On Sunday 07 September 2008 09:39:23 Gene Heskett wrote:
> On Sunday 07 September 2008, Tony Molloy wrote:
> >On Sunday 07 September 2008 09:05:17 Gene Heskett wrote:
> >> On Sunday 07 September 2008, Tony Molloy wrote:
> >> >On Sunday 07 September 2008 07:49:18 David C. Chipman wrote:
> >> >> On Sat, 6 Sep 2008 14:03:08 -0500
> >> >>
> >> >> Bruno Wolff III <bruno@wolff.to> wrote:
> >> >> > Replace $arch with $arch.newkey to get to the new updates and
> >> >> > updates-testing trees. I haven't seen an update to the release
> >> >> > trees show up yet.
> >> >>
> >> >> Hi Bruno,
> >> >>
> >> >> I'm trying to take your advice about changing $arch to
> >> >> $arch.newkey, and it doesn't make any difference. *Where* exactly
> >> >> should the changes be made? I modified the fedora.repo and
> >> >> fedora-updates.repo files, with no change. Thanks,
> >> >>
> >> >> -David Chipman
> >> >
> >> >In the fedora-updates repo change the baseurl to:
> >> >
> >> >baseurl=http://download.fedora.redhat.com/pub/fedora/linux/updates/$rel
> >> >ea s ev er/ i386.newkey
> >> >
> >> >Please use a mirror rather than download.fedora
> >>
> >> I couldn't make a mirror even try to work, so I made it as above, then
> >> chose only the yum-keys file, but it refuses to install using yumex.
> >> 04:01:15 : Error checking package signatures:
> >> Public key for yum-keys-1.1.15-1.fc8.noarch.rpm is not installed
> >>
> >> Advice?
> >>
> >> Thanks.
> >
> >I haven't tried it using yumex. But I could have the same problem when it
> >comes to the actual install as I said it's currently doing the download.
> > You could try setting the gpgkey=0 to switch off gpg-key checking.
> >
> >Tony
>
> Thanks Tony. I might have to do that, but I just caught hell for jumping
> the gun.

Don't worry about that. It's not the first time that's happened ;-)

As I say in another mail to the list I have a reason for getting the update
today if possible. And I am doing it on a test laptop first.

>From home download is at 115/126 rpms so I should know soon if it works.

Tony
>
> >> >I'm currently doing an update on a test laptop and the download size is
> >> > 1.2Gb
> >> >
> >> >Tony
> >>
> >> --
> >> Cheers, Gene
> >> "There are four boxes to be used in defense of liberty:
> >> soap, ballot, jury, and ammo. Please use in that order."
> >> -Ed Howdershelt (Author)
> >>
> >> > > Wait. Don't you mean:
> >>
> >> Yes. Just ignore me when I show extreme signs of Alzheimers.
> >>
> >> - Linus Torvalds on linux-kernel
>
> --
> Cheers, Gene
> "There are four boxes to be used in defense of liberty:
> soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author)
> You look like a million dollars. All green and wrinkled.



--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Arthur Pemberton wrote:
> On Sun, Sep 7, 2008 at 3:41 AM, Tony Molloy <tony.molloy@ul.ie> wrote:
>
>> On Sunday 07 September 2008 09:23:16 Ed Greshko wrote:
>>
>>> Gene Heskett wrote:
>>>
>>>> On Sunday 07 September 2008, Tony Molloy wrote:
>>>>
>>>>> On Sunday 07 September 2008 07:49:18 David C. Chipman wrote:
>>>>>
>>>>>> On Sat, 6 Sep 2008 14:03:08 -0500
>>>>>>
>>>>>> Bruno Wolff III <bruno@wolff.to> wrote:
>>>>>>
>>>>>>> Replace $arch with $arch.newkey to get to the new updates and
>>>>>>> updates-testing trees. I haven't seen an update to the release trees
>>>>>>> show up yet.
>>>>>>>
>>>>>> Hi Bruno,
>>>>>>
>>>>>> I'm trying to take your advice about changing $arch to
>>>>>> $arch.newkey, and it doesn't make any difference. *Where* exactly
>>>>>> should the changes be made? I modified the fedora.repo and
>>>>>> fedora-updates.repo files, with no change. Thanks,
>>>>>>
>>>>>> -David Chipman
>>>>>>
>>>>> In the fedora-updates repo change the baseurl to:
>>>>>
>>>>> baseurl=http://download.fedora.redhat.com/pub/fedora/linux/updates/$rele
>>>>> asev er/ i386.newkey
>>>>>
>>>>> Please use a mirror rather than download.fedora
>>>>>
>>>> I couldn't make a mirror even try to work, so I made it as above, then
>>>> chose only the yum-keys file, but it refuses to install using yumex.
>>>> 04:01:15 : Error checking package signatures:
>>>> Public key for yum-keys-1.1.15-1.fc8.noarch.rpm is not installed
>>>>
>>>> Advice?
>>>>
>>> Do you think that waiting for the official announcement and procedure
>>> from the Fedora Project is a good/valid idea? Do you think that
>>> following unofficial advice and procedures may result in a
>>> mis-configured system that may need more attention later? Would that be
>>> acceptable?
>>>
>>>
>> In my case there's a reason for doing the update and as I said I'm doing it on
>> a TEST laptop to check it out first.
>>
>> I've just installed Fedora-9 on approx two hundred workstations last week and
>> will have several hundred students back tomorrow. So I was hoping to get the
>> update done today and not to have to do it during semester.
>>
>> Tony
>>
>
> Sounds like a good reason to me.
>
I'm sure Tony feels a whole lot better now that someone has validated in
reasoning. :-)

