Erase prior GPG key from rpm #2988 #2989
Conversation
A silent failure of 'rpm --import' to update our expiration extended public key was observed when the prior non-extended key existed within rpmkeys. Resolve by blindly removing known prior keys by Version on every rockstor systemd cascade (rockstor-pre specifically), and moving the `rpm --import in-code-private-key` from Web-UI activation to the same systemd service. Both command invocations are set to be failure tolerant.
TestingA source install on Tumbleweed was modified with the patched files. This install had the prior Indicated rpm prior import of the older non-extended key.
and all rockstor service stopped and restarted: and the Rockstor key found and examined similarly: In the above example the new key was instantiated under the same 'package' name as the prior, now removed, package. |
Testing rpm buildA Leap 15.6 host was used with no prior Rockstor public keys:
A new gpg-pubkey-5f043187 rpm pub-key package version was found to have been installed with the following Version-Revision info: And the Description was confirmed to contain the extended public key. The same system was reboot to ensure all rockstor services started as expected. |
A silent failure of 'rpm --import' to update our expiration extended public key was observed when the prior non-extended key existed within rpmkeys.
Fixes #2988
Resolve by blindly removing known prior keys by Version on every rockstor systemd cascade (rockstor-pre specifically), and moving the
rpm --import in-code-private-keyfrom Web-UI activation to the same systemd service. Both command invocations are set to be failure tolerant.