Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
On Thu, May 11, 2006 at 08:38:51AM +0200, Ulrich Windl wrote: On 10 May 2006 at 21:10, houghi wrote: On Wed, May 10, 2006 at 08:59:42PM +0200, Rainer Hattenhauer wrote: Excuse me, seems that I did made the last run as normal user and not as root, I tried it again as root, and everything is fine with your new script (stupid me). No, everything is NOT fine. It should be run as user, not as root. Please elaborate. I think thats because you wrote VERSION=0.30 BETA not in one string Hey. It shows what it says. :-) LANG=C date Will NOT set $LANG to C date, but to C (and it will start the command date)! I know. It is a simple error in a Beta version, and that is what it says, BETA. :-) houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [still no luck]
On Wed, May 10, 2006 at 10:30:59AM +0200, Rainer Hattenhauer wrote: Hi, hoped that the problem with makeSUSEdvd was solved, but I still ran into problems. The situation: I'm working in an updated suse-factory install (smart update/upgrade) and I'm using the makeSUSEdvd Skript v0.29 which I downloaded from sourceforge. When doing the remastering of the 5 CDs, the script complains about: ... gpg skipped -a no secret key ... gpg missing argument for option -u The resulting DVD-iso can be booted whithin VmWare, and for the first time it offers me now a media check for the DVD (iso). But when trying to install, aftre chooseing the KDE Desktop, i still get this catalog not found error. Houghi, am i using already the latest version of makeSUSEdvd, or is there still a problem with my gpg-setup? You must create (or already have) a GPG key pair to resign the CD content. gpg --gen-key if you do not have one yet. Ciao, Marcus - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [still no luck]
Hi Marcus, You must create (or already have) a GPG key pair to resign the CD content. gpg --gen-key if you do not have one yet. Thank you, already thought that might be the problem. Should the key have some special form, i.e. DSA or RSA, 2048 bit etc., or should i take the defaults offered by gpg --keygen? Greetings, Rainer - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [still no luck]
On Wed, May 10, 2006 at 10:33:05AM +0200, Marcus Meissner wrote: You must create (or already have) a GPG key pair to resign the CD content. gpg --gen-key if you do not have one yet. The new makeSUSEdvd 0.30 Beta is available on houghi.org/script/makeSUSEdvd That one will warn you if you do not have a gpg key and will run gpg --gen-key. It now also has an interactive mode (if you can't remember all the options) and can use makeSUSEdvdrc files. That last part is not yet tested. :-) houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [still no luck]
On Wed, May 10, 2006 at 10:48:44AM +0200, Marcus Meissner wrote: This is because if a user installs from your installation source (DVD or whatever) his system ultimately trusts your key for receiving Online Updates. Oh boy. With all the testing I have added and deleted my keys several times. :-) houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
Marcus, Houghi: Thank you, now makeSUSEdvd works perfectly with my gpg-Setup. I'm hopefully awaiting the final release tomorrow. @Houghi: I tested the 0.30 beta, too, there were still some roughness inside the script, messages like couldnt set some option to x, so i finally took the 0.29 which went fine for me. Greetings Rainer - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
On Wed, May 10, 2006 at 08:11:34PM +0200, Rainer Hattenhauer wrote: @Houghi: I tested the 0.30 beta, too, there were still some roughness inside the script, messages like couldnt set some option to x, so i finally took the 0.29 which went fine for me. Could you please elaborate on this? What roughness are you talking about? You can always mail me directly. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
Could you please elaborate on this? What roughness are you talking about? You can always mail me directly. I send you asap a copy of a run-through of the skript, just have to reboot... -- ### Dr. Rainer Hattenhauer Drosselweg 5 37441 Bad Sachsa fon +4955238122 mail [EMAIL PROTECTED] ### - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
On Wed, May 10, 2006 at 08:59:42PM +0200, Rainer Hattenhauer wrote: Excuse me, seems that I did made the last run as normal user and not as root, I tried it again as root, and everything is fine with your new script (stupid me). No, everything is NOT fine. It should be run as user, not as root. Please elaborate. I think thats because you wrote VERSION=0.30 BETA not in one string Hey. It shows what it says. :-) Sorry again that I made you nervous, Please tell me what went wrong as user. As with the SUS people I have rather one message that is due to PEBKAC then to miss one that will have an influence on all other users. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
Hello, OK I asume you are talking about: chmod: missing operand after `+x' Try `chmod --help' for more information. Cleaning that up. Excactly, that was the message, but after some further tests, the resulting DVD generated by the updated script seems to be o.k. I will check it today again with the final version of SUSE 10.1, Rainer - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error [solved]
On Thu, May 11, 2006 at 07:32:13AM +0200, Rainer Hattenhauer wrote: Hello, OK I asume you are talking about: chmod: missing operand after `+x' Try `chmod --help' for more information. Cleaning that up. Excactly, that was the message, but after some further tests, the resulting DVD generated by the updated script seems to be o.k. I will check it today again with the final version of SUSE 10.1, On the 1st CD there is a file `mkbootdisk` that has a chmod +x on it. No idea why, so I just added it, instead of looking what the consequences were if I didn't. I want to change as little as possibel. If it ain't broke, don't fix it. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
I have identified and fixed the problem.
