Like a lot of people are doing, I’m trying to install Zoom in Tumbleweed. The Zoom download site has a note about using rpm --import command to add the key when installing. This is the syntax:
rpm --import package-signing-key.pub
The result is “import read failed(2)”. I can also download the public key but I don’t know what to do with it. Seems like the import option should have a target instead of just a generic package key. Does anyone know if the syntax is right?
If you’re trying to configure the GPG key for a repository,
Zypper (the openSUSE command line package manager) provides a way to auto-accept the key that’s presented when challenged… Much easier than other distros where you typically have to download the GPG key file and either configure or import.
I list this as one of several useful zypper commands that can make your life easier…
That’s a long list of dependencies…
There’s no mention whether those dependencies will be automatically selected by YaST or zypper,
You should try not installing the dependencies first to see if the package manager will automatically select, else if that doesn’t work then post here and I or someone else can create a single command that installs all those packages.
Zypper pulls in 4 pkgs to solve dependencies: ibus-m17n libm17n0 libotf0 m17n-db. Then it says it’s looking for gpg key ID in cache /var/cache/zypp/pubkeys. No such directory exists. It also says “Repository Plain RPM files does not define additional ‘gpgkey=’ URLs”. Seems like the command as written doesn’t provide a source to import the key from.
How are you installing, using YaST or zypper, and can you post the command you’re running.
Unless the package is explicitly coded to ask for a GPG key, ordinarily it shouldn’t be required.
You can try the following which I found from an unofficial source
wget -O Downloads/package-signing-key.pub https://zoom.us/linux/download/pubkey
#Import the key, use elevated permissions
rpm --import package-signing-key.pub
Also,
Related but off-topic…
Currently, there have been several problems reported related to Zoom software, of which the current most likely serious is that apparently anyone in your Zoom meeting can post an invitation and the invitation has no input validation… Therefor any participant in your meeting could post a link with malicious content which can phish or otherwise collect login credentials, of which the most nefarious would be if you login to what you believe is a business or school meeting that requires a network login (like AD or LDAP), you would be giving the hacker your personal hashed credentials for that business or school(of course can easily be decrypted).
May I please point out that Zoom is a big security risk? And really bad re. privacy. The news about it is all over the place, and the whole world doesn’t seem to care. Most of the issues are Windows ( Windows password can be retrieved through shared links to local file ) / Mac related ( camera and mic wide open to abuse ).
su -
rpm -qa gpg-pubkey*
gpg-pubkey-3dbdc284-53674dd4
gpg-pubkey-479de3c9-5d93eb05
gpg-pubkey-39db7c82-5847eb1f
gpg-pubkey-a7293a7b-59b1d3f4
gpg-pubkey-97090d5e-5cc1dcf3
gpg-pubkey-307e3d54-5aaa90a5
rpm -K /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm
/data/repositories/Downloads/zoom_openSUSE_x86_64.rpm: digests SIGNATURES NOT OK <== BAD
rpm --import /data/repositories/Downloads/package-signing-key.pub
warning: Rebuilding outdated index databases
warning: Generating 18 missing index(es), please wait...
rpm -qa gpg-pubkey*
gpg-pubkey-3dbdc284-53674dd4
gpg-pubkey-61a7c71d-55740c4b <== NEW
gpg-pubkey-479de3c9-5d93eb05
gpg-pubkey-39db7c82-5847eb1f
gpg-pubkey-a7293a7b-59b1d3f4
gpg-pubkey-97090d5e-5cc1dcf3
gpg-pubkey-307e3d54-5aaa90a5
rpm -K /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm
/data/repositories/Downloads/zoom_openSUSE_x86_64.rpm: digests signatures OK <== GOOD
zypper in /data/repositories/Downloads/zoom_openSUSE_x86_64.rpm
The following 9 NEW packages are going to be installed:
ibus ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-m17n libm17n0 libotf0 m17n-db zoom
.....
.....
(9/9) Installing: zoom-3.5.374815.0324_openSUSE-1.x86_64 ................................................................................................................................[done]
Additional rpm output:
run post install script, action is 1...
current home is /root
Executing %posttrans scripts ............................................................................................................................................................[done]
You can import the key via YaST Software Repositories as well…
Hi
Most zoom issues are related to the ‘free’ one and doesn’t set a password (or asks users too?). No issues seen here on the business/corporate edition with it’s humongous passwords
With the gpg pubkey command I got seven keys, none of which were 55740c4b. With the command that uses /data/repositories/Downloads I got ‘No such file or directory’. With the rpm --import command I got ‘import read failed(2)’.