Project

General

Profile

Actions

Bug #4876

closed

On SLES, zypper repositories configured by Rudder request a GPG key check at each manual execution of CFEngine agent

Added by Nicolas PERRON almost 10 years ago. Updated about 8 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
Techniques
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

The template file used by Rudder to configure Zypper repository does not contain a configuratinon line to check GPG key. The default behavior request this check and is at least troublesome when debugging on a node.
In my opinion, we should disable the GPG key check.


Related issues 1 (0 open1 closed)

Related to Rudder - User story #6756: New Technique to import a GPG Key into RPMReleasedNicolas CHARLES2016-02-29Actions
Actions #1

Updated by Nicolas PERRON almost 10 years ago

  • Description updated (diff)
Actions #2

Updated by Nicolas PERRON almost 10 years ago

  • Status changed from New to Pending technical review
  • Assignee changed from Nicolas PERRON to Jonathan CLARKE
  • % Done changed from 0 to 100
  • Pull Request set to https://github.com/Normation/rudder-techniques/pull/373

PR URL added: https://github.com/Normation/rudder-techniques/pull/373

Jon, is it ok for you ?

Actions #3

Updated by Vincent MEMBRÉ almost 10 years ago

  • Target version changed from 2.6.13 to 2.6.14
Actions #4

Updated by Jonathan CLARKE almost 10 years ago

  • Target version changed from 2.6.14 to 2.6.16
Actions #5

Updated by Jonathan CLARKE almost 10 years ago

  • Target version changed from 2.6.16 to 2.6.17
Actions #6

Updated by Jonathan CLARKE over 9 years ago

  • Status changed from Pending technical review to Discussion
  • Assignee changed from Jonathan CLARKE to Nicolas PERRON

I disagree. It is bad practice not to check GPG signatures, so we should most definitely not disable it, and certainly not transparently without warning the user.

I think a better fix would be to adapt the Technique to have an option to specify the GPG key to check, or let the user choose to not check GPG keys.

Actions #7

Updated by Nicolas PERRON over 9 years ago

  • Target version changed from 2.6.17 to 2.6.18
Actions #8

Updated by Matthieu CERDA over 9 years ago

  • Target version changed from 2.6.18 to 2.6.19
Actions #9

Updated by Vincent MEMBRÉ over 9 years ago

  • Target version changed from 2.6.19 to 2.6.20
Actions #10

Updated by François ARMAND about 9 years ago

  • Target version changed from 2.6.20 to 2.10.10
Actions #11

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 2.10.10 to 2.10.11
Actions #12

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 2.10.11 to 2.10.12
Actions #13

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 2.10.12 to 2.10.13
Actions #14

Updated by Vincent MEMBRÉ about 9 years ago

  • Target version changed from 2.10.13 to 2.10.14
Actions #15

Updated by Benoît PECCATTE almost 9 years ago

  • Category set to Techniques
Actions #16

Updated by Benoît PECCATTE almost 9 years ago

  • Assignee deleted (Nicolas PERRON)
Actions #17

Updated by Vincent MEMBRÉ almost 9 years ago

  • Target version changed from 2.10.14 to 2.10.15
Actions #18

Updated by Janos Mattyasovszky almost 9 years ago

Related to #4876

Actions #19

Updated by Janos Mattyasovszky almost 9 years ago

I meant of course #6756

Actions #20

Updated by Vincent MEMBRÉ almost 9 years ago

  • Target version changed from 2.10.15 to 2.10.16
Actions #21

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 2.10.16 to 2.10.17
Actions #22

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 2.10.17 to 2.10.18
Actions #23

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 2.10.18 to 2.10.19
Actions #24

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 2.10.19 to 2.10.20
Actions #25

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 2.10.20 to 277
Actions #26

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 277 to 2.11.18
Actions #27

Updated by Vincent MEMBRÉ about 8 years ago

  • Target version changed from 2.11.18 to 2.11.19
Actions #28

Updated by Alexis Mousset about 8 years ago

  • Status changed from Discussion to Rejected
Actions #29

Updated by Alexis Mousset about 8 years ago

Actions

Also available in: Atom PDF