Re: [atomic-devel] rpm-ostree rebase and the keyring

[Micah Abbott <miabbott redhat com>]

On 10/31/2018 12:34 PM, Michael Hill wrote:
> I can upgrade f28, but I'm still stuck trying to rebase to f29.
>
> $ rpm-ostree rebase fedora/29/x86_64/silverblue
> error: Commit fb3618dd8dd5f3e40ccca7d3c5464e05c12afdcb2636401a54a4a69552074606:
> GPG signatures found, but none are in trusted keyring
>
> $ sudo ostree remote gpg-import fedora-workstation -k
> /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary
> Imported 0 GPG keys to remote "fedora-workstation"

That suggests that the GPG key was already imported, hmm...

> I get the same error trying Garrett's workaround in the Fedora
> discussion thread from September. Anything else I can try?

You can always try removing/adding the remote again:

# ostree remote list -u
fedora-workstation  https://dl.fedoraproject.org/atomic/repo/

# ostree remote delete fedora-workstation 



# ostree remote add fedora-workstation 
https://dl.fedoraproject.org/atomic/repo/ 



# ostree remote gpg-import fedora-workstation -k 
/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-28-primary 

Imported 1 GPG key to remote "fedora-workstation"

# ostree remote gpg-import fedora-workstation -k 
/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary 

Imported 1 GPG key to remote "fedora-workstation"

# rpm-ostree rebase fedora/29/x86_64/silverblue 



Receiving metadata objects: 23/(estimating) 39.8 kB/s 159.1 kB 





> Thanks,
>
> Mike