Didn't install any keys

Bug #1210657 reported by Joshua Harlow
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
anvil
Fix Released
Critical
Joshua Harlow

Bug Description

The following is happening during ./smithy -a build

INFO: @anvil.packaging.yum : Installing build requirements:
INFO: @anvil.packaging.yum : |-- mysql-devel
INFO: @anvil.packaging.yum : |-- python-setuptools
INFO: @anvil.packaging.yum : |-- unzip
INFO: @anvil.packaging.yum : |-- sqlite-devel
INFO: @anvil.packaging.yum : |-- python
INFO: @anvil.packaging.yum : |-- libxml2-devel
INFO: @anvil.packaging.yum : |-- sudo
INFO: @anvil.packaging.yum : |-- python-devel
INFO: @anvil.packaging.yum : |-- psmisc
INFO: @anvil.packaging.yum : |-- postgresql-devel
INFO: @anvil.packaging.yum : |-- openldap-devel
INFO: @anvil.packaging.yum : |-- wget
INFO: @anvil.packaging.yum : |-- libxslt-devel
INFO: @anvil.packaging.yum : |-- tcpdump
INFO: @anvil.packaging.yum : |-- python-distutils-extra
INFO: @anvil.shell : You can watch progress in another terminal with:
INFO: @anvil.shell : tail -f /home/harlowja/openstack/deps/output/yyoom-transaction-install.log
 ____________________
/ It's time for the \
| penguin on top of |
| your television to |
\ explode. /
 --------------------
  \ || ||
    \ __ ||-----mm||
      \ ( )/_________)//
        (oo)/
        v--v
ProcessExecutionError: Unexpected error while running command.
Command: '/home/harlowja/anvil/tools/yyoom' '--verbose' transaction '--install' 'mysql-devel' '--install' 'python-setuptools' '--install' unzip '--install' 'sqlite-devel' '--install' python '--install' 'libxml2-devel' '--install' sudo '--install' 'python-devel' '--install' psmisc '--install' 'postgresql-devel' '--install' 'openldap-devel' '--install' wget '--install' 'libxslt-devel' '--install' tcpdump '--install' 'python-distutils-extra'

... LOG OUTPUT ...

YYOOM DEBUG: Success - deps resolved
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA256 Signature, key ID 0608b895: NOKEY
Importing GPG key 0x0608B895:
 Userid : EPEL (6) <email address hidden>
 Package: epel-release-6-8.noarch (@/epel-release-6-8.noarch)
 From : /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-6
Traceback (most recent call last):
  File "/home/harlowja/anvil/tools/yyoom", line 343, in <module>
    sys.exit(main(sys.argv))
  File "/home/harlowja/anvil/tools/yyoom", line 335, in main
    return options.func(_get_yum_base(), options) or 0
  File "/home/harlowja/anvil/tools/yyoom", line 174, in _run
    yum_base.install(**pkg)
  File "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__
    self.gen.next()
  File "/home/harlowja/anvil/tools/yyoom", line 311, in _transaction
    rpmDisplay=callback)
  File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 4989, in processTransaction
    self._checkSignatures(pkgs,callback)
  File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 5032, in _checkSignatures
    self.getKeyForPackage(po, self._askForGPGKeyImport)
  File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 4754, in getKeyForPackage
    raise Errors.YumBaseError, _("Didn't install any keys")

Joshua Harlow (harlowja)
Changed in anvil:
importance: Undecided → Critical
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to anvil (master)

Reviewed: https://review.openstack.org/41200
Committed: http://github.com/stackforge/anvil/commit/bb7d92777ae233fee25202190ca0716a1dd898a9
Submitter: Jenkins
Branch: master

commit bb7d92777ae233fee25202190ca0716a1dd898a9
Author: Joshua Harlow <email address hidden>
Date: Fri Aug 9 14:07:53 2013 -0700

    Re-applied _override_sigchecks = True

    After figuring out why this happened on a new
    vm deployment it appears to be due to the gpg
    check of epel causing problems that cause yyoom
    to fail.

    Fixes bug 1210657

    Change-Id: I46f8972fb8676945a1c1edc6d1aba33c81faacce

Changed in anvil:
status: New → Fix Committed
Joshua Harlow (harlowja)
Changed in anvil:
assignee: nobody → Joshua Harlow (harlowja)
Revision history for this message
Joshua Harlow (harlowja) wrote :

The actual code in yum that is causing this.

--- yumcommands.py

  59 def checkGPGKey(base):
  60 """Verify that there are gpg keys for the enabled repositories in the
  61 rpm database.
  62
  63 :param base: a :class:`yum.Yumbase` object.
  64 :raises: :class:`cli.CliError`
  65 """
  66 if base._override_sigchecks:
  67 return
.....

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to anvil (master)

Fix proposed to branch: master
Review: https://review.openstack.org/44410

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to anvil (stable/grizzly)

Fix proposed to branch: stable/grizzly
Review: https://review.openstack.org/44412

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to anvil (stable/grizzly)

Reviewed: https://review.openstack.org/44412
Committed: http://github.com/stackforge/anvil/commit/251bc158fe469b684b21aa779284564904166441
Submitter: Jenkins
Branch: stable/grizzly

commit 251bc158fe469b684b21aa779284564904166441
Author: Ivan A. Melnikov <email address hidden>
Date: Fri Aug 30 10:36:13 2013 +0400

    Make yyoom to import GPG keys automatically

    Instead of disabling checking signatures altogether, we just let
    yyoom import GPG keys if it needs, same way as yum -y does.

    Closes-Bug: #1210657
    Closes-Bug: #1218728
    Change-Id: I5bb03e649b158e5e99a905d62b9498acea4e3751

tags: added: in-stable-grizzly
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to anvil (master)

Reviewed: https://review.openstack.org/44410
Committed: http://github.com/stackforge/anvil/commit/07a5e63b6d8308ffdcbd3df8021c3b39c28720f0
Submitter: Jenkins
Branch: master

commit 07a5e63b6d8308ffdcbd3df8021c3b39c28720f0
Author: Ivan A. Melnikov <email address hidden>
Date: Fri Aug 30 10:36:13 2013 +0400

    Make yyoom to import GPG keys automatically

    Instead of disabling checking signatures altogether, we just let
    yyoom import GPG keys if it needs, same way as yum -y does.

    Related-Bug: #1210657
    Related-Bug: #1218728
    Change-Id: I5bb03e649b158e5e99a905d62b9498acea4e3751

Joshua Harlow (harlowja)
Changed in anvil:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.