CentOS 7 - MariaDB 설치시 GPG 키 오류 #96

Activity

1. ibin79

   self-assigned this

   on Feb 10, 2023
2. ibin79 commented on Feb 10, 2023

   

   ibin79

   on Feb 10, 2023

   ContributorAuthor

   More actions

   임시 조치

   • 최신 GPP 키 다운로드후, 설치 잘 됨.

   

   cd /etc/pki/rpm-gpg/ && curl -O http://mirror.mariadb.org/yum/RPM-GPG-KEY-MariaDB
3. ibin79 commented on Feb 11, 2023

   

   ibin79

   on Feb 11, 2023

   Last edited by ibin79

   ContributorAuthor

   More actions

   변경 시기

   02.06 stack v1.3.0 빌드 테스트시엔 문제가 없었으나, 그 이후로 바뀐 것으로 추정.

   개선

   공식 가이드 방법으로 대체

   https://mariadb.com/kb/en/gpg/

   Beginning in 2023 we migrated the key used to sign our yum/dnf/zypper repositories and to sign our source code and binary tarballs to the same key we use for Debian and Ubuntu.

   rpmkeys --import https://supplychain.mariadb.com/MariaDB-Server-GPG-KEY

   • 파일이 아닌 rpm 패키지로 설치됨

   rpm -qi gpg-pubkey-c74cd1d8-56fc10ab
   
   Name        : gpg-pubkey
   Version     : c74cd1d8
   Release     : 56fc10ab
   Architecture: (none)
   Install Date: Sat 11 Feb 2023 11:32:03 AM KST
   Group       : Public Keys
   Size        : 0
   License     : pubkey
   Signature   : (none)
   Source RPM  : (none)
   Build Date  : Thu 31 Mar 2016 02:45:15 AM KST
   Build Host  : localhost
   Relocations : (not relocatable)
   Packager    : MariaDB Signing Key <[email protected]>
   Summary     : gpg(MariaDB Signing Key <[email protected]>)

   • https://r.mariadb.com/downloads/mariadb_repo_setup 설치 방법은 rpm --import, curl ... 2가지임.

               msg info 'Adding trusted package signing keys...'
               if rpm --import "${key_urls[@]}"
               then
                   pushd /etc/pki/rpm-gpg/
                     for key in ${key_urls[@]} ; do curl -LsSO ${key};done
                   popd
                   msg info 'Successfully added trusted package signing keys'
               else
                   msg error 'Failed to add trusted package signing keys'
               fi

   • mariadb_repo_setup 처럼 2가지 다 포함.
4. ibin79 commented on Feb 11, 2023

   

   ibin79

   on Feb 11, 2023

   Last edited by ibin79

   ContributorAuthor

   More actions

   기존 사용자 yum 업데이트 에러시, KEY 갱신 방법

   • yum update MariaDB-* 실행시 에러

   경고: /var/cache/yum/x86_64/7/mariadb/packages/MariaDB-server-10.6.12-1.el7.centos.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID c74cd1d8: NOKEY1 MB/s |  24 MB  00:00:00 ETA 
   Public key for MariaDB-server-10.6.12-1.el7.centos.x86_64.rpm is not installed
   MariaDB-server-10.6.12-1.el7.centos.x86_64.rpm                                                                                                              |  25 MB  00:00:06     
   Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MariaDB
   
   
   The GPG keys listed for the "MariaDB" repository are already installed but they are not correct for this package.
   Check that the correct key URLs are configured for this repository.
   
   
    Failing package is: MariaDB-server-10.6.12-1.el7.centos.x86_64
    GPG Keys are configured as: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-MariaDB
   

   • 다음 명령으로 RPM-GPG-KEY-MariaDB 를 갱신하면 해결됨.

   rpmkeys --import https://supplychain.mariadb.com/MariaDB-Server-GPG-KEY
   curl -LsS -o /etc/pki/rpm-gpg/RPM-GPG-KEY-MariaDB https://supplychain.mariadb.com/MariaDB-Server-GPG-KEY
5. ibin79

   pinned this issue on Feb 11, 2023
6. ibin79

   added a commit that references this issue on Feb 11, 2023

   #96 MariaDB 의 RPM GPG KEY 갱신

   23d08a2
7. ibin79 commented on Nov 1, 2023

   

   ibin79

   on Nov 1, 2023

   ContributorAuthor

   More actions

   추가 특이사항 없으므로 종결
8. ibin79

   closed this as completedon Nov 1, 2023
9. ibin79

   unpinned this issue on Nov 1, 2023