Foreman 3.0 / RPMs not signed

Hi,

It seems like that a couple of RPMs in the 3.0 plugin repository (Index of /plugins/3.0/el8/x86_64) are currently not signed which aborts the installation/update process …

Foreman and Proxy versions:
3.0

Foreman and Proxy plugin versions:
3.0

Distribution and version:
EL8

Other relevant data:

# dnf upgrade ruby\* foreman\*
Updating Subscription Management repositories.
Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)                                                                                                                               51 kB/s | 2.4 kB     00:00    
Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)                                                                                                                            60 kB/s | 2.8 kB     00:00    
BA for EL8                                                                                                                                                                          45 kB/s | 2.1 kB     00:00    
Addon for RHEL8                                                                                                                                                                     46 kB/s | 2.1 kB     00:00    
EL8                                                                                                                                                                                 45 kB/s | 2.1 kB     00:00    
EL8                                                                                                                                                                                 35 kB/s | 1.8 kB     00:00    
Dependencies resolved.
===================================================================================================================================================================================================================
 Package                                          Architecture   Version                    Repository                                                                                                        Size
===================================================================================================================================================================================================================
Upgrading:
 foreman                                          noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  39 M
 foreman-cli                                      noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  28 k
 foreman-debug                                    noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  34 k
 foreman-dynflow-sidekiq                          noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  31 k
 foreman-installer                                noarch         1:3.0.0-1.el8              packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 1.4 M
 foreman-postgresql                               noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  29 k
 foreman-proxy                                    noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 156 k
 foreman-selinux                                  noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  54 k
 foreman-service                                  noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  30 k
 foreman-vmware                                   noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  29 k
 rubygem-dynflow                                  noarch         1.5.0-1.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 373 k
 rubygem-foreman-tasks                            noarch         5.1.1-1.fm3_0.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_         2.4 M
 rubygem-foreman_ansible                          noarch         6.4.1-1.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_         2.4 M
 rubygem-foreman_maintain                         noarch         1:0.8.10-1.el8             packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 173 k
 rubygem-foreman_remote_execution                 noarch         4.7.0-1.fm3_0.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_         2.5 M
 rubygem-foreman_templates                        noarch         9.1.0-1.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_         1.7 M
 rubygem-hammer_cli                               noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 120 k
 rubygem-hammer_cli_foreman                       noarch         3.0.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  92 k
 rubygem-kafo_parsers                             noarch         1.2.1-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  16 k
 rubygem-ldap_fluff                               noarch         0.6.0-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  21 k
 rubygem-mini_portile2                            noarch         2.5.1-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  15 k
 rubygem-mustermann                               noarch         1.1.1-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                  40 k
 rubygem-nokogiri                                 x86_64         1.11.3-2.el8               packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 805 k
 rubygem-rainbow                                  noarch         2.2.2-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_          15 k
 rubygem-smart_proxy_ansible                      noarch         3.2.1-2.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_          35 k
 rubygem-smart_proxy_dynflow                      noarch         0.5.2-2.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_          40 k
 rubygem-smart_proxy_dynflow_core                 noarch         0.4.1-1.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_          24 k
 rubygem-smart_proxy_remote_execution_ssh         noarch         0.4.1-2.fm2_6.el8          packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_Plugins_          39 k
Installing dependencies:
 rubygem-ruby2_keywords                           noarch         0.0.4-1.el8                packages.dst.baintern.de_pulp_repos_Default_Organization_Library_custom_Foreman_Foreman_3_0_el8_                 8.9 k

Transaction Summary
===================================================================================================================================================================================================================
Install   1 Package
Upgrade  28 Packages

