LinuxQuestions.org - [SOLVED] slarm64: slackpkg GPG check fails

- Slackware - ARM (https://www.linuxquestions.org/questions/slackware-arm-108/)

- - slarm64: slackpkg GPG check fails (https://www.linuxquestions.org/questions/slackware-arm-108/slarm64-slackpkg-gpg-check-fails-4175701481/)

slarm64: slackpkg GPG check fails

Lately, on my Rock-Pi 4 with slarm64, when launching

Code:

# slackpkg update && slackpkg upgrade-all

I get this error message:

Code:

[...]

                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2...                                                      

--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2                                                                    

Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    

Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                

HTTP request sent, awaiting response... 200 OK                                

Length: 14 [application/x-bzip2]                                              

Saving to: ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’                                                                                                        



/tmp/slackpkg.mJ4R82/testi 100%[=====================================>]      14  --.-KB/s    in 0s                                                            



2021-10-04 19:49:36 (483 KB/s) - ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’ saved [14/14]                                                                    



                Checksums                                                      

                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5...                                                            

--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5                                                                          

Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    

Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                

HTTP request sent, awaiting response... 200 OK                                

Length: 341770 (334K)                                                          

Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’                                



/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>] 333.76K  1.20MB/s    in 0.3s                                                          



2021-10-04 19:49:36 (1.20 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’ saved [341770/341770]                                                                  



                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc...                                                        

--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc                                                                      

Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    

Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                

HTTP request sent, awaiting response... 200 OK                                

Length: 691 [application/pgp-signature]                                        

Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’                            



/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>]    691  --.-KB/s    in 0s                                                            



2021-10-04 19:49:36 (19.3 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’ saved [691/691]                                                                    





                ERROR: Verification of the  gpg signature on CHECKSUMS.md5                                                                                    

                      failed! This could mean that the file is out of date                                                                                    

                      or has been tampered with. If you use mirrors.slackware.com                                                                            

                      as your mirror, this could also mean that the mirror to                                                                                

                      which you got redirected is not yet updated with the most                                                                              

                      recent changes in the Slackware tree.                                                                                                  







You need the GPG key of slarm64 AArch64 <security@slarm64.org>.                                                                                                

To download and install that key, run:                                        



        # slackpkg update gpg                                                  



You can disable GPG checking too, but it is not a good idea.                                                                                                  

To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG                                                                                        

variable to off - you can see an example in the original slackpkg.conf.new                                                                                    

file distributed with slackpkg.

After

Code:

# slackpkg update gpg



                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY

                        Slackware Linux Project's GPG key added

doing

Code:

# slackpkg update && slackpkg upgrade-all

still fails.

Changing the mirror doesn't help either.
For updating my system I need to disable CHECKGPG in /etc/slackpkg/slackpkg.conf, but that's not recommended.

Any ideas how I can get rid of this error without disabling CHECKGPG?

Working OK on SlackwareUK tonight. There was a problem over the week-end, which now seems resolved.

--
Pete

On my system it still fails, also with the slackware.uk mirror:

Code:

# slackpkg update && slackpkg upgrade-all

[...]

                        Downloading http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc...

--2021-10-05 07:56:56--  http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc

Resolving slackware.uk (slackware.uk)... 2a02:2498:e004:2a::a861, 216.119.155.61

Connecting to slackware.uk (slackware.uk)|2a02:2498:e004:2a::a861|:80... connected.

HTTP request sent, awaiting response... 200 OK

Length: 691 [application/pgp-signature]

Saving to: ‘/tmp/slackpkg.LWPBma/CHECKSUMS.md5.asc’



/tmp/slackpkg.LWPBma/CHECK 100%[=====================================>]    691  --.-KB/s    in 0s      



2021-10-05 07:56:56 (23.8 MB/s) - ‘/tmp/slackpkg.LWPBma/CHECKSUMS.md5.asc’ saved [691/691]





                ERROR: Verification of the  gpg signature on CHECKSUMS.md5

                      failed! This could mean that the file is out of date

                      or has been tampered with. If you use mirrors.slackware.com

                      as your mirror, this could also mean that the mirror to

                      which you got redirected is not yet updated with the most

                      recent changes in the Slackware tree.







You need the GPG key of slarm64 AArch64 <security@slarm64.org>.

To download and install that key, run:



        # slackpkg update gpg



You can disable GPG checking too, but it is not a good idea.

To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG

variable to off - you can see an example in the original slackpkg.conf.new

file distributed with slackpkg.

Code:

You need the GPG key of slarm64 AArch64 <security@slarm64.org>.

