................................................................................................................................................................................................[fertig]
leap@leaptest:~/Downloads> 

Thanks for the feedback!

Installing manually or via yast shouldnā€™t he import the key to proceed with the installation?

Iā€™ll add the repo and see if it installs the latest version.

No. You need an additional signing key to verify that the package is untinkerd. If the package would ship the signing key with it, the complete sense behind checking the validity of a package would be broken. That means a malicius (tinkered) package would ship the signing key and would install without problemsā€¦dā€™oh!

It didnā€™t install here, unfortunately.

Look

edson@localhost:~> curl -1sLf \

ā€˜https://dl.cloudsmith.io/public/balena/etcher/setup.rpm.shā€™
| sudo -E bash
[sudo] senha para root:
Executing the setup script for the ā€˜balena/etcherā€™ repository ā€¦

OK: Checking for required executable ā€˜curlā€™ ā€¦
OK: Checking for required executable ā€˜rpmā€™ ā€¦
OK: Detecting your OS distribution and release using system methods ā€¦
^^^^: ā€¦ Detected/provided for your OS/distribution, version and architecture:

:
: ā€¦ distro=opensuse-tumbleweed version=20230313 codename= arch=x86_64
:
OK: Importing ā€˜balena/etcherā€™ repository GPG keys into rpm ā€¦
OK: Checking for available package manager (DNF/Microdnf/YUM/Zypper) ā€¦
^^^^: ā€¦ Detected package manager as ā€˜zypperā€™
NOPE: Checking if upstream install config is OK ā€¦
^^^^: ā€¦ Failed to fetch configuration for your OS distribution release/version.
:
: It looks like we donā€™t currently support your distribution release and
: version. This is something that we can fix by adding it to our list of
: supported versions (see contact us below), or you can manually override
: the values below to an equivalent distribution that we do support:
:
: ā€¦ distro=opensuse-tumbleweed version=20230313 codename= arch=x86_64
:
: You can force this script to use a particular value by specifying distro,
: version, or codename via environment variable. E.g., to specify a distro
: such as SUSE Linux Enterprise Server 12, use the following:
:
: | distro=sles version=12.1 codename= sudo -E bash
:
!!!: Oh no, your setup failed! :frowning: ā€¦ But we might be able to help. :slight_smile:
!!!:
!!!: You can contact balena for further assistance.
!!!:
!!!: URL: https://github.com/balena-io/etcher
!!!:
!!!: Last 20 log lines from .csm_setup_85Su5f5dv (might not be errors, nor even relevant):
!!!:

edson@localhost:~> sudo zypper up
Loading data from repositoryā€¦
Reading installed packagesā€¦

The following package update will NOT be installed:
librist4
Nothing to do.
edson@localhost:~> sudo zypper install balena-etcher
Loading data from repositoryā€¦
Reading installed packagesā€¦
ā€˜balena-etcherā€™ not found in package names. Trying to locate in resources.
No supplier of ā€˜balena-etcherā€™ found.
Resolving package dependenciesā€¦
Nothing to do.
edson@localhost:~> sudo zypper install balena-etcher-electron
Loading data from repositoryā€¦
Reading installed packagesā€¦
ā€˜balena-etcher-electronā€™ not found in package names. Trying to locate in resources.
No providers of ā€˜balena-etcher-electronā€™ found.
Resolving package dependenciesā€¦
Nothing to do.
edson@localhost:~>

I tried to install manually and also the same error occurs:

sudo zypper balena-etcher-1.18.5.x86_64.rpm
[sudo] password for root:
Unknown command ā€˜balena-etcher-1.18.5.x86_64.rpmā€™
Type ā€˜zypper helpā€™ to display a list of global options and commands.

If ā€˜balena-etcher-1.18.5.x86_64.rpmā€™ is not a typo, it is probably not a built-in command, but provided as a subcommand or plug-in (see ā€˜zypper help subcommandā€™).
In this case, a specific package that provides the subcommand needs to be installed first. These packages are often called ā€˜zypper-balena-etcher-1.18.5.x86_64.rpmā€™ or ā€˜zypper-balena-etcher-1.18.5.x86_64.rpm-pluginā€™.
edson@localhost:~/Downloads> sudo zypper in balena-etcher-1.18.5.x86_64.rpm
Loading data from repositoryā€¦
Reading installed packagesā€¦
Resolving package dependenciesā€¦