Total download size: 51 M
Is this ok [y/N]: y
Downloading Packages:
(1/29): rubygem-ruby2_keywords-0.0.4-1.el8.noarch.rpm                                                                                                                               92 kB/s | 8.9 kB     00:00    
(2/29): rubygem-nokogiri-1.11.3-2.el8.x86_64.rpm                                                                                                                                   6.3 MB/s | 805 kB     00:00    
(3/29): foreman-vmware-3.0.0-1.el8.noarch.rpm                                                                                                                                      269 kB/s |  29 kB     00:00    
(4/29): foreman-dynflow-sidekiq-3.0.0-1.el8.noarch.rpm                                                                                                                             273 kB/s |  31 kB     00:00    
(5/29): rubygem-ldap_fluff-0.6.0-1.el8.noarch.rpm                                                                                                                                  197 kB/s |  21 kB     00:00    
(6/29): foreman-proxy-3.0.0-1.el8.noarch.rpm                                                                                                                                       197 kB/s | 156 kB     00:00    
(7/29): rubygem-kafo_parsers-1.2.1-1.el8.noarch.rpm                                                                                                                                 20 kB/s |  16 kB     00:00    
(8/29): foreman-selinux-3.0.0-1.el8.noarch.rpm                                                                                                                                     348 kB/s |  54 kB     00:00    
(9/29): rubygem-mustermann-1.1.1-1.el8.noarch.rpm                                                                                                                                  247 kB/s |  40 kB     00:00    
(10/29): foreman-postgresql-3.0.0-1.el8.noarch.rpm                                                                                                                                 197 kB/s |  29 kB     00:00    
(11/29): rubygem-hammer_cli-3.0.0-1.el8.noarch.rpm                                                                                                                                 774 kB/s | 120 kB     00:00    
(12/29): foreman-debug-3.0.0-1.el8.noarch.rpm                                                                                                                                      246 kB/s |  34 kB     00:00    
(13/29): foreman-service-3.0.0-1.el8.noarch.rpm                                                                                                                                    3.7 MB/s |  30 kB     00:00    
(14/29): rubygem-foreman_maintain-0.8.10-1.el8.noarch.rpm                                                                                                                          1.2 MB/s | 173 kB     00:00    
(15/29): foreman-cli-3.0.0-1.el8.noarch.rpm                                                                                                                                        210 kB/s |  28 kB     00:00    
(16/29): foreman-installer-3.0.0-1.el8.noarch.rpm                                                                                                                                  7.0 MB/s | 1.4 MB     00:00    
(17/29): rubygem-dynflow-1.5.0-1.fm2_6.el8.noarch.rpm                                                                                                                              2.2 MB/s | 373 kB     00:00    
(18/29): rubygem-mini_portile2-2.5.1-1.el8.noarch.rpm                                                                                                                              120 kB/s |  15 kB     00:00    
(19/29): rubygem-foreman_templates-9.1.0-1.fm2_6.el8.noarch.rpm                                                                                                                     71 MB/s | 1.7 MB     00:00    
(20/29): rubygem-smart_proxy_dynflow-0.5.2-2.fm2_6.el8.noarch.rpm                                                                                                                  4.7 MB/s |  40 kB     00:00    
(21/29): rubygem-foreman-tasks-5.1.1-1.fm3_0.el8.noarch.rpm                                                                                                                         75 MB/s | 2.4 MB     00:00    
(22/29): rubygem-hammer_cli_foreman-3.0.0-1.el8.noarch.rpm                                                                                                                         712 kB/s |  92 kB     00:00    
(23/29): rubygem-foreman_remote_execution-4.7.0-1.fm3_0.el8.noarch.rpm                                                                                                              70 MB/s | 2.5 MB     00:00    
(24/29): rubygem-smart_proxy_remote_execution_ssh-0.4.1-2.fm2_6.el8.noarch.rpm                                                                                                     4.9 MB/s |  39 kB     00:00    
(25/29): rubygem-smart_proxy_ansible-3.2.1-2.fm2_6.el8.noarch.rpm                                                                                                                  3.4 MB/s |  35 kB     00:00    
(26/29): rubygem-foreman_ansible-6.4.1-1.fm2_6.el8.noarch.rpm                                                                                                                       55 MB/s | 2.4 MB     00:00    
(27/29): rubygem-rainbow-2.2.2-1.el8.noarch.rpm                                                                                                                                    1.1 MB/s |  15 kB     00:00    
(28/29): rubygem-smart_proxy_dynflow_core-0.4.1-1.fm2_6.el8.noarch.rpm                                                                                                             3.6 MB/s |  24 kB     00:00    
(29/29): foreman-3.0.0-1.el8.noarch.rpm                                                                                                                                             26 MB/s |  39 MB     00:01    
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                                               25 MB/s |  51 MB     00:02     
Package rubygem-foreman_templates-9.1.0-1.fm2_6.el8.noarch.rpm is not signed
Package rubygem-smart_proxy_dynflow-0.5.2-2.fm2_6.el8.noarch.rpm is not signed
Package rubygem-foreman-tasks-5.1.1-1.fm3_0.el8.noarch.rpm is not signed
Package rubygem-foreman_remote_execution-4.7.0-1.fm3_0.el8.noarch.rpm is not signed
Package rubygem-foreman_ansible-6.4.1-1.fm2_6.el8.noarch.rpm is not signed
Package rubygem-smart_proxy_remote_execution_ssh-0.4.1-2.fm2_6.el8.noarch.rpm is not signed
Package rubygem-smart_proxy_ansible-3.2.1-2.fm2_6.el8.noarch.rpm is not signed
Package rubygem-rainbow-2.2.2-1.el8.noarch.rpm is not signed
Package rubygem-smart_proxy_dynflow_core-0.4.1-1.fm2_6.el8.noarch.rpm is not signed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

# rpm -qip rubygem-rainbow-2.2.2-1.el8.noarch.rpm
Name        : rubygem-rainbow
Version     : 2.2.2
Release     : 1.el8
Architecture: noarch
Install Date: (not installed)
Group       : Development/Languages
Size        : 16706
License     : MIT
Signature   : (none)
Source RPM  : rubygem-rainbow-2.2.2-1.el8.src.rpm
Build Date  : Mon 28 Jun 2021 09:48:21 AM CEST
Build Host  : ip-172-30-4-187.ec2.internal
Relocations : (not relocatable)
Packager    : Koji
Vendor      : Koji
URL         : https://github.com/sickill/rainbow
Summary     : Colorize printed text on ANSI terminals
Description :
Colorize printed text on ANSI terminals.


Plugins are not signed. This has historical reasons, and while we do want to change that, we didn’t yet.

if you use the repo file deployed by foreman-release RPM, it properly sets gpgcheck=0 for the plugins repo.

You can subscribe to Feature #4788: Plugin rpms not signed - Packaging - Foreman to track status.

Thanks for the explanation. I didn’t use the foreman-release RPM indeed. It’s pretty rare to see unsigned RPMs these days.

Cheers,
Martin