Signatures for Mageia 7 are now computed in a manner that needs to specify the file to check the signature against. Isodumper 1.09 takes this into account and now the signature can be checked Before, 1.08 Have Mageia 7 iso in a directory with sha512 sum file and its gpg signature Launch the writing. The verification ends saying that sum is OK but signature is not found. With 1.09 The verification ends saying that the sums match and are signed.
So list of packages: Packages in 6/core/updates_testing: ======================== isodumper-1.09-1.mga6.noarch.rpm isodumper-qt-1.09-1.mga6.noarch.rpm isodumper-gtk-1.09-1.mga6.noarch.rpm Source RPM: ======================== isodumper-1.09-1.mga6.src.rpm Packages in 7/core/updates_testing: ======================== isodumper-1.09-1.mga7.noarch.rpm isodumper-qt-1.09-1.mga7.noarch.rpm isodumper-gtk-1.09-1.mga7.noarch.rpm Source RPM: ======================== isodumper-1.09-1.mga7.src.rpm
CC: (none) => geiger.david68210
Suggested advisory =================================== Signatures for Mageia 7 are now computed in a manner that needs to specify the file to check the signature against. Isodumper 1.09 takes this into account and now the signature can be checked. ===================================
Assignee: bugsquad => qa-bugsCC: (none) => marja11
Whiteboard: (none) => MGA6TOO
OK here 64 bit mga6. Log window output: " Target Device: SMI USB DISK (/dev/sdd) 15240.0Mb Image : /mnt/WDred/AnvMorgan/TillArkivet/Mageia-7-x86_64/Mageia-7-x86_64.iso Executing copy from /mnt/WDred/AnvMorgan/TillArkivet/Mageia-7-x86_64/Mageia-7-x86_64.iso to /dev/sdd Image Mageia-7-x86_64.iso successfully written to /dev/sdd Bytes written: 4447385600 The sha512 sum check is OK and the sum is signed "
CC: (none) => fri
mga7, x86_64 Installed version 1.09-1 with the gtk interface. Used it to dump the Xfce Live x86_64 iso to a 16 GB USB drive. ... Bytes written: 2463238144 Invalid signature for /data/isos/mageia7/Mageia-7.1-Live-Xfce-x86_64/Mageia-7.1-Live-Xfce-x86_64.iso.sha512The sha512 sum check is OK but the signature can't be found Adding persistent partition ... $ rpm -qa | grep isodumper isodumper-1.09-1.mga7 isodumper-gtk-1.09-1.mga7 Where would isodumper look for the signature and what is it called? [lcl@canopus Mageia-7.1-Live-Xfce-x86_64]$ ls DATE.txt Mageia-7.1-Live-Xfce-x86_64.iso Mageia-7.1-Live-Xfce-x86_64.iso.gpg Mageia-7.1-Live-Xfce-x86_64.iso.md5 Mageia-7.1-Live-Xfce-x86_64.iso.md5.gpg Mageia-7.1-Live-Xfce-x86_64.iso.sha3 Mageia-7.1-Live-Xfce-x86_64.iso.sha3.gpg Mageia-7.1-Live-Xfce-x86_64.iso.sha512 Mageia-7.1-Live-Xfce-x86_64.iso.sha512.gpg Mageia-7.1-Live-Xfce-x86_64.langs Mageia-7.1-Live-Xfce-x86_64.lst Mageia-7.1-Live-Xfce-x86_64.lst.full Mageia-7.1-Live-Xfce-x86_64.lst.leaves Mageia-7.1-Live-Xfce-x86_64.lst.names
CC: (none) => tarazed25
Hi Len, Did you use isodumper 1.08 in the session before installation of 1.09? If yes, try again with first this command as root systemctl restart magiback This is a part of isodumper which run indenpendently.
mga6, x86_64 Ran the update on a different machine with an mga6 partition. The operation was successful, as before, but the signature could not be found. Did not add a persistent partition this time.
@papoteur in reply to comments 4 and 5: No, not for this particular iso. So maybe I should find another mga7 partition and try 1.08. About to try that. Thanks papoteur.
@papoteur in reply to comment 5: Yep, that worked perfectly. Started witth isodumper 1.08. Dumped an iso to a USB stick. Saw the fault. Restarted magiback and checked that it was running OK. Ran the update and used isodumper 1.09 to dump the iso again. Session log: [...] Executing copy from /data/isos/mageia7/Mageia-7.1-Live-Xfce-x86_64/Mageia-7.1-Live-Xfce-x86_64.iso to /dev/sdd Image Mageia-7.1-Live-Xfce-x86_64.iso successfully written to /dev/sdd Bytes written: 2463238144 The sha512 sum check is OK and the sum is signed Registering the 64bit OK for mga7 and for maga6 on the basis of Morgan's test.
Whiteboard: MGA6TOO => MGA6-64-OK MGA7-64-OK
(In reply to Len Lawrence from comment #4) > > Where would isodumper look for the signature and what is it called? Isodumper looks for the signature and the sum files in the same directory as the iso file, by addind .sha512 and .sha512.gpg respectively to the name.
Advisory uploaded, validating.
Keywords: (none) => advisory, validated_updateCC: (none) => sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGAA-2019-0067.html
Status: NEW => RESOLVEDResolution: (none) => FIXED