The RPM is package-update-indicator; I had to manually download and install it via zypper (without adding the whole repo) because I use XFCE desktop and for some reason Leap 16.1 does not ship it anymore…
Here is full command output:
localhost:/home/user1 # zypper in https://download.opensuse.org/repositories/X11:/xfce/16.1/x86_64/package-update-indicator-9-lp161.1.1.x86_64.rpm; echo $?
'https://download.opensuse.org/repositories/X11:/xfce/16.1/x86_64/package-update-indicator-9-lp161.1.1.x86_64.rpm' looks like an RPM file. Will try to use it.
Retrieving: package-update-indicator-9-lp161.1.1.x86_64.rpm ...............................................................................[done (37.6 KiB/s)]
Refreshing service 'openSUSE'.
Looking for gpg keys in repository packman.
gpgkey=https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Leap_16.1/repodata/repomd.xml.key
Retrieving repository 'packman' metadata ...............................................................................................................[done]
Building repository 'packman' cache ....................................................................................................................[done]
Loading repository data...
Reading installed packages...
Resolving package dependencies...
The following NEW package is going to be installed:
package-update-indicator
1 new package to install.
Package download size: 42.0 KiB
Package install size change:
| 98.4 KiB required by packages that will be installed
98.4 KiB | - 0 B released by packages that will be removed
Backend: classic_rpmtrans
Continue? [y/n/v/...? shows all options] (y): y
Retrieving: package-update-indicator-9-lp161.1.1.x86_64 (Plain RPM files cache) (1/1), 42.0 KiB
package-update-indicator-9-lp161.1.1.x86_64.rpm:
Header V3 RSA/SHA256 Signature, key ID 8b23a9a7780504e9: NOKEY
V3 RSA/SHA256 Signature, key ID 8b23a9a7780504e9: NOKEY
warning: /var/tmp/zypp.tmp/zypp.UcwBkI/zypper/_tmpRPMcache_/%CLI%/package-update-indicator-9-lp161.1.1.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 780504e9: NOKEY
Repository Plain RPM files cache does not define 'gpgkey=' URLs.
package-update-indicator-9-lp161.1.1.x86_64 (Plain RPM files cache): Signature verification failed [4-Signatures public key is not available]
Abort, retry, ignore? [a/r/i] (a): i
Checking for file conflicts: ...........................................................................................................................[done]
warning: /var/cache/zypper/RPMS/package-update-indicator-9-lp161.1.1.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 780504e9: NOKEY
(1/1) Installing: package-update-indicator-9-lp161.1.1.x86_64 ..........................................................................................[done]
%transfiletriggerin(man-2.13.1-160100.2.1.x86_64) script output:
Header V3 RSA/SHA256 Signature, key ID 780504e9: NOKEY
Header SHA256 digest: OK
Header SHA1 digest: OK
Running post-transaction scripts .......................................................................................................................[done]
0
localhost:/home/user1 #
As you can see, I got the signature verification error; it however gave the option to ignore, and with this installation went apparently normal.
List of repositories:
user1@localhost:~> zypper lr -d
# | Alias | Name | Enabled | GPG Check | Refresh | Keep | Priority | Type | URI | Service
--+-----------------------------+---------------------------+---------+-----------+---------+------+----------+--------+--------------------------------------------------------------------------+---------
1 | openSUSE:repo-non-oss | repo-non-oss (16.1) | Yes | (r ) Yes | Yes | - | 99 | rpm-md | http://cdn.opensuse.org/distribution/leap/16.1/repo/non-oss/x86_64 | openSUSE
2 | openSUSE:repo-non-oss-debug | repo-non-oss-debug (16.1) | No | ---- | ---- | - | 99 | rpm-md | http://cdn.opensuse.org/debug/distribution/leap/16.1/repo/non-oss/x86_64 | openSUSE
3 | openSUSE:repo-openh264 | repo-openh264 (16.1) | Yes | (r ) Yes | Yes | - | 99 | rpm-md | https://codecs.opensuse.org/openh264/openSUSE_Leap_16 | openSUSE
4 | openSUSE:repo-oss | repo-oss (16.1) | Yes | (r ) Yes | Yes | - | 99 | rpm-md | http://cdn.opensuse.org/distribution/leap/16.1/repo/oss/x86_64 | openSUSE
5 | openSUSE:repo-oss-debug | repo-oss-debug (16.1) | No | ---- | ---- | - | 99 | rpm-md | http://cdn.opensuse.org/debug/distribution/leap/16.1/repo/oss/x86_64 | openSUSE
6 | openSUSE:repo-oss-source | repo-oss-source (16.1) | No | ---- | ---- | - | 99 | rpm-md | http://cdn.opensuse.org/source/distribution/leap/16.1/repo/oss | openSUSE
7 | packman | packman | Yes | (r ) Yes | Yes | - | 90 | rpm-md | https://ftp.gwdg.de/pub/linux/misc/packman/suse/openSUSE_Leap_16.1 |
user1@localhost:~>
Am I good with this, or does the signature error means malware or the like and I should uninstall the package?
Thanks.