Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Is it possible to disable GPG checks on a per channel basis in Spacewalk?

For patching of my servers, I've converted from using local yum repositories on the clients under /etc/yum.repos.d, to registering the client with a spacewalk server.

However, we have an internal yum repository, and I don't have the GPG keys which were used to sign the packages. This isn't an problem when using local yum repos, as I can just disable gpg on the repository using gpgcheck=0. However, it doesn't appear that I can do something similar with spacewalk. Even though I don't have a key associated with the channel, installing from the command line gives GPG errors (ie: yum install -y somepackage).

From the CLI, I can get around this using the --nogpgcheck option to yum. However, we're using puppet in our environment to install some of these packages, and there doesn't appear to be a simple way to pass in optional parameters to yum through puppet.

I've seen some suggestions indicating I could set gpgcheck=0 in /etc/yum/pluginconf.d/rhnplugin.conf, but that will disable checks on all channels, and I'd rather just disable it for the internal packages, for which I don't have the keys.

share|improve this question
2  
Maybe too obvious, but simply sign the existing packages with your new key before uploading them to spacewalk? rpm --resign *.rpm according to the manual. –  HBruijn May 6 '14 at 13:14
    
Doh... Didn't even occur to me. This took care of it, thanks. –  blindsnowmobile May 8 '14 at 15:59
    
@HBruijn The comment looks like an answer. –  Utrecht Nov 22 '14 at 2:21

1 Answer 1

Actually this is very easy, simply poorly documented. (I know, I spent a long time looking for this answer).

In the /etc/yum/pluginconf.d/rhnplugin.conf file simply create a section corresposnding to the channel name for which you want to disable checks.

# Company Development centos 6 
[company-dev-centos6-x86_64]
gpgcheck = 0

The man page doesn't even mention that this can be done. But there are comments in the file that demo it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.