Signature verification for repo nvidia failed

English Install/Boot/Login
#1

I recently installed tumbleweed and after installing the nvidia repo to get the latest nvidia drivers, I am constantly getting a warning that day 'Update error: signature verification for repo nvidia failed.

It shows up on the bottom right side of my task bar throughout the day. I have been dismissing it, but its just becoming annoying.

Any ideas on how I can resolve this issue?

FYI: I am still new to linux, so will need detailed instructions on what to do.

screenshot → https://paste.opensuse.org/44954792

Thank you,
AJ

#2

Don’t use the updater applet with Tumbleweed - it will cause problems at some point.

The only correct way to update is by “zypper dup” preferably (to be safe) from the command line whilst logged out from KDE.

You can follow the mailing list at https://lists.opensuse.org/opensuse-factory/ to see when new snapshots are issued.

How did you add the nvidia repository, via yast2 Software Management?

Do you get the signature verification error if you attempt a “zypper dup”?

#3

Hi Paul.

Thanks for getting back to me. Actually, I installed the nvidia drivers by going to https://www.nvidia.com/Download/index.aspx?lang=en-us. From here I selected by graphics card and then installed the drivers.

After I did though, I can tell that my displays are great now. Should I have installed some other way?

  • AJ
#4

Be aware that installing manually as you did after any kernel updates the NVIDIA driver must be reinstalled manually. Getting the driver from the NVIDIA repo and it will be auto reinstalled. :open_mouth:

#5

It depends on the degree of work you want to put into maintaining your install :wink:

The way you did it is not “wrong” per se.

As @gogalthorp mentioned, you will need to repeat that process on each kernel update, which on TW is more frequently than the stable (Leap) releases.

For Nvidia graphics you have a few choices:

Open source options: modesetting or nouveau.

Proprietary drivers: either installed via YaST or “the hard way”

If you want to use the proprietary drivers and don’t mind repeating the installation, then probably stay as you are.

Alternatively, remove those, then add the repository https://download.nvidia.com/opensuse/tumbleweed and install from there, on subsequent kernel updates the nvidia driver should be taken care of “auto-magically”.

Or, you could take a look at using the modesetting option, with the proprietary drivers removed use YaST to remove “xf86-video-nouveau”. User @mrmazda did a nice write up on that. (I rather embarrassingly confess to not being able to find the link. I’m sure though @mrmazda will provide it if he reads this).

I will emphasise again though, it’s important to not use the (KDE) update applet with Tumbleweed, I would remove it completely (“plasma5-pk-updates”), only use “zypper dup”.

#6

Okay… Thanks for the feedback… Quite honestly, these pop-ups I’m getting are really annoying. Bare with me here as I’m still new to linux.

Seems like I have 2 options:

OPTION 1:1. Remove the current nvidia drivers I have.
2. Reinstall the nvidia drivers from YAST.
3. Install this repo → https://download.nvidia.com/opensuse/tumbleweed
4. Install nvidia drivers from this repo

OPTION 2:

  1. Stay as I am and whenever I perform a zypper dup, I’ll have to reinstall the drivers manually from nvidia like I did now.

OPTION 3:

  1. I could install the opensource drivers (modesetting or nouveau). When I was running leap, this nouveau driver was giving me hell. Sometimes my graphics was terrible and then during system boot I would get some errors and had to reinstall the OS. I am concerned about using the nouveau drivers.

What do you mean by ‘it’s important to not use the (KDE) update applet with Tumbleweed, I would remove it completely (“plasma5-pk-updates”), only use “zypper dup”.’ What is the KDE update applet?

Looking forward to the response…

Thanks,
AJ

#7

Don’t be. Neither DuckDuckGo nor Yahoo nor Google produce it for me among the first 25 or 50 hits either. Neither is it among the first 50 using terms nomodeset sdb or nomodeset ddx using the search box at the top of any forums.opensuse.org page. When I want to paste it here, I copy it out of browser history. SDB:Nomodeset:Work_Around_Graphic_Upgrade&_Installation_Obstacles

#8

1, 3, and 4 - Step 2 can only be done after step 3 - But I’m sure you knew what you meant. :slight_smile:

OPTION 2:1. Stay as I am and whenever I perform a zypper dup, I’ll have to reinstall the drivers manually from nvidia like I did now.

You don’t need to reinstall the drivers after every zypper dup, it’s only required if there is a kernel update.

OPTION 3:1. I could install the opensource drivers (modesetting or nouveau). When I was running leap, this nouveau driver was giving me hell. Sometimes my graphics was terrible and then during system boot I would get some errors and had to reinstall the OS. I am concerned about using the nouveau drivers.