To download and install that key, run:



        # slackpkg update gpg

Could this be the problem?

Just checked again, and its fine here on the SlackwareUK mirror.

--
Pete

Quote:

Code:

 You need the GPG key of slarm64 AArch64 <security@slarm64.org>.

To download and install that key, run:



          # slackpkg update gpg

Could this be the problem?

As I already wrote in my first post, this doesn't help.

I'm out of ideas then! Mine updated OK late last night, and no changes this morning, so I can't re-try.

I do keep a local copy of both Slackware64-current and slarm64-current on a local NAS here - not really necessary for slarm64, but I have 3 or 4 machines running slackware and this saves on bandwidth! I rsync to slackwareUK daily and then update from there. GPG is still checked, though.

Might be worth trying rsyncing a local drive and then updating from there?

Otherwise you might have to wait and see if anyone else is having problems. Not sure what else to suggest.

--
Pete

I also have a local host system syncing a mirror locally, that's being updated daily, but setting the path as mirror to /etc/slackpkg/mirrors doesn't solve that issue:

Code:

# slackpkg update gpg && slackpkg update && slackpkg upgrade-all



                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY

                        Slackware Linux Project's GPG key added





                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY

                        Slackware Linux Project's GPG key added

Updating the package lists...

        Downloading...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/CHECKSUMS.md5.asc...

Files //var/lib/slackpkg/CHECKSUMS.md5.asc and /tmp/slackpkg.guujH6/CHECKSUMS.md5.asc differ



        Downloading...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/ChangeLog.txt...

                List of all files

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/patches/MANIFEST.bz2...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/slarm64/MANIFEST.bz2...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/extra/MANIFEST.bz2...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/pasture/MANIFEST.bz2...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/testing/MANIFEST.bz2...

                Checksums

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/CHECKSUMS.md5...

                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/CHECKSUMS.md5.asc...



                ERROR: Verification of the  gpg signature on CHECKSUMS.md5

                      failed! This could mean that the file is out of date

                      or has been tampered with. If you use mirrors.slackware.com

                      as your mirror, this could also mean that the mirror to

                      which you got redirected is not yet updated with the most

                      recent changes in the Slackware tree.







You need the GPG key of slarm64 AArch64 <security@slarm64.org>.

To download and install that key, run:



        # slackpkg update gpg



You can disable GPG checking too, but it is not a good idea.

To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG

variable to off - you can see an example in the original slackpkg.conf.new

file distributed with slackpkg.

OK, that's me out of ideas, then! Sorry!

--
Pete

Quote:

Originally Posted by slacksam (Post 6289037)

Lately, on my Rock-Pi 4 with slarm64, when launching

Code:

# slackpkg update && slackpkg upgrade-all

I get this error message:

Code:

[...]

                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2...                                                      

--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2                                                                    

Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    

Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                

HTTP request sent, awaiting response... 200 OK                                

Length: 14 [application/x-bzip2]                                              

Saving to: ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’                                                                                                        



/tmp/slackpkg.mJ4R82/testi 100%[=====================================>]      14  --.-KB/s    in 0s                                                            



2021-10-04 19:49:36 (483 KB/s) - ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’ saved [14/14]                                                                    



                Checksums                                                      

                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5...                                                            

--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5                                                                          

Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    

Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                

HTTP request sent, awaiting response... 200 OK                                

Length: 341770 (334K)                                                          

Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’                                



/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>] 333.76K  1.20MB/s    in 0.3s                                                          



2021-10-04 19:49:36 (1.20 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’ saved [341770/341770]                                                                  



                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc...                                                        

--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc                                                                      

Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    

Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                

HTTP request sent, awaiting response... 200 OK                                

Length: 691 [application/pgp-signature]                                        

Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’                            



/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>]    691  --.-KB/s    in 0s                                                            



2021-10-04 19:49:36 (19.3 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’ saved [691/691]                                                                    





                ERROR: Verification of the  gpg signature on CHECKSUMS.md5                                                                                    

                      failed! This could mean that the file is out of date                                                                                    

                      or has been tampered with. If you use mirrors.slackware.com                                                                            

                      as your mirror, this could also mean that the mirror to                                                                                

                      which you got redirected is not yet updated with the most                                                                              

                      recent changes in the Slackware tree.                                                                                                  







You need the GPG key of slarm64 AArch64 <security@slarm64.org>.                                                                                                

To download and install that key, run:                                        



        # slackpkg update gpg                                                  



You can disable GPG checking too, but it is not a good idea.                                                                                                  

To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG                                                                                        

variable to off - you can see an example in the original slackpkg.conf.new                                                                                    

file distributed with slackpkg.