FWIW, I can talk myself into doing just about anything...and it sounds
good at the time. Like the time that I talked myself into continuing
through an intersection on my bicycle because I was convinced the guy on
the motor scooter would see me and yield the right of way. Granted it
was a hasty decision...yet it did not turn out well for me in the end. :-(

--
A political man can have as his aim the realization of freedom, but he
has no means to realize it other than through violence. -- Jean Paul Sartre

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sunday 07 September 2008 09:46:04 Ed Greshko wrote:
> Tony Molloy wrote:
> > On Sunday 07 September 2008 09:23:16 Ed Greshko wrote:
> >> Gene Heskett wrote:
> >>> On Sunday 07 September 2008, Tony Molloy wrote:
> >>>> On Sunday 07 September 2008 07:49:18 David C. Chipman wrote:
> >>>>> On Sat, 6 Sep 2008 14:03:08 -0500
> >>>>>
> >>>>> Bruno Wolff III <bruno@wolff.to> wrote:
> >>>>>> Replace $arch with $arch.newkey to get to the new updates and
> >>>>>> updates-testing trees. I haven't seen an update to the release trees
> >>>>>> show up yet.
> >>>>>
> >>>>> Hi Bruno,
> >>>>>
> >>>>> I'm trying to take your advice about changing $arch to
> >>>>> $arch.newkey, and it doesn't make any difference. *Where* exactly
> >>>>> should the changes be made? I modified the fedora.repo and
> >>>>> fedora-updates.repo files, with no change. Thanks,
> >>>>>
> >>>>> -David Chipman
> >>>>
> >>>> In the fedora-updates repo change the baseurl to:
> >>>>
> >>>> baseurl=http://download.fedora.redhat.com/pub/fedora/linux/updates/$re
> >>>>le asev er/ i386.newkey
> >>>>
> >>>> Please use a mirror rather than download.fedora
> >>>
> >>> I couldn't make a mirror even try to work, so I made it as above, then
> >>> chose only the yum-keys file, but it refuses to install using yumex.
> >>> 04:01:15 : Error checking package signatures:
> >>> Public key for yum-keys-1.1.15-1.fc8.noarch.rpm is not installed
> >>>
> >>> Advice?
> >>
> >> Do you think that waiting for the official announcement and procedure
> >> from the Fedora Project is a good/valid idea? Do you think that
> >> following unofficial advice and procedures may result in a
> >> mis-configured system that may need more attention later? Would that be
> >> acceptable?
> >
> > In my case there's a reason for doing the update and as I said I'm doing
> > it on a TEST laptop to check it out first.
> >
> > I've just installed Fedora-9 on approx two hundred workstations last week
> > and will have several hundred students back tomorrow. So I was hoping to
> > get the update done today and not to have to do it during semester.
>
> Well, for your sake, I certainly hope that there are no security related
> kernel updates issued after the semester begins...otherwise you may be
> compelled to update those two hundred workstations again anyway. :-)
>
>

That's a problem I know ;-(

We tried automatic updates a few years ago in one lab and were cought by the
famous X11 bug. So 40 Dell workstations wouldn't boot into X on a monday
morning. Not a very nice wat to start your week ;-)

So these days we re-install the machines twice a year before the start of each
semester. These are on a private network and are pretty much tied down for
undergraduate use only.

