Re: [xcat-user] GPG Errors when trying to add RPMS to RHEL7.9 diskless image

[Kevin K. <kk...@sa...>]

The problem with nvidia is that it needs to compile drivers from source,
and then you have to use your own key to sign it. Usually, dkms handles
that (to some extent), but in this case that wouldn't work.

Personally, I avoid NVIDIA like the plague for that reason, but if you need
GPUs, you probably can't.

Yum can't completely skip GPG checks. You need to use rpm to install those
RPMs.


On Tue, Jul 23, 2024 at 9:08 AM kei...@lm... <kei...@lm...>
wrote:

> I am trying to add some nvidia rpms to a rhel7.9 diskless image and I am
> getting some GPG errors I can work around. The below message is printed
> during genimage.
>
>
>
> *“Warning: Enforcing GPG signature check globally as per active RPM
> security policy (see 'gpgcheck' in dnf.conf(5) for how to squelch this
> message)”*
>
>
>
>
>
> And I get the errors below:
>
>
>
> otherpkgs3                                       37 MB/s |  46 kB     00:00
>
> Dependencies resolved.
>
>
> ================================================================================
>
> Package                              Arch   Version           Repository
> Size
>
>
> ================================================================================
>
> Installing:
>
> cuda-drivers                         x86_64 550.90.07-1       otherpkgs3
> 3.7 k
>
> Upgrading:
>
> kmod-nvidia-latest-dkms              x86_64 3:550.90.07-1.el7 otherpkgs3
> 41 M
>
> nvidia-driver-latest-dkms            x86_64 3:550.90.07-1.el7 otherpkgs3
> 125 M
>
> nvidia-driver-latest-dkms-NVML       x86_64 3:550.90.07-1.el7 otherpkgs3
> 603 k
>
> nvidia-driver-latest-dkms-NvFBCOpenGL
>
>                                       x86_64 3:550.90.07-1.el7 otherpkgs3
> 61 k
>
> nvidia-driver-latest-dkms-cuda       x86_64 3:550.90.07-1.el7 otherpkgs3
> 452 k
>
> nvidia-driver-latest-dkms-cuda-libs  x86_64 3:550.90.07-1.el7 otherpkgs3
> 56 M
>
> nvidia-driver-latest-dkms-devel      x86_64 3:550.90.07-1.el7 otherpkgs3
> 19 k
>
> nvidia-driver-latest-dkms-libs       x86_64 3:550.90.07-1.el7 otherpkgs3
> 133 M
>
> nvidia-modprobe-latest-dkms          x86_64 3:550.90.07-1.el7 otherpkgs3
> 31 k
>
> nvidia-persistenced-latest-dkms      x86_64 3:550.90.07-1.el7 otherpkgs3
> 38 k
>
> nvidia-xconfig-latest-dkms           x86_64 3:550.90.07-1.el7 otherpkgs3
> 90 k
>
> Installing dependencies:
>
> nvidia-libXNVCtrl                    x86_64 3:550.90.07-2.el7 otherpkgs3
> 50 k
>
> nvidia-libXNVCtrl-devel              x86_64 3:550.90.07-2.el7 otherpkgs3
> 59 k
>
> nvidia-settings                      x86_64 3:550.90.07-2.el7 otherpkgs3
> 1.5 M
>
>
>
> Transaction Summary
>
>
> ================================================================================
>
> Install   4 Packages
>
> Upgrade  11 Packages
>
>
>
> Total size: 358 M
>
> Downloading Packages:
>
> otherpkgs3                                      7.8 MB/s | 8.0 kB     00:00
>
> GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x7CA8798C) is
> already installed
>
> GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xFD431D51) is
> already installed
>
> GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x2FA658E0) is
> already installed
>
> GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0xF4A80EB5) is
> already installed
>
> GPG key at file:///XCAT/RPM-GPG-KEY-redhat-release (0x352C64E5) is
> already installed
>
> The GPG keys listed for the "otherpkgs3" repository are already installed
> but they are not correct for this package.
>
> Check that the correct key URLs are configured for this repository..
> Failing package is: cuda-drivers-550.90.07-1.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-libXNVCtrl-550.90.07-2.el7.x86_64.rpm is not
> installed. Failing package is: nvidia-libXNVCtrl-3:550.90.07-2.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-libXNVCtrl-devel-550.90.07-2.el7.x86_64.rpm is not
> installed. Failing package is:
> nvidia-libXNVCtrl-devel-3:550.90.07-2.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-settings-550.90.07-2.el7.x86_64.rpm is not
> installed. Failing package is: nvidia-settings-3:550.90.07-2.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for kmod-nvidia-latest-dkms-550.90.07-1.el7.x86_64.rpm is not
> installed. Failing package is:
> kmod-nvidia-latest-dkms-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-driver-latest-dkms-550.90.07-1.el7.x86_64.rpm is not
> installed. Failing package is:
> nvidia-driver-latest-dkms-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-driver-latest-dkms-NVML-550.90.07-1.el7.x86_64.rpm
> is not installed. Failing package is:
> nvidia-driver-latest-dkms-NVML-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for
> nvidia-driver-latest-dkms-NvFBCOpenGL-550.90.07-1.el7.x86_64.rpm is not
> installed. Failing package is:
> nvidia-driver-latest-dkms-NvFBCOpenGL-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-driver-latest-dkms-cuda-550.90.07-1.el7.x86_64.rpm
> is not installed. Failing package is:
> nvidia-driver-latest-dkms-cuda-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for
> nvidia-driver-latest-dkms-cuda-libs-550.90.07-1.el7.x86_64.rpm is not
> installed. Failing package is:
> nvidia-driver-latest-dkms-cuda-libs-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-driver-latest-dkms-devel-550.90.07-1.el7.x86_64.rpm
> is not installed. Failing package is:
> nvidia-driver-latest-dkms-devel-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-driver-latest-dkms-libs-550.90.07-1.el7.x86_64.rpm
> is not installed. Failing package is:
> nvidia-driver-latest-dkms-libs-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-modprobe-latest-dkms-550.90.07-1.el7.x86_64.rpm is
> not installed. Failing package is:
> nvidia-modprobe-latest-dkms-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-persistenced-latest-dkms-550.90.07-1.el7.x86_64.rpm
> is not installed. Failing package is:
> nvidia-persistenced-latest-dkms-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Public key for nvidia-xconfig-latest-dkms-550.90.07-1.el7.x86_64.rpm is
> not installed. Failing package is:
> nvidia-xconfig-latest-dkms-3:550.90.07-1.el7.x86_64
>
> GPG Keys are configured as: file:///XCAT/RPM-GPG-KEY-redhat-release
>
> Error: GPG check FAILED
>
> yum invocation failed.
>
>
>
>
>
> I tried hacking the genimage code to force “yum --nogpgcheck -y -c” but I
> still get the errors. For some reason genimage is creating the repos with
> gpgcheck=1 and ALL the gpgkeys are the same as below.
>
>
>
> [otherpkgs3]
>
> name=otherpkgs3
>
>
> baseurl=file:///install/post/otherpkgs/rhels7.4/x86_64/nvidia-driver-local-repo-rhel7-550.90.07
>
> gpgcheck=0
>
> gpgkey=file:///XCAT/RPM-GPG-KEY-redhat-release
>
> skip_if_unavailable=True
>
>
>
> has anyone seen this problem and worked around it?
>
> _______________________
>
> - Keith Hannum
>
> - kei...@lm...
>
>
> _______________________________________________
> xCAT-user mailing list
> xCA...@li...
> https://lists.sourceforge.net/lists/listinfo/xcat-user
>