The key needs to be added to the initial ramdisk
of the CDD/DVD, so some extra magic is necessary.
I have attached the patch to make it work,
apply with
patch makeSUSEdvd msd.pat
Ciao, Marcus
--- /suse/meissner/makeSUSEdvd 2006-05-08 12:13:14.0 +0200
+++ /root/makeSUSEdvd 2006-05-08 15:52:44.0 +0200
@@ -465,9 +467,34 @@
cd $CD_DIR
}
+PUT_KEY_IN_INITRD()
+{
+ for initrd in $CD_DIR/boot/*/loader/initrd
+ do
+ echo Initrd is $initrd
+ if [ ! -f $initrd ];
+ then
+ echo No initrd found?
+ MAKE_CLEAN
+ exit 1
+ fi
+ gunzip $initrd $initrd.uncomp
+ mkdir tmpinitrd
+ pushd tmpinitrd
+ cpio -idm $initrd.uncomp
+ gpg --export -u $LOCAL_KEY $LOCAL_KEY.gpg
+ find|cpio -o -H newc $initrd.uncomp.new
+ popd
+ gzip --best $initrd.uncomp.new $initrd
+ rm -rf tmpinitrd
+ rm $initrd.uncomp $initrd.uncomp.new
+ done
+}
+
#SIGN_CONTENT : Signing the media for 10.1 on
SIGN_CONTENT ()
{
+ PUT_KEY_IN_INITRD
#Remove keys in content
grep -v ^META $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
Am Montag, 8. Mai 2006 16:31 schrieb Marcus Meissner: I have identified and fixed the problem. The key needs to be added to the initial ramdisk of the CDD/DVD, so some extra magic is necessary. I have attached the patch to make it work, apply with patch makeSUSEdvd msd.pat I tried the patched script, but it still says No catalogue under 'cd:///?devices%3d%2fdev%2fhdc' ERROR: No proposal -- Mit freundlichen Grüßen, Marcel Hilzinger Linux New Media AG Süskindstr. 4 D-81929 München Tel: +49 (89) 99 34 11 0 Fax: +49 (89) 99 34 11 99 - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 04:31:13PM +0200, Marcus Meissner wrote: I have identified and fixed the problem. The key needs to be added to the initial ramdisk of the CDD/DVD, so some extra magic is necessary. I have attached the patch to make it work, apply with patch makeSUSEdvd msd.pat Ciao, Marcus Does not work for me. Well, the patching does, but not the result. snip + PUT_KEY_IN_INITRD #Remove keys in content grep -v ^META $CD_DIR/content $CD_DIR/content.bak mv $CD_DIR/content.bak $CD_DIR/content I have brought PUT_KEY_IN_INITRD down a few lines. PUT_KEY_IN_INITRD uses the variable $LOCAL_KEY, so it might be better to use it after $LOCAL_KEY is calculated. That at least does not give an error. What I do get is: Initrd is /tmp/CD_DIR/boot/i386/loader/initrd /tmp/CD_DIR/tmpinitrd /tmp/CD_DIR cpio: dev/null: Operation not permitted cpio: dev/ram0: Operation not permitted cpio: dev/tty1: Operation not permitted cpio: dev/zero: Operation not permitted cpio: dev/console: Operation not permitted cpio: lib/udev/devices/md0: Operation not permitted cpio: lib/udev/devices/md1: Operation not permitted snip cpio: lib/udev/devices/fwmonitor: Operation not permitted 38584 blocks 38582 blocks /tmp/CD_DIR This during the runnung of makeSUSEdvd houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
Actually this is the full diff which was working for me:
Note that I just moved the keyid with which to sign to a toplevel define.