Tony

> --
> Calculon: An Oscar, you say? That would get me out of this festering
> rats' nest called television once and for all.


--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sunday 07 September 2008 09:53:35 Ed Greshko wrote:
> Arthur Pemberton wrote:
> > On Sun, Sep 7, 2008 at 3:41 AM, Tony Molloy <tony.molloy@ul.ie> wrote:
> >> On Sunday 07 September 2008 09:23:16 Ed Greshko wrote:
> >>> Gene Heskett wrote:
> >>>> On Sunday 07 September 2008, Tony Molloy wrote:
> >>>>> On Sunday 07 September 2008 07:49:18 David C. Chipman wrote:
> >>>>>> On Sat, 6 Sep 2008 14:03:08 -0500
> >>>>>>
> >>>>>> Bruno Wolff III <bruno@wolff.to> wrote:
> >>>>>>> Replace $arch with $arch.newkey to get to the new updates and
> >>>>>>> updates-testing trees. I haven't seen an update to the release
> >>>>>>> trees show up yet.
> >>>>>>
> >>>>>> Hi Bruno,
> >>>>>>
> >>>>>> I'm trying to take your advice about changing $arch to
> >>>>>> $arch.newkey, and it doesn't make any difference. *Where* exactly
> >>>>>> should the changes be made? I modified the fedora.repo and
> >>>>>> fedora-updates.repo files, with no change. Thanks,
> >>>>>>
> >>>>>> -David Chipman
> >>>>>
> >>>>> In the fedora-updates repo change the baseurl to:
> >>>>>
> >>>>> baseurl=http://download.fedora.redhat.com/pub/fedora/linux/updates/$r
> >>>>>ele asev er/ i386.newkey
> >>>>>
> >>>>> Please use a mirror rather than download.fedora
> >>>>
> >>>> I couldn't make a mirror even try to work, so I made it as above, then
> >>>> chose only the yum-keys file, but it refuses to install using yumex.
> >>>> 04:01:15 : Error checking package signatures:
> >>>> Public key for yum-keys-1.1.15-1.fc8.noarch.rpm is not installed
> >>>>
> >>>> Advice?
> >>>
> >>> Do you think that waiting for the official announcement and procedure
> >>> from the Fedora Project is a good/valid idea? Do you think that
> >>> following unofficial advice and procedures may result in a
> >>> mis-configured system that may need more attention later? Would that
> >>> be acceptable?
> >>
> >> In my case there's a reason for doing the update and as I said I'm doing
> >> it on a TEST laptop to check it out first.
> >>
> >> I've just installed Fedora-9 on approx two hundred workstations last
> >> week and will have several hundred students back tomorrow. So I was
> >> hoping to get the update done today and not to have to do it during
> >> semester.
> >>
> >> Tony
> >
> > Sounds like a good reason to me.
>
> I'm sure Tony feels a whole lot better now that someone has validated in
> reasoning. :-)

Well not quite!!

Download completed but install failed ;-(

The public key not is not available. So it's looking for the new key as
expected and it's not there.

I disabled the gpgcheck in fedora-updates-repo ( which I wouldn't recommend on
any machine , this is a TEST box ) and it's installing now.

Tony



>
> FWIW, I can talk myself into doing just about anything...and it sounds
> good at the time. Like the time that I talked myself into continuing
> through an intersection on my bicycle because I was convinced the guy on
> the motor scooter would see me and yield the right of way. Granted it
> was a hasty decision...yet it did not turn out well for me in the end. :-(
>
> --
> A political man can have as his aim the realization of freedom, but he
> has no means to realize it other than through violence. -- Jean Paul Sartre


--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Tony Molloy wrote:

I disabled the gpgcheck in fedora-updates-repo ( which I wouldn't recommend on
any machine , this is a TEST box ) and it's installing now.




Perhaps in

http://download.fedora.redhat.com/pub/fedora/linux/updates/9/i386.newkey/fedora-release-notes-9.0.1-1.noarch.rpm

there are new gpg keys ?

