yum安装报错“rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 1e5e0159”

Do not forget to set gpgkey when installing the oracle-validated rpm

Read more: http://oracletoday.blogspot.com/2010/11/do-not-forget-to-set-gpgkey-when.html#ixzz2qXNxp9L2

 

In my previous post I had five lines added to /etc/yum.conf.

[local]
name="media"
baseurl=file:///media/Enterprise%20Linux%20dvd%2020090127/Server
enabled=1
gpgkey=file:///media/Enterprise%20Linux%20dvd%2020090127/RPM-GPG-KEY-oracle

The ones except gpgkey are self-explanatory. The parameter gpgkey is used to point to a file that contains the public key for the packages you install so that yum can verify the package's authenticity if needed. The file I use is the key file that contains the public key to verify the oracle-validated rpm.

oracle-validated rpm is used to install the necessary packages for Oracle installations, it also updates the kernel parameters and creates a default oracle user. Using it is an easy way to prepare your server for Oracle installations, the other option is to check the installation prerequisites from the documentation and install the packages, update the kernel parameters and create the user yourself.

MOS Note 579101.1 explains how to install the oracle-validated rpm.

I tried to install this rpm without checking the note and I did not use the gpgkey parameter in /etc/yum.conf initially. This is what you get if you do not set it.


[root@oeltest tmp]# yum install oracle-validated-1.0.0-18.el5.i386.rpm

Install     19 Package(s)
Update       0 Package(s)
Remove       0 Package(s)


Total download size: 37 M
Is this ok [y/N]: y
Downloading Packages:
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                            2.6 GB/s |  37 MB     00:00
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 1e5e0159

Public key for oracle-validated-1.0.0-18.el5.i386.rpm is not installed


The error indicates that yum cannot verify this rpm so it does not install it. When you update /etc/yum.conf with the gpgkey parameter the error goes away.

-----------------------------------------------------------------------------------------------------

 

http://docs.oracle.com/cd/E37670_01/E39381/html/ol_import_gpg.html

2.4 Downloading and Importing a GPG Key

Under some circumstances, such as when installing additional software in a virtual machine domain, you might need to download and import the GPG key to use with yum. To obtain a GPG key from the public yum repository and then import it, you can use the wget and rpm commands as shown in the following example:

# wget http://public-yum.oracle.com/RPM-GPG-KEY-oracle-el5
# rpm --import ./RPM-GPG-KEY-oracle-el5