| Summary: | rpm: backport w/a of MD5 hashes sizes to rosa2014.1 | ||
|---|---|---|---|
| Product: | [ROSA-based products] ROSA Fresh | Reporter: | Mikhail Novosyolov <m.novosyolov> |
| Component: | System (kernel, glibc, systemd, bash, PAM...) | Assignee: | ROSA Linux Bugs <bugs> |
| Status: | RESOLVED FIXED | QA Contact: | ROSA Linux Bugs <bugs> |
| Severity: | critical | ||
| Priority: | High | CC: | alzim, andrey.bondrov, v.potapov |
| Version: | All | Flags: | v.potapov:
qa_verified+
alzim: published+ |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Platform: | --- | ROSA Vulnerability identifier: | |
| RPM Package: | ISO-related: | ||
| Bad POT generating: | Upstream: | ||
|
Description
Mikhail Novosyolov
2020-02-15 19:46:52 MSK
"не удалось установить, неверные rpm-файлы" (In reply to Vladimir Potapov from comment #1) > "не удалось установить, неверные rpm-файлы" Это про что? (In reply to Mikhail Novosyolov from comment #0) > Publish to main/release and sign it manually!!! * main/updates rpm-5.4.10-69 https://abf.io/build_lists/3205583 https://abf.io/build_lists/3205584 **************************** Advisory ****************************** Backport of the workaround of the bug#10204 to rosa2014.1 to enable installing newly published packages which are sighed with rpm4. ********************************************************************* QA Verified Publish to main/release and sign it manually!!! (In reply to Vladimir Potapov from comment #4) > Publish to main/release and sign it manually!!! * main/updates > Publish to main/release and sign it manually!!!
Was it done? I mean "sign it manually" part.
(In reply to Andrey Bondrov from comment #6) > > Publish to main/release and sign it manually!!! > > Was it done? I mean "sign it manually" part. Publisher has been switched back to rpm5 to sign mdv packages: https://github.com/OpenMandrivaSoftware/rosa-publish-worker/commit/d88f7ac05917550eff29fb680cc35f8dc324968a So, during Alzim's publication, it should have been signed by rpm5. Но вообще, конечно, прежде, чем публиковать, надо читать, что написано. Тут чисто случайно не возникло проблем. |