Ciao, Marcus
--- /suse/meissner/makeSUSEdvd 2006-05-08 16:29:25.0 +0200
+++ /root/makeSUSEdvd 2006-05-08 15:52:44.0 +0200
@@ -22,12 +22,14 @@
# below to a partition with enough space
HERE=$PWD
-CD_DIR=/tmp/CD_DIR
-# CD_DIR=$HERE/CD_DIR# Use this if you want to have the
+#CD_DIR=/tmp/CD_DIR
+CD_DIR=$HERE/CD_DIR # Use this if you want to have the
# subdirectories in the same directory as
# the ISOs
#DVD_DIR=/tmp/DVD_DIR
- LOCAL_KEY=$(gpg --fingerprint | grep ^pub | awk '{print $2}' | cut
-d/ -f2)
+
+LOCAL_KEY=0x08AD8FC5
+
DVD_DIR=$HERE/DVD_DIR# Use this if you want to have the
# subdirectories in the same directory as
# the ISOs
@@ -500,7 +502,6 @@
mv $CD_DIR/content.bak $CD_DIR/content
#Set the key
-LOCAL_KEY=`gpg --list-secret-keys|grep ^sec|sed -e 's/.*\///;s/
.*//g;'|head -n 1`
gpg --export -a $LOCAL_KEY $CD_DIR/gpg-pubkey-${LOCAL_KEY}.asc
# Sign files in /suse/setup/descr/
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 06:27:16PM +0200, Marcus Meissner wrote:
I have brought PUT_KEY_IN_INITRD down a few lines. PUT_KEY_IN_INITRD
uses the variable $LOCAL_KEY, so it might be better to use it after
$LOCAL_KEY is calculated.
Yes, I had a LOCAL_KEY=0x at the beginning of the script.
Here lies already part of the solution. My key would be 08AD8FC5 and not
0x08AD8FC5. So I added the following line right after LOCAL_KEY=`gpg ...
LOCAL_KEY=0x${LOCAL_KEY}
I now get the following error:
Cannot solve dependencies automatically. Manual intevention is required.
* Standard System with GNOME (47.3 MB total)
I am then able to select the software. YEAH! And get into dependecy hell.
BOO!. ¹
Hmm. This needs root access I am afraid. Is this a problem?
(The two cpios need it, the rest likely does not.)
It should not be a problem, as it needs root already for the iso mounting.
I will look to move it more to the beginning, so that on slower machines
there is no need to enter the rootpassword a second time due to timeout.
So the problem was that the key needed 0x in front of the key.
http://houghi.org/script/makeSUSEdvd is what I use now. I will do some
more testing and see what happens. It looks promising, however.
¹ Most likely because I only use CD1 and not 1-3.
houghi
--
Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es
ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk
und Arbeit, und das Sein wichtiger als das Tun
- Johannes Müller-Elmau
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 07:16:41PM +0200, houghi wrote:
On Mon, May 08, 2006 at 06:27:16PM +0200, Marcus Meissner wrote:
I have brought PUT_KEY_IN_INITRD down a few lines. PUT_KEY_IN_INITRD
uses the variable $LOCAL_KEY, so it might be better to use it after
$LOCAL_KEY is calculated.
Yes, I had a LOCAL_KEY=0x at the beginning of the script.
Here lies already part of the solution. My key would be 08AD8FC5 and not
0x08AD8FC5. So I added the following line right after LOCAL_KEY=`gpg ...
