osc local package build fails with public key not available

English Open Build Service (OBS)
1

First post to an openSUSE forum.

I have a package which builds correctly on the Build service for openSuse, Debian and Fedora. It also builds correctly for openSuse and Debian on my local machine using:-

osc build --local-package openSUSE_LEAP_15.0
osc build --local-package openSUSE_Tumbleweed
osc build --local-package Debian_9.0

However, when I try to build for Fedora

osc build --local-package Fedora_29
osc build --local-package Defora_Rawhide

It builds the package cache and then errors with:-

Verifying integrity of cached packages
using keys from Fedora:Rawhide, home:m-grant-prg
warning: /var/cache/osbuild-packagecache/Fedora:Rawhide/standard/x86_64/attr-2.4.48-4.fc30.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID cfc659b9: NOKEY
/var/cache/osbuild-packagecache/Fedora:Rawhide/standard/x86_64/attr-2.4.48-4.fc30.x86_64.rpm : public key not available

The last error message is repeated many times for different packages.

Any pointers would be appreciated.

Regards,
Mark

2

Hi and welcome to the Forum :slight_smile:
Can you find the key rpm to put in your package cache? If your happy with the local build environment you can use the --no-verify option to skip this check.

You might have to ask the OBS Admins (Build Service Mailing List, see below) to check the build repository and add the key, especially if it’s changed recently.

https://en.opensuse.org/openSUSE:Communication_channels

3

Thanks for the response.

I am coming from the Debian world so this is all rather new to me but …

I have found a package called fedora-gpg-keys-29-1.noarch.rpm in the Fedora_29 package cache on my machine. When I did all this for Debian etc the package cache was installed and there were no additional steps, the build completed.

The --no-verify option works thanks, but I would like to get it working properly.

Thanks,
Mark

4

On Wed 30 Jan 2019 02:56:03 PM CST, mgrantprg wrote:

malcolmlewis;2892809 Wrote:
> Hi and welcome to the Forum :slight_smile:
> Can you find the key rpm to put in your package cache? If your happy
> with the local build environment you can use the --no-verify option to
> skip this check.
>
> You might have to ask the OBS Admins (Build Service Mailing List, see
> below) to check the build repository and add the key, especially if
> it’s changed recently.
>
> openSUSE:Communication channels - openSUSE Wiki

Thanks for the response.

I am coming from the Debian world so this is all rather new to me but
…

I have found a package called fedora-gpg-keys-29-1.noarch.rpm in the
Fedora_29 package cache on my machine. When I did all this for Debian
etc the package cache was installed and there were no additional steps,
the build completed.

The --no-verify option works thanks, but I would like to get it working
properly.

Thanks,
Mark

Hi
Yes, you will need to ask the OBS Admins to check the Fedora repository
as to why it’s not included…

–
Cheers Malcolm °¿° SUSE Knowledge Partner (Linux Counter #276890)
SLES 15 | GNOME Shell 3.26.2 | 4.12.14-25.25-default
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below… Thanks!