Re: [atomic-devel] rpm-ostree rebase and the keyring

[Micah Abbott <miabbott redhat com>]

On 10/31/2018 01:56 PM, Michael Hill wrote:
> Thanks, Micah. I got the key added but it fails with the same error.
>
> On Wed, Oct 31, 2018 at 1:38 PM Micah Abbott <miabbott redhat com> wrote:
>
> > That suggests that the GPG key was already imported, hmm...
>
> I thought I had success with the key the first time but got the keyring error.
>
> > You can always try removing/adding the remote again:
>
> $ sudo ostree remote delete fedora-workstation
> $ sudo ostree remote add fedora-workstation
> https://dl.fedoraproject.org/atomic/repo/
> $ sudo ostree remote gpg-import fedora-workstation -k
> /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary
> Imported 1 GPG key to remote "fedora-workstation"
> $ rpm-ostree rebase fedora/29/x86_64/silverblue
> error: Commit fb3618dd8dd5f3e40ccca7d3c5464e05c12afdcb2636401a54a4a69552074606:
> GPG signatures found, but none are in trusted keyring
> $ sudo rpm-ostree rebase fedora/29/x86_64/silverblue
> error: Commit fb3618dd8dd5f3e40ccca7d3c5464e05c12afdcb2636401a54a4a69552074606:
> GPG signatures found, but none are in trusted keyring

Hmm...maybe your GPG key got corrupted?

Try deleting the remote and the key on the host and re-adding it all again:

# ostree remote delete fedora-workstation
# rm /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary
# curl -L -o /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary 
https://getfedora.org/static/429476B4.txt
# ostree remote delete fedora-workstation
# ostree remote add fedora-workstation 
https://dl.fedoraproject.org/atomic/repo/
# ostree remote gpg-import fedora-workstation -k 
/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-28-primary
Imported 1 GPG key to remote "fedora-workstation"
# ostree remote gpg-import fedora-workstation -k 
/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary
Imported 1 GPG key to remote "fedora-workstation"

If that doesn't work, please file an issue here so we can dig in further:

https://pagure.io/teamsilverblue/issues


> Mike