Andrea

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sunday 07 September 2008 11:10:25 Andrea Mastellone wrote:
> Tony Molloy wrote:
> > I disabled the gpgcheck in fedora-updates-repo ( which I wouldn't
> > recommend on any machine , this is a TEST box ) and it's installing now.
>
> Perhaps in
>
> http://download.fedora.redhat.com/pub/fedora/linux/updates/9/i386.newkey/fe
>dora-release-notes-9.0.1-1.noarch.rpm
>
> there are new gpg keys ?
>
> Andrea

I don't think so. I think there is a new fedora-release rpm which will contain
the new keys and that's not on my local mirrors yet.

Tony

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sun, Sep 7, 2008 at 4:59 PM, Tony Molloy <tony.molloy@ul.ie> wrote:
> On Sunday 07 September 2008 11:10:25 Andrea Mastellone wrote:
>> Tony Molloy wrote:
>> > I disabled the gpgcheck in fedora-updates-repo ( which I wouldn't
>> > recommend on any machine , this is a TEST box ) and it's installing now.
>>
>> Perhaps in
>>
>> http://download.fedora.redhat.com/pub/fedora/linux/updates/9/i386.newkey/fe
>>dora-release-notes-9.0.1-1.noarch.rpm
>>
>> there are new gpg keys ?
>>
>> Andrea
>
> I don't think so. I think there is a new fedora-release rpm which will contain
> the new keys and that's not on my local mirrors yet
>

Tony,

Can you confirm if the updates you downloaded (~1.2GB) are newer since
Aug 12 (since the incident) or are they just the same updates released
after F9 release but signed with a new key?

I'm just worried that I'll have to download and "update" the same
updates I have.

Steve

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sun, 2008-09-07 at 08:36 +0100, Tony Molloy wrote:
> On Sunday 07 September 2008 07:49:18 David C. Chipman wrote:
> > On Sat, 6 Sep 2008 14:03:08 -0500
> >
> > Bruno Wolff III <bruno@wolff.to> wrote:
> > > Replace $arch with $arch.newkey to get to the new updates and
> > > updates-testing trees. I haven't seen an update to the release trees
> > > show up yet.
> >
> > Hi Bruno,
> >
> > I'm trying to take your advice about changing $arch to
> > $arch.newkey, and it doesn't make any difference. *Where* exactly
> > should the changes be made? I modified the fedora.repo and
> > fedora-updates.repo files, with no change. Thanks,
> >
> > -David Chipman
>
>
>
> In the fedora-updates repo change the baseurl to:
>
> baseurl=http://download.fedora.redhat.com/pub/fedora/linux/updates/$releasever/
> i386.newkey
>
> Please use a mirror rather than download.fedora
>
> I'm currently doing an update on a test laptop and the download size is 1.2Gb
>
> Tony
>
When I do this the update starts but then fails with a missing
dependency error.
--
================================================== =====================
A rolling disk gathers no MOS.
================================================== =====================
Aaron Konstam telephone: (210) 656-0355 e-mail: akonstam@sbcglobal.net

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sun, Sep 07, 2008 at 12:29:01 +0100,
Tony Molloy <tony.molloy@ul.ie> wrote:
> On Sunday 07 September 2008 11:10:25 Andrea Mastellone wrote:
> > Tony Molloy wrote:
> > > I disabled the gpgcheck in fedora-updates-repo ( which I wouldn't
> > > recommend on any machine , this is a TEST box ) and it's installing now.
> >
> > Perhaps in
> >
> > http://download.fedora.redhat.com/pub/fedora/linux/updates/9/i386.newkey/fe
> >dora-release-notes-9.0.1-1.noarch.rpm
> >
> > there are new gpg keys ?
> >
> > Andrea
>
> I don't think so. I think there is a new fedora-release rpm which will contain
> the new keys and that's not on my local mirrors yet.

If you look at the koji info for fedora-release-9-3.1 you will see no notes
about a changed key, so I don't think that the new fedora-release package
is ready yet.

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

On Sun, Sep 07, 2008 at 17:09:53 +0530,
Steve Repo <scmuser@gmail.com> wrote:
>
> Can you confirm if the updates you downloaded (~1.2GB) are newer since
> Aug 12 (since the incident) or are they just the same updates released
> after F9 release but signed with a new key?
>
> I'm just worried that I'll have to download and "update" the same
> updates I have.

There are a bunch of new updates in those repos. If you are worried about
having a botched update just wait.

--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines