[JIRA] (JENKINS-61998) Jenkins upgrade fails on CentOS - Public key is not installed

[cosbug@gmail.com (JIRA)]

Constantin Bugneac created an issue

Jenkins / JENKINS-61998 Jenkins upgrade fails on CentOS - Public key is not installed Issue Type: Bug Assignee: Unassigned Components: core Created: 2020-04-21 18:52 Labels: jenkins Priority: Blocker Reporter: Constantin Bugneac It looks like since version 232 the Jenkins rpm package is not signed anymore with the published GPG key and it fails to install on CentOS using yum/rpm. # yum -y update jenkins Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: anorien.csc.warwick.ac.uk * elrepo: lon.mirror.rackspace.com * elrepo-kernel: lon.mirror.rackspace.com * epel: mirror.serverion.com * extras: anorien.csc.warwick.ac.uk * updates: mirrors.coreix.net Resolving Dependencies --> Running transaction check ---> Package jenkins.noarch 0:2.232-1.1 will be updated ---> Package jenkins.noarch 0:2.233-1.1 will be an update --> Finished Dependency ResolutionDependencies Resolved====================================================================================================================================================================== Package Arch Version Repository Size ====================================================================================================================================================================== Updating: jenkins noarch 2.233-1.1 jenkins 63 MTransaction Summary ====================================================================================================================================================================== Upgrade 1 PackageTotal size: 63 M Downloading packages: warning: /var/cache/yum/x86_64/7/jenkins/packages/jenkins-2.233-1.1.noarch.rpm: Header V4 RSA/SHA512 Signature, key ID 45f2c3d5: NOKEY Public key for jenkins-2.233-1.1.noarch.rpm is not installed PS: I've followed this guide https://wiki.jenkins.io/display/JENKINS/Installing+Jenkins+on+Red+Hat+distributions   Add Comment

This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)

[cosbug@gmail.com (JIRA)]

Constantin Bugneac updated an issue

Jenkins / JENKINS-61998 Jenkins upgrade fails on CentOS - Public key is not installed

Change By: Constantin Bugneac

It looks like since version 232 the Jenkins rpm package is not signed anymore with the published GPG key and it fails to install on CentOS using yum/rpm.

{code:java}

# yum -y update jenkins Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: anorien.csc.warwick.ac.uk * elrepo: lon.mirror.rackspace.com * elrepo-kernel: lon.mirror.rackspace.com * epel: mirror.serverion.com * extras: anorien.csc.warwick.ac.uk * updates: mirrors.coreix.net Resolving Dependencies --> Running transaction check ---> Package jenkins.noarch 0:2.232-1.1 will be updated ---> Package jenkins.noarch 0:2.233-1.1 will be an update --> Finished Dependency ResolutionDependencies Resolved====================================================================================================================================================================== Package                     Arch                     Version                     Repository                     Size ====================================================================================================================================================================== Updating: jenkins                     noarch                     2.233-1.1                     jenkins                     63 MTransaction Summary ====================================================================================================================================================================== Upgrade  1 PackageTotal size: 63 M Downloading packages: warning: /var/cache/yum/x86_64/7/jenkins/packages/jenkins-2.233-1.1.noarch.rpm: Header V4 RSA/SHA512 Signature, key ID 45f2c3d5: NOKEY Public key for jenkins-2.233-1.1.noarch.rpm is not installed

{code} PS: I've followed this guide [https://wiki.jenkins.io/display/JENKINS/Installing+Jenkins+on+Red+Hat+distributions]   Using `{{yum install jenkins --nogpgcheck}}` is not good idea as it breaks the trust to origin of software.

Add Comment

[cosbug@gmail.com (JIRA)]

Using `{{yum install jenkins --nogpgcheck}}` is not a good idea as it breaks the trust to origin of software.

Add Comment

[orion-ua@ukr.net (JIRA)]

Oleksandr Shmyrko commented on JENKINS-61998

Re: Jenkins upgrade fails on CentOS - Public key is not installed See WEBSITE-741 for details. You can find correct public key here: http://mirrors.jenkins-ci.org/redhat/

Add Comment

[cosbug@gmail.com (JIRA)]

Constantin Bugneac commented on JENKINS-61998

Re: Jenkins upgrade fails on CentOS - Public key is not installed

Oleksandr Shmyrko Thanks, it worked!

Add Comment

[cosbug@gmail.com (JIRA)]

Constantin Bugneac commented on JENKINS-61998

Re: Jenkins upgrade fails on CentOS - Public key is not installed

Just wondering - can the WiKI page updated or removed so that a single source of truth is kept ? Otherwise it's gonna mislead other people too.

Add Comment

[dbeck@cloudbees.com (JIRA)]

Daniel Beck closed an issue as Not A Defect

Intentional, see changelog. Any documentation issues are tracked elsewhere.

Jenkins / JENKINS-61998

Jenkins upgrade fails on CentOS - Public key is not installed

Change By: Daniel Beck Status: Open Closed Resolution: Not A Defect

Add Comment

[mark.earl.waite@gmail.com (JIRA)]

Mark Waite commented on JENKINS-61998

Re: Jenkins upgrade fails on CentOS - Public key is not installed Constantin Bugneac we'd love to have a pull request from an experienced CentOS / Red Hat user that converts the wiki page into a CentOS / Red Hat section of the installation document. We even have the wiki exporter which can extract the content from the wiki page and propose the ASCIIDoc content as a beginning.

Add Comment