ATIX subscription manager: signed-by missing?

Support
1

Problem: After update of the ATIX Ubuntu subscription-manager to version 1.30.5.-4 the line “Signed-by” is missing in the generated rhsm.sources

Expected outcome: subscription-manager creates a fully functional rhsm.sources file (as before).

Foreman and Proxy versions: 3.18

Foreman and Proxy plugin versions: 3.18

Distribution and version: RHEL9

Other relevant data: -

1 Like
2

We will look into it.

1 Like
3

The signed-by entry does only exist if

  • the directory exists /etc/apt/trusted.gpg.d/
  • and there is a file starting with “pulp_”, “client” or “orcharhino_” and ending with “.gpg” or “.asc”

This file is pulp_deb_signing.key which is normally stored in /pub/

1 Like
4

Oh, good to know, that the filename of the key must have a special name. Seems to be new, is it documented somewhere (eg. changelog, man pages)?

Regarding the directory for the file I’m a little bit confused:

Referring to the debian documentation https://manpages.debian.org/trixie/apt/sources.list.5.en.html the path /etc/apt/trusted.gpg.d should be avoid if possible. Instead this paths should be used:
/usr/share/keyrings → default keys of Debian/Ubuntu
/etc/apt/keyrings → keys managed by system operator
So I expected the pulp key under /etc/apt/keyrings.