LOCAL_KEY=0x${LOCAL_KEY}
I now get the following error:
Cannot solve dependencies automatically. Manual intevention is required.
* Standard System with GNOME (47.3 MB total)
I am then able to select the software. YEAH! And get into dependecy hell.
BOO!. ¹
Hmm. This needs root access I am afraid. Is this a problem?
(The two cpios need it, the rest likely does not.)
It should not be a problem, as it needs root already for the iso mounting.
I will look to move it more to the beginning, so that on slower machines
there is no need to enter the rootpassword a second time due to timeout.
So the problem was that the key needed 0x in front of the key.
http://houghi.org/script/makeSUSEdvd is what I use now. I will do some
more testing and see what happens. It looks promising, however.
¹ Most likely because I only use CD1 and not 1-3.
I experienced the same dependency, since i also used CD1 only.
But at least the original signing problem is now passed.
Ciao, Marcus
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
Am Montag, 8. Mai 2006 19:16 schrieb houghi:
On Mon, May 08, 2006 at 06:27:16PM +0200, Marcus Meissner wrote:
I have brought PUT_KEY_IN_INITRD down a few lines.
PUT_KEY_IN_INITRD uses the variable $LOCAL_KEY, so it might be better
to use it after $LOCAL_KEY is calculated.
Yes, I had a LOCAL_KEY=0x at the beginning of the script.
Here lies already part of the solution. My key would be 08AD8FC5 and not
0x08AD8FC5. So I added the following line right after LOCAL_KEY=`gpg ...
LOCAL_KEY=0x${LOCAL_KEY}
I now get the following error:
Cannot solve dependencies automatically. Manual intevention is required.
* Standard System with GNOME (47.3 MB total)
This is only because you did not use all CDs.
Adding the LOCAL_KEY manually works for me.
Hougi: Perhaps it's best to ask the user for the key, then eventually check,
if the given key is in gpg --list-secret-keys to avoid typos
--
Mit freundlichen Grüßen,
Marcel Hilzinger
Linux New Media AG
Süskindstr. 4
D-81929 München
Tel: +49 (89) 99 34 11 0
Fax: +49 (89) 99 34 11 99
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 07:19:30PM +0200, Marcus Meissner wrote: I experienced the same dependency, since i also used CD1 only. But at least the original signing problem is now passed. Yes. With CD1-3 there is no error anymore. W00t! Now some more serious testing and some changing in the script. It also solved the issue of the need of running with sudo for the mounting of the iso's. That can just stay in. :-) Thanks a million times for the PUT_KEY_IN_INITRD. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 07:30:34PM +0200, Marcel Hilzinger wrote: This is only because you did not use all CDs. I know. Adding the LOCAL_KEY manually works for me. Indeed, as does calculating it correctly. Hougi: Perhaps it's best to ask the user for the key, then eventually check, if the given key is in gpg --list-secret-keys to avoid typos This will most likely cause more problems and confusion then it solves. People will enter the wrong one or misread or just do not know what to do. Before this, I never used gpg and I asume many others are the same. Say if the script asked for the key, I would have no idea what to enter. I will now look into the possibilaty that you can select a specific key and some other changes to the script. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 07:36:58PM +0200, Rainer Hattenhauer wrote: Hi Marcus and Houghi, snip Great job, seems that you fixed the problem. That was all Marcus. I just kept nagging. :-) Do you think that the makeSUSEdvd script will now work as well with the goldmaster which will be published this week, too, or are there some further surprises to be expected with the final(?) I would asume that it does, but then that I asumed it every time. :-) houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