The following NEW package will be installed:
balena-etcher

1 new package to be installed.
Total download size: 67.2 MiB. Already cached: 0 B. After the operation, 229.2
Additional MiB will be used.
Continue? y/n/v/ā€¦? displays all options: s
Downloading: balena-etcher-1.18.5-1.x86_64 (Single RPM File Cache)
(1/1), 67.2 MiB
balena-etcher-1.18.5.x86_64.rpm:
The packet header is not signed!

balena-etcher-1.18.5-1.x86_64 (Simple RPM file cache): Signature verification failed [6-The file is not signed]
Cancel, retry or skip? [c/r/i] (c):

Your bugreport on github for cross reference:

1 Like

And there is an additional report from 2021 to bypass the problem that it wonā€™t install on Tumbleweed:

So you need following command to add the repo:

curl -1sLf 'https://dl.cloudsmith.io/public/balena/etcher/setup.rpm.sh'   | codename="tumbleweed" sudo -E bash

Then:

sudo zypper up
sudo zypper install balena-etcher
1 Like

It worked! Thanks

How can we ask for the latest version update being 1.18.4?
Installed version was balena-etcher-1.14.3-1.x86_64

edson@localhost:~> curl -1sLf ā€˜https://dl.cloudsmith.io/public/balena/etcher/setup.rpm.shā€™ | codename=ā€œtumbleweedā€ sudo -E bash
Running the setup script for the ā€˜balena/etcherā€™ repository ā€¦

OK: Checking for required executable ā€˜curlā€™ ā€¦
OK: Checking for required executable ā€˜rpmā€™ ā€¦
OK: Detecting your OS distribution and release using system methods ā€¦
^^^^: ā€¦ Detected/provided for your OS/distribution, version and architecture:

:
: ā€¦ distro=opensuse-tumbleweed version=20230313 codename=tumbleweed arch=x86_64
:
OK: Importing ā€˜balena/etcherā€™ GPG repository keys into rpm ā€¦
OK: Checking for available package manager (DNF/Microdnf/YUM/Zypper) ā€¦
^^^^: ā€¦ Detected package manager as ā€˜zypperā€™
OK: Checking if upstream install config is OK ā€¦
OK: Fetching ā€˜balena/etcherā€™ repository configuration ā€¦
OK: Installing ā€˜balena/etcherā€™ repository via zypper ā€¦
OK: Updating the zypper cache to fetch the new repository metadata ā€¦
OK: The repository has been installed successfully - Youā€™re ready to rock!

edson@localhost:~> sudo zypper up
Downloading the ā€˜balena-etcher-noarchā€™ repository metadata ā€¦[completed]
Building the ā€˜balena-etcher-noarchā€™ repository cache ā€¦[completed]
Loading repository dataā€¦
Reading the installed packagesā€¦

The following package update will NOT be installed:
librist4
Nothing to do.
edson@localhost:~> sudo zypper install balena-etcher
Loading repository dataā€¦
Reading installed packagesā€¦
Resolving package dependenciesā€¦

The following NEW package will be installedā€¦:
balena-etcher

1 new package to be installed.
Total download size: 64.5 MiB. Already cached: 0 B. After operation, additional 215.7
MiB will be used.
Continue? [s/n/v/ā€¦? display all options] (s): s
Downloading: balena-etcher-1.14.3-1.x86_64 (balena-etcher) (1/1), 64.5 MiB
Downloading: balena-etcher-1.14.3.x86_64.rpm ā€¦[completed (9.2 MiB/s)]

Checking for file conflict: ā€¦[completed]
(1/1) Installing: balena-etcher-1.14.3-1.x86_64 ā€¦[completed]
edson@localhost:~>

I was only able to post the answer today because Iā€™m a newbie and the forum system has blocked me for too many recent posts on yesterdayā€™s date

balena-etcher-1.14.3 is from January 2023. Version 1.18.4 was released only 2 weeks ago on github. All versions in between are only pre-releases. As the developers use an external cloudservice to host their build-repository it takes some time until the repo catches up. You need to ask the developers when this will happenā€¦

Btw is there a reason why you need balener-etcher and donā€™t use openSUSE standard tools like imagewriter which is available in the standard OSS repo?

Thanks for the feedback!

Because Iā€™m a recent user new to OpenSuse, I didnā€™t know about the ā€œimagewriterā€ tool and, every time I needed to burn an ISO, Balena-etcher never failed me.

Iā€™m going to test your suggestion and see if I adapt with the tool that is already installed and seems very simple and functional to use.

btw, cloudsmith repo seems to be down

1 Like

Yes! And for this reason I removed his repositories and manually installed the latest version that is already available in the installation, the application icons in the menu: (show applications).