I decided to put F38 onto my new machine from the start (so a clean
install), and now it seems to have some errors with DNF/RPM that I haven't
seen before on F37 when I tried the same thing.

Specifically, I am trying to install packages from a 3rd-party repository
(the Intel oneAPI repo), and it is throwing errors like:

package intel-basekit-2023.1.0-46401.x86_64 does not verify: RSA signature:
BAD (package tag 1002: invalid OpenPGP signature)
  package intel-hpckit-2023.1.0-46346.x86_64 does not verify: RSA
signature: BAD (package tag 1002: invalid OpenPGP signature)

There are two things I don't understand here.

The first is, why does DNF/RPM in F38 fail to parse this GPG signature,
while DNF/RPM on F37 does parse it?

Second, as a workaround I set both gpgcheck options in the repo file for
this repository to be 0, but it still returns the same errors, so why is it
still checking the GPG signature of the package if I disabled the GPG
checks for the entire repo?

For completeness, the versions are:

F38:
DNF 4.15.0-1.fc38
RPM 4.18.1-1.fc38

F37
DNF 4.14.0-1.fc37
RPM 4.18.0-1.fc37

Thanks,
-Ian
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to