Hi, I used RC5/Goldmaster to test. Excellent, that makes me very happy ;-) Thank you very much, Rainer - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 07:53:41PM +0200, houghi wrote: On Mon, May 08, 2006 at 07:30:34PM +0200, Marcel Hilzinger wrote: This is only because you did not use all CDs. I know. Adding the LOCAL_KEY manually works for me. Indeed, as does calculating it correctly. Hougi: Perhaps it's best to ask the user for the key, then eventually check, if the given key is in gpg --list-secret-keys to avoid typos This will most likely cause more problems and confusion then it solves. People will enter the wrong one or misread or just do not know what to do. Before this, I never used gpg and I asume many others are the same. Say if the script asked for the key, I would have no idea what to enter. What about checking, if there is a local secret key, and if not, add the possibility to create one :-) Btw. I do not have any problems with running whole script as root. From the point of userfriendlyness, the first thing the script should do is ask for the root password, if the user is not logged in as root. Keep up the good work Marcel - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Mon, May 08, 2006 at 11:09:13PM +0200, Marcel Hilzinger wrote: Before this, I never used gpg and I asume many others are the same. Say if the script asked for the key, I would have no idea what to enter. What about checking, if there is a local secret key, and if not, add the possibility to create one :-) Yes, that as well. Btw. I do not have any problems with running whole script as root. From the point of userfriendlyness, the first thing the script should do is ask for the root password, if the user is not logged in as root. The password is already asked. I just wanted to get a working version online asap. I will see where it goes. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
Where can I find the latest version of makeSUSEdvd? SourceForge has version 0.29 (2005-11-19)... /Jan K. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Tue, May 09, 2006 at 06:23:02AM +0200, Jan Karjalainen wrote: Where can I find the latest version of makeSUSEdvd? SourceForge has version 0.29 (2005-11-19)... 0.29 is the latest version. On SF I just edit the version number, upload the new files and delete the old ones. houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Fri, May 05, 2006 at 11:51:19PM +0200, Marcel Hilzinger wrote:
Am Dienstag, 2. Mai 2006 12:43 schrieb houghi:
I still get the same error. I now have:
#Remove keys in content
grep -v ^META $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
grep -v ^KEY $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
Does all content have to be signed by the same key? If not, why do you resign
also files, which content did not change (e.g. selection files)?
Resigning of files that did not change is not necessary.
LOCAL_KEY=`gpg --list-secret-keys|grep ^sec|sed -e
's/.*\///;s/.*//g;'|head -n 1` gpg --export -a
$CD_DIR/gpg-pubkey-${LOCAL_KEY}.asc
This gives a file like gpg-pubkey-6344CBC1.asc
But on the CDs the keys look like this:
gpg-pubkey-9c800aca-40d8063e.asc
This should not be problematic, as long as it is listed in the /content
file.
$CD_DIR/content done
Here the same question: is it neccessary to resign all the files? Or would it
be enough to sign only the files makeSuSEdvd changed?
Btw:
gpg --detach-sign -u $LOCAL_KEY -a $CD_DIR/media.1/products
creates products.sig not products.asc on my SL 9.3
Perhaps move the -a before the -u ?
Ciao, Marcus
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Sat, May 06, 2006 at 10:47:39AM +0200, Marcus Meissner wrote: Resigning of files that did not change is not necessary. No, but it is easier then looking wich ones were changed and wich ones were not and perhaps missing one. gpg --detach-sign -u $LOCAL_KEY -a $CD_DIR/media.1/products creates products.sig not products.asc on my SL 9.3 Perhaps move the -a before the -u ? Would that make a difference on older versions? Can somebody do the following: touch test gpg --list-secret-keys|grep ^sec|sed -e 's/.*\///;s/ .*//g;'|head -n 1 and then (if 70660424 is the answer from above) gpg --detach-sign -a -u 70660424 test and then gpg --detach-sign -u 70660424 -a test and see if the result is different? houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[opensuse-factory] Re: makeSUSEdvd error
Am Dienstag, 2. Mai 2006 12:43 schrieb houghi:
I still get the same error. I now have:
#Remove keys in content
grep -v ^META $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
grep -v ^KEY $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
Does all content have to be signed by the same key? If not, why do you resign
also files, which content did not change (e.g. selection files)?