After

Code:

# slackpkg update gpg



                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY

                        Slackware Linux Project's GPG key added

doing

Code:

# slackpkg update && slackpkg upgrade-all

check which keys are installed

Code:

sudo gpg --list-keys

Quote:

pub 2048R/C5DB61BC 2015-04-21
uid Your Name (Optional Comment)
sub 2048R/18C601D3 2015-04-21

remove all mentions slarm64 AArch64 <security[a]slarm64.org>

Code:

sudo gpg --delete-keys C5DB61BC

@sndwvs:
According to your advice, I deleted the slarm64 related gpg key, but I also had a gpg key of "Slackware ARM", which I also deleted. Then I ran "slackpkg update gpg", which added the key of "Slackware ARM", but a "slackpkg upgrade-all" says "You need the GPG key of slarm64 AArch64".

Here are the steps:

Code:

# gpg --list-keys

/root/.gnupg/pubring.gpg

------------------------

pub  1024D/9C7BA3B6 2007-01-27

uid                  SlackBuilds.org Development Team <slackbuilds-devel[at]slackbuilds.org>

sub  2048g/C575D49B 2007-01-27

Code:

# slackpkg update



[...]



                        Downloading http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc...

--2021-10-05 21:23:36--  http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc

Resolving slackware.uk (slackware.uk)... 2a02:2498:e004:2a::a861, 216.119.155.61

Connecting to slackware.uk (slackware.uk)|2a02:2498:e004:2a::a861|:80... connected.

HTTP request sent, awaiting response... 200 OK

Length: 691 [application/pgp-signature]

Saving to: ‘/tmp/slackpkg.utnCiQ/CHECKSUMS.md5.asc’



/tmp/slackpkg.utnCiQ/CHECK 100%[=====================================>]    691  --.-KB/s    in 0s      



2021-10-05 21:23:36 (11.4 MB/s) - ‘/tmp/slackpkg.utnCiQ/CHECKSUMS.md5.asc’ saved [691/691]





                ERROR: Verification of the  gpg signature on CHECKSUMS.md5

                      failed! This could mean that the file is out of date

                      or has been tampered with. If you use mirrors.slackware.com

                      as your mirror, this could also mean that the mirror to

                      which you got redirected is not yet updated with the most

                      recent changes in the Slackware tree.

Code:

# gpg --list-keys

/root/.gnupg/pubring.gpg

------------------------

pub  1024D/9C7BA3B6 2007-01-27

uid                  SlackBuilds.org Development Team <slackbuilds-devel[at]slackbuilds.org>

sub  2048g/C575D49B 2007-01-27



pub  2048R/1623FC33 2014-06-16

uid                  Slackware ARM (Slackware ARM Linux Project) <mozes[at]slackware.com>

sub  2048R/5EA4DF60 2014-06-16

Code:

# slackpkg upgrade-all



You need the GPG key of slarm64 AArch64 <security[at]slarm64.org>.

To download and install that key, run:



        # slackpkg update gpg



You can disable GPG checking too, but it is not a good idea.

To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG

variable to off - you can see an example in the original slackpkg.conf.new

file distributed with slackpkg.

try to download and update the latest slackpkg first.

Quote:

pub 3072R/4690E354 2020-12-19 [expires: 2040-12-14]
uid slarm64 AArch64 <security[a]slarm64.org>
sub 3072R/91353E37 2020-12-19 [expires: 2040-12-14]

Is slackpkg-15.0.7 the latest version?
This was already installed. I made a reinstall, but that didn't help.

Whatever the issue is, it is something unique to your machine. Just updated slarm64-current here using slackpkg-15.0.7 with no issues.

All I can think of is to go through all the configuration files very carefully, and make sure everything is as it should be (only one mirror selected, etc).

Best of luck!

--
Pete

Quote:

Originally Posted by slacksam (Post 6289376)

Is slackpkg-15.0.7 the latest version?
This was already installed. I made a reinstall, but that didn't help.

from your output

Code:

gpg --list-keys

it is clear that the key is not being added.
check

Code:

ldd /usr/bin/curl

ldd /usr/bin/wget

This happens on all the new images that I build. My workaround is to just (as root):

Code:

wget http://dl.slarm64.org/slarm64/slarm64-current/GPG-KEY

(any mirror in the /etc/slackpkg/mirrors file should work for that)

and then:

Code:

gpg --import GPG-KEY

after that, slackpkg works as expected.

There is probably a more official way to do that, but this is my quick and dirty fix when I run into the same issue.