OK - If you have good reason to not use the nouveau driver that’s fine. You might want to give the modesetting option a try, @mrmazda has now kindly provided the link to his article.

What do you mean by ‘it’s important to not use the (KDE) update applet with Tumbleweed, I would remove it completely (“plasma5-pk-updates”), only use “zypper dup”.’ What is the KDE update applet?

The KDE update applet (“plasma5-pk-updates”) is an automatic updater. It’s that which is issuing the pop-ups shown in your first post. It works OK with Leap and is a convenient method of keeping a system up to date. Tumbleweed however is different in as much as each snapshot is, in effect, a new distribution, hence the need to use “zypper dup”.

One of the safest ways to update TW is to log out from the (KDE) desktop session, switch to a virtual terminal (Ctrl-Alt-F2), login as you normal user, then execute:

sudo zypper dup

After the update is completed, if a reboot is required then

sudo /sbin/shutdown -r now

if a reboot is not required you can exit that terminal session

exit

and switch back to the graphical session using Ctrl-Alt-F7 and login.

The primary reason for doing the zypper dup from a virtual terminal whilst logged out from KDE is just in case (very remote chance of) the desktop session crashing during the update.

#9

Thanks for the feedback.

I wanted to pose the questions:

  1. Is one option is better than the other?
  2. You mentioned that I would only have to manually update the drivers as I have done currently, but only after a kernal update. Will zypper dup perform a kernal update? How will I know that a kernal update is being performed?
  3. As mentioned, I tried nouveau drivers on Leap, and didn’t have a good experience, but at that time I did not have mrmazdas document. Is nouveau or modesetting the way to go now? is it preferable? I don’t mind giving it a shot in Tumbleweed. If this is a better choice, then how do I go about enabling it?
  4. I understand the need of removing/disabling the KDE update applet (“plasma5-pk-updates”). How can i do this?

Thanks guys again for your support.

  • AJ
#10

The easiest way:

Right click on the tray. Select “Configure System Tray”. Uncheck the box for “Software Updates” (and save that change).

#11

Yes, it will.

How will I know that a kernal update is being performed?

When “zypper dup” lists what it will do, check the list of new packages. A kernel will show up there.

Or look at the note near the end of that output, where it tells you whether a reboot is required and why. That will also mention the kernel update.

As a last resort – when you reboot and a graphic session does not start up, that’s a good hint that there was a kernel switch that broke your “nvidia the hard way” setup.

#12

Yes… and No :slight_smile:

It very much depends upon how new the graphics hardware is and how graphics intensive your applications are. Together with, as I wrote earlier, the amount of your time/effort you wish to devote to maintaining your system.

In general nouveau works well on less demanding graphics running on older hardware - you may need to experiment a little to see what suits your needs best. You wrote that your experience with nouveau wasn’t a good one, so that probably rules that out.

Whether modesetting would be any better I don’t know. @mrmazda’s article describes how to utilise the modesetting option, it should be as simple as removing the proprietary nvidia drivers and then using YaST Software Management to remove "“xf86-video-nouveau”, reboot and the system should then use modesetting.

FWIW, my own preference is on my Leap 15.0 systems I use the nvidia proprietary driver installed via YaST Software Management. On my TW systems, both of which have older graphics hardware with no graphics intensive applications, I prefer to use nouveau.

#13

Guys, so I removed the nvidia drivers and repo I currently had installed. I then added the nvidia repo as stated in our above conversation which I did successfully.

Now, I’m at a point where I have to select the nvidia drivers from repo to be installed. I am unsure exactly which driver to install here. How do I know which one is the correct one?

Refer to this screenshot → https://paste.opensuse.org/42339259

I currently have a nvidia 1050ti gpu installed. It can be referred to here → https://www.nvidia.com/en-us/geforce/products/10series/geforce-gtx-1050/

Last, if you look at the scrennshot I sent, notice at the bottom right it says, 615 new updates. Is there where you guys are saying I should log out and perform a ‘sudo zypper dup’ from terminal? Wanted to verify before I did this.

Thanks as usual guys…

  • AJ
#14

Hi
The 05 versions they have the latest driver for your card.

Yes, Tumbleweed is only updated via zypper dup… (I use zypper -vvv dup as you see more information).

But, be careful since your using the nvidia rpms as it could cause mis-matches with the nvidia drivers as they need rebuilding and releasing for the new kernel if one is in the updates. If that happens you need reboot and then select the previous kernel to boot from and wait for the newer drivers to appear…

Or just install the driver the hard way… https://en.opensuse.org/SDB:NVIDIA_the_hard_way

#15

The first thing you need (must) do is disable the Plasma Update Applet, as explained by @nrickert in post #10

As @malcolmlewis wrote you require the G05 version of the Nvidia drivers for the card you have.

