Visual Studio Code repo fails signature verification

English Applications
1

Hi all,
I know this is not an official repository, but I just would like to know if anybody else is seeing this problem with MS Visual Studio Code repository.

Problem is, starting today I have this message:

Retrieving repository 'Visual Studio Code' metadata -----------------------------------------------------------------------------------------------------------------------------------\]
Signature verification failed for file 'repomd.xml' from repository 'Visual Studio Code'.

    Note: Signing data enables the recipient to verify that no modifications occurred after the data
    were signed. Accepting data with no, wrong or unknown signature can lead to a corrupted system
    and in extreme cases even to a system compromise.

    Note: File 'repomd.xml' is the repositories master index file. It ensures the integrity of the
    whole repo.

    Warning: This file was modified after it has been signed. This may have been a malicious change,
    so it might not be trustworthy anymore! You should not continue unless you know it's safe.

Signature verification failed for file 'repomd.xml' from repository 'Visual Studio Code'. Continue? [yes/no] (no):
Retrieving repository 'Visual Studio Code' metadata ...............................................................................................................................[error]
Repository 'Visual Studio Code' is invalid.
[code|https://packages.microsoft.com/yumrepos/vscode] Valid metadata not found at specified URL
Please check if the URIs defined for this repository are pointing to a valid repository.
Skipping repository 'Visual Studio Code' because of the above error.

VSCode web page does not mention changing the key, and it apparently has no expiration date.

Thank you in advance
Cris

2

Without actually looking at this,
I’m not too surprised that there might be problems…
There’s another thread about accessing MSSQL 15/17 on Linux, and that repo had problems too, but likely different

A brief look suggests to me that this repository might be an older, deprecated version of YUM.

If you look at the individual packages, they’re also all over 2 years old… Who knows when it’ll be updated again.

So,
My suggestions…
Assuming these are install packages,
If you want the latest, I’d recommend you just go to Github, clone the current source and build. This used to be the only way to install years ago and I assume should work just as well today.

If you want to install an RPM (I’m not sure why if there are no updates) then just point your zypper install directly at the package (yes, you can install a package using a URL).

IMO,
TSU

3

Hi TSU, and thank you for your reply.

I don’t know where you looked, but I suspect you’re looking at the wrong spot.

VSCode is updated quite regularly, and the most recent package at https://packages.microsoft.com/yumrepos/vscode/ is from today.

There are actually several ways of installing VSCode in linux: there are official .deb and .rpm packages as well as a snap package, as you can see on https://code.visualstudio.com/.

You can also install through an official repository as you can read from https://code.visualstudio.com/docs/setup/linux, and openSUSE is mentioned on that very same page (https://code.visualstudio.com/docs/setup/linux#_opensuse-and-slebased-distributions).

They must have noticed that something was wrong, because I checked again right before writing this message, and zypper is not complaining anymore.

Thank you btw for your willingness to help, and I hope this thread can be of help to others having the same problem or looking for information about vscode.

Cris