Foreman_scap_client Katello rubygem-foreman_scap_client-not signed

Hi Hello,

Trying to integrate openscap with foreman 1.22, we are using Katello 3.12,

foreman-installer --enable-foreman-proxy-plugin-openscap

yum -y install puppet-foreman_scap_client

puppet module uninstall theforeman-foreman_scap_client --environment development

Created the repo as so:

hammer repository create
–product “CentOS 7”
–name “foreman-plugins-122”
–label “foreman-plugins-122”
–organization “Internal”
–content-type “yum”
–download-policy “on_demand”
–url “https://yum.theforeman.org/plugins/1.22/el7/x86_64/

Assigned policy to host group,
The affected client is in the host group,

All is good until i run puppet agent -t on the client, looks it is failing because it is not signed. Package rubygem-foreman_scap_client-0.3.0-1.el7.noarch.rpm is not signed

Info: Applying configuration version ‘1560803787’
Error: Execution of ‘/usr/bin/yum -d 0 -e 0 -y install rubygem-foreman_scap_client’ returned 1: Package rubygem-foreman_scap_client-0.3.0-1.el7.noarch.rpm is not signed

Package rubygem-foreman_scap_client-0.3.0-1.el7.noarch.rpm is not signed
Error: /Stage[main]/Foreman_scap_client/Package[foreman_scap_client]/ensure: change from ‘purged’ to ‘present’ failed: Execution of ‘/usr/bin/yum -d 0 -e 0 -y install rubygem-foreman_scap_client’ returned 1: Package rubygem-foreman_scap_client-0.3.0-1.el7.noarch.rpm is not signed

Package rubygem-foreman_scap_client-0.3.0-1.el7.noarch.rpm is not signed
Notice: /Stage[main]/Foreman_scap_client/File[/etc/foreman_scap_client]: Dependency Package[foreman_scap_client] has failures: true
Warning: /Stage[main]/Foreman_scap_client/File[/etc/foreman_scap_client]: Skipping because of failed dependencies
Warning: /Stage[main]/Foreman_scap_client/File[foreman_scap_client]: Skipping because of failed dependencies
Notice: /Stage[main]/Foreman_scap_client/File[foreman_scap_client_cron]/ensure: defined content as ‘{md5}fdbd2b9669a80b15b7dec74f1ca9e620’
Info: Class[Foreman_scap_client]: Unscheduling all events on Class[Foreman_scap_client]
Notice: Applied catalog in 4.50 seconds

Can someone please point me to thr right direction?

I will answer myself :), it is resolved basically i had just went to the local repo on the client aand disabled
gpgcheck = 0 forthe rpo and could install it.

We’re going to sign the client repositories. See Feature #26278: GPG sign Foreman client RPM repository - Packaging - Foreman

Correction, wrong thread. Bug #4788: Plugin rpms not signed - Packaging - Foreman tracks the plugin repo but currently there’s no concrete plan to sign the plugins repo.

Hi guys.

I’m also face issue with openscap-client package: I can’t find it in 1.22 repo!

Repo “https://yum.theforeman.org/plugins/1.22/el7/x86_64/” does not contain scap client package anymore!

Can you please advise what can I do?

You are looking at plugins rather than client which does have rubygem-foreman_scap_client-0.4.6-1.el7.noarch.rpm