Personally, at the stage you’re at, I would leave the Nvidia Repository disabled for the moment. Log out from KDE, switch to a virtual terminal and perform the zypper dup.

After that has sucessfully completed then enable the Nvidia Repository and install (using YaST) the proprietary drivers.

Yes, that’s something else to watch out for, very occasionally the Nvidia Repository lags behind the kernel.

Or just install the driver the hard way… https://en.opensuse.org/SDB:NVIDIA_the_hard_way

If I was going to use the Proprietary drivers on TW my preference would be to use the Nvidia Repository rather than “the hard way”. On the rare occasion it does break, then as @malcolmlewis wrote, “reboot and then select the previous kernel to boot from and wait for the newer drivers to appear…”

There is, I’m afraid, no “best way”, you’ll have to choose the method that you feel the most comfortable with.

#16

Can’t thank you guys enough for helping out a beginner on this. Coming from windows, seems like the whole process is easier or it could be that I’m just used to windows and know how to move around and get things working. With that said though:

I did perform the update after logging out of kde and it was also a kernal update. That can be seen here → https://paste.opensuse.org/11239719

As you guys mentioned, I did have to reboot the system which I did.

After this, I didn’t run into an issue and my system is working just fine. I don’t get the nvidia messages anymore either. I do have a outstanding question. When I boot up my machine, it displays the boot manager —> https://paste.opensuse.org/87451753

When I do select the tumbleweed option, it displays 2 options (5.1.10-1 and 5.1.7-1). They both say default on them, so I’m just curious what are these options? Why are there 2 default ones? I am under the assumption that these are kernal versions. → https://paste.opensuse.org/59828347

I did run the command ‘uname -r’ and it shows that I am using the 5.1.10-1 → https://paste.opensuse.org/4613055

Just curious to know if i’m correct and why does it display the different kernals? Is it like a backup copy of my system? If I load the old kernal then will any files i create under the new kernal not be loaded within the old kernal. By files I mean documents I create.

Thanks again guys…

  • AJ
#17

default is the name of the kernel build.So default is the default build for openSUSE, Vanilla is the build with out openSUSE modification. etc

Booting to a different kernel version does not change the programs in system just the version of the kernel. ie if a new kernel causes problem you can drop back to the previous. Normally there are two kernels kept though you can modify that number and which ones are kept. The default set up is that when a new kernel arrives it is set to boot when it is successful the oldest is deleted and the previous then becomes the oldest.

Note the default BTRFS file system with snapper is a sort of backup for the system. So you can drop back to a known good snapshot configuration if there are problems with an update.

#18

All looking good so far :slight_smile: …

From the boot menu (or Grub as it is often referred as) the normal option would be “openSUSE Tumbleweed”. The “Advanced” option, as @gogalthorp wrote, enables you to choose a different kernel, by default the choices are “latest” (most recent kernel update installed) and “latest-1” (the previous kernel).

You may occasionally have to use that feature if, by chance, the Nvidia Repository has lagged behind the kernel update and you boot into a blank screen. If that does happen just reboot, and choose the previous kernel.

You can change the number of kernels that are retained by editing the line that begins “multiversion.kernels =” in the file “/etc/zypp/zypp.conf”, it should be fairly self explanatory.

On a more general note, TW updates far more frequently than Leap, so you’ll need to perform a “zypper dup” fairly frequently. New “snapshots” are announced on the “Factory” mailing list: https://lists.opensuse.org/opensuse-factory/

Occasionally there will be a large (typically 2k plus) number of updates if for some reason (compiler change for example) all packages need to be rebuilt.

I’ve been using TW regularly now for over 5 years, on the whole it’s proved quite reliable, any minor problems along the way have, so far, been relatively easily solved.

#19

Wanted to thanks everyone for helping me through this and understand what exactly is going on. It’s one thing to ‘just’ fix something, but its different to understand why something and then applying a fix. I personally learned alot through this issue from all of you.

Thanks again, I’m sure you will be seeing other posts from me as I get more and more familiar with TW here. Really trying to make this my everyday OS.

Next Challenge: Running windows on Linux… (This will be a new forum topic for me)

Do I need to close this topic out?

  • Ajay
#20

Your thanks are appreciated :slight_smile:

I take that to mean Windows applications - for which there is Wine, of which my total knowledge could be quite legibly written on a postal stamp, but I’m sure others would help.

A “better” alternative (to retaining Windows applications) is to use FOSS applications, although I know that may not always be possible.

Do I need to close this topic out?

No… But in future, if you wanted to, you could edit the Title of your last post to indicate “Solved” or whatever - we normally don’t bother though.