slackpkg clean-system problem

[Joseph Rosevear]

Hi Folks!

I have a relatively new Slackware64 15.0, and I'm trying to run "slackpkg
clean-system" on it. In the usual way, because I haven't before used
slackpkg on this installation, it asked me to select a mirror. I did
that, ultimately trying several (one at a time) including these:

https://mirrors.slackware.com/slackware/slackware64-15.0/
http://mirrors.us.kernel.org/slackware/slackware64-15.0/

It failed it seems in the same way each time. Here is the last bit of
output which gives the error message:

vvv
/tmp/slackpkg.d7inKy/CHECKSUMS.md5.asc 100%
[=========================================================================
============================>] 163 --.-KB/s in 0s

2022-08-11 19:58:13 (12.7 MB/s) - ‘/tmp/slackpkg.d7inKy/
CHECKSUMS.md5.asc’ saved [163/163]


ERROR: Verification of the gpg signature on CHECKSUMS.md5
failed! This could mean that the file is out of
date
or has been tampered with. If you use
mirrors.slackware.com
as your mirror, this could also mean that the
mirror to
which you got redirected is not yet updated with
the most
recent changes in the Slackware tree.
^^^

Can anyone help?

-Joe

[Henrik Carlqvist]

Post by Joseph Rosevear
Hi Folks!
I'm trying to run "slackpkg clean-system"

I haven't used slackpkg myself.

Post by Joseph Rosevear
It failed it seems in the same way each time. Here is the last bit of
vvv /tmp/slackpkg.d7inKy/CHECKSUMS.md5.asc 100%

Those .asc files contain a signature created using the file (in this case
CHECKSUMS.md5) and a gnupg private key. You can use gnupg together with
the public key from Slackware to verify that the file CHECKSUMS.md5
really comes from Slackware and has not been tampered with.

Post by Joseph Rosevear
ERROR: Verification of the gpg signature on
CHECKSUMS.md5 failed!

I suppose that slackpkg simply calls gpg to validate the gnupg
signatures. However, before you are able to validate signatures you will
have to install the public key in your gpg keyring.

What output do you get if you stand in the directory where you have
CHECKSUMS.md5 and CHECKSUMS.md5.asc and type:

gpg --verify CHECKSUMS.md5.asc
echo $?

regards Henrik

[Joseph Rosevear]

Post by Henrik Carlqvist

Post by Joseph Rosevear
Hi Folks!
I'm trying to run "slackpkg clean-system"

I haven't used slackpkg myself.

Post by Joseph Rosevear
It failed it seems in the same way each time. Here is the last bit of
vvv /tmp/slackpkg.d7inKy/CHECKSUMS.md5.asc 100%

Those .asc files contain a signature created using the file (in this
case CHECKSUMS.md5) and a gnupg private key. You can use gnupg together
with the public key from Slackware to verify that the file CHECKSUMS.md5
really comes from Slackware and has not been tampered with.

Post by Joseph Rosevear
ERROR: Verification of the gpg signature on
CHECKSUMS.md5 failed!

I suppose that slackpkg simply calls gpg to validate the gnupg
signatures. However, before you are able to validate signatures you will
have to install the public key in your gpg keyring.

Inspired by your patient words of explanation, I figured it out. It
works now.

I should add, however, that I started by writing a different reply
altogether. I had written a bunch of questions asking how gpg worked.
In the process of writing my questions I turned to the man pages for gpg,
did some online searching, and tried a few tests.

Here are steps of my, not insignificant, journey:

-I played with the .gnupg dir. I moved root/.gnupg to a different
name to see what would happen. It didn't break anything. I think that
it simply took away whatever had previously been setup.

-First as root, and then as user joe, I did "gpg --gen-key" to make a
key pair. I took the defaults, provided an email address, and a
passphrase. Incidentally, I made a mistake when entering my full name
the first time (for root)--how can I fix it?

-As user joe I did "gpg --list-keys" before and after doing the
above. Three entries appeared for pub, uid and sub. Hmmm. I don't know
what "pub", "uid" and "sub" mean.

-As user joe I did "gpg --sign-key 40102233". This prompted me for
the passphrase I had entered above. It worked.

-Note that as joe, I wasn't able easily to run slackpkg, so I didn't
try. I did, however, try what you suggested "gpg --verify
CHECKSUM.md5.asc" after first making the .asc and .md5 files from what I
got from the mirror. It worked! Incidentally I had also attempted this
as both joe and root before, per your suggestion, without success.

-I still needed to get "slackpkg clean-system" working, so... I did
"gpg --list-keys" as root and got pub, uid and sub lines.

-I don't know if I previously had a pub line for Slackware Linux
Project, but if so, then it went away when I moved .gnupg to a new name.
So I went online and found the public key that I needed. I saved it to a
file. Then, as root, I did "gpg --import <file>". Afterwards it
appeared as a second set of pub, uid and sub lines in the output from
"gpg --list-keys".

-As root I did "gpg --sign-key 40102233", exactly as I did before as
user joe, except I used the root passphrase.

-Now confident, I didn't bother to test with "gpg --verify ...". I
went to a console and ran as root "slackpkg clean-system". It worked!

Post by Henrik Carlqvist
regards Henrik

Thank you, Henrik.

-Joe

[Rinaldi]

slackpkg [OPTIONS] update [gpg] ?

Post by Joseph Rosevear
Hi Folks!
I have a relatively new Slackware64 15.0, and I'm trying to run "slackpkg
clean-system" on it. In the usual way, because I haven't before used
slackpkg on this installation, it asked me to select a mirror. I did
https://mirrors.slackware.com/slackware/slackware64-15.0/
http://mirrors.us.kernel.org/slackware/slackware64-15.0/
It failed it seems in the same way each time. Here is the last bit of
vvv
/tmp/slackpkg.d7inKy/CHECKSUMS.md5.asc 100%
[=========================================================================
============================>] 163 --.-KB/s in 0s
2022-08-11 19:58:13 (12.7 MB/s) - ‘/tmp/slackpkg.d7inKy/
CHECKSUMS.md5.asc’ saved [163/163]
ERROR: Verification of the gpg signature on CHECKSUMS.md5
failed! This could mean that the file is out of
date
or has been tampered with. If you use
mirrors.slackware.com
as your mirror, this could also mean that the
mirror to
which you got redirected is not yet updated with
the most
recent changes in the Slackware tree.
^^^
Can anyone help?
-Joe

[Jimmy Johnson]

Post by Joseph Rosevear
Hi Folks!
I have a relatively new Slackware64 15.0, and I'm trying to run "slackpkg
clean-system" on it.
Can anyone help?

Hi,

You need to read this:
https://docs.slackware.com/slackware:beginners_guide

You can skip down to slackpkg instructions if you want, but I suggest
you read as much as you can and then if you still have questions come on
back, you're always welcome. :)

[Joseph Rosevear]

Post by Jimmy Johnson

Post by Joseph Rosevear
Hi Folks!
I have a relatively new Slackware64 15.0, and I'm trying to run
"slackpkg clean-system" on it.
Can anyone help?

Hi,
https://docs.slackware.com/slackware:beginners_guide
You can skip down to slackpkg instructions if you want, but I suggest
you read as much as you can and then if you still have questions come on
back, you're always welcome. :)

Hi Jimmy,

I have not often run slackpkg on a new installation. I can't remember
what I did before--perhaps the problem I had this time didn't crop up, or
maybe I stumbled onto the information that I needed and forgot to make a
note of it.

Anyway, your tip is valuable--thank you!

-Joe