#Set the key
LOCAL_KEY=`gpg --list-secret-keys|grep ^sec|sed -e
's/.*\///;s/.*//g;'|head -n 1` gpg --export -a
$CD_DIR/gpg-pubkey-${LOCAL_KEY}.asc
This gives a file like gpg-pubkey-6344CBC1.asc
But on the CDs the keys look like this:
gpg-pubkey-9c800aca-40d8063e.asc
# Sign files in /suse/setup/descr/
for FILE in `ls $CD_DIR/suse/setup/descr/`
do
echo META SHA1 $(cd $CD_DIR/suse/setup/descr/ sha1sum
${FILE}) $CD_DIR/content done
#Sign *.asc files
for FILE in `ls $CD_DIR|grep ^gpg-pubkey*`
do
echo KEY SHA1 $(cd $CD_DIR sha1sum ${FILE})
$CD_DIR/content done
Here the same question: is it neccessary to resign all the files? Or would it
be enough to sign only the files makeSuSEdvd changed?
Btw:
gpg --detach-sign -u $LOCAL_KEY -a $CD_DIR/media.1/products
creates products.sig not products.asc on my SL 9.3
--
Mit freundlichen Grüßen,
Marcel Hilzinger
Linux New Media AG
Süskindstr. 4
D-81929 München
Tel: +49 (89) 99 34 11 0
Fax: +49 (89) 99 34 11 99
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: [opensuse-factory] Re: makeSUSEdvd error
On Fri, May 05, 2006 at 11:51:19PM +0200, Marcel Hilzinger wrote:
Am Dienstag, 2. Mai 2006 12:43 schrieb houghi:
I still get the same error. I now have:
#Remove keys in content
grep -v ^META $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
grep -v ^KEY $CD_DIR/content $CD_DIR/content.bak
mv $CD_DIR/content.bak $CD_DIR/content
Does all content have to be signed by the same key? If not, why do you resign
also files, which content did not change (e.g. selection files)?
Mainly lazyness. Otherwise I would also have to check wich files are
changed and wich ones are not, making it more complicating then needed, I
think.
For me it is easier to just sign all, instead of just some and some not.
The reason that I rather do all is that way I won't forget anything. :-)
#Set the key
LOCAL_KEY=`gpg --list-secret-keys|grep ^sec|sed -e
's/.*\///;s/.*//g;'|head -n 1` gpg --export -a
$CD_DIR/gpg-pubkey-${LOCAL_KEY}.asc
This gives a file like gpg-pubkey-6344CBC1.asc
But on the CDs the keys look like this:
gpg-pubkey-9c800aca-40d8063e.asc
I know. No idea wether this is relevant. How do I get a key as above?
# Sign files in /suse/setup/descr/
for FILE in `ls $CD_DIR/suse/setup/descr/`
do
echo META SHA1 $(cd $CD_DIR/suse/setup/descr/ sha1sum
${FILE}) $CD_DIR/content done
#Sign *.asc files
for FILE in `ls $CD_DIR|grep ^gpg-pubkey*`
do
echo KEY SHA1 $(cd $CD_DIR sha1sum ${FILE})
$CD_DIR/content done
Here the same question: is it neccessary to resign all the files? Or would it
be enough to sign only the files makeSuSEdvd changed?
Same answer. You might gain time, but loose simplicity. (Unless there is a
reason that it won't work otherwise)
Btw:
gpg --detach-sign -u $LOCAL_KEY -a $CD_DIR/media.1/products
creates products.sig not products.asc on my SL 9.3
Without the -a it does. With the -a it makes a products.asc
[EMAIL PROTECTED] : touch test
[EMAIL PROTECTED] : l test*
-rw--- 1 houghi users 6523 2006-04-30 20:13 test
[EMAIL PROTECTED] : gpg --detach-sign -u 70660424 test
[EMAIL PROTECTED] : l test*
-rw--- 1 houghi users 6523 2006-04-30 20:13 test
-rw-r--r-- 1 houghi users 280 2006-05-06 00:10 test.sig
[EMAIL PROTECTED] : gpg --detach-sign -u 70660424 -a test
[EMAIL PROTECTED] : l test*
-rw--- 1 houghi users 6523 2006-04-30 20:13 test
-rw-r--r-- 1 houghi users 481 2006-05-06 00:11 test.asc
-rw-r--r-- 1 houghi users 280 2006-05-06 00:10 test.sig
Or at least that is how it should be. I don't have a 9.3 installed, so I
can't verify. Anybody else?
houghi
--
Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es
ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk
und Arbeit, und das Sein wichtiger als das Tun
- Johannes Müller-Elmau
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
