{"action":"created","issue":{"url":"https://api.github.com/repos/voidlinux/xbps/issues/137","labels_url":"https://api.github.com/repos/voidlinux/xbps/issues/137/labels{/name}","comments_url":"https://api.github.com/repos/voidlinux/xbps/issues/137/comments","events_url":"https://api.github.com/repos/voidlinux/xbps/issues/137/events","html_url":"https://github.com/voidlinux/xbps/issues/137","id":117385896,"number":137,"title":"Signing of armv7l repo issue.","user":{"login":"Thotth","id":15891058,"avatar_url":"https://avatars.githubusercontent.com/u/15891058?v=3","gravatar_id":"","url":"https://api.github.com/users/Thotth","html_url":"https://github.com/Thotth","followers_url":"https://api.github.com/users/Thotth/followers","following_url":"https://api.github.com/users/Thotth/following{/other_user}","gists_url":"https://api.github.com/users/Thotth/gists{/gist_id}","starred_url":"https://api.github.com/users/Thotth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Thotth/subscriptions","organizations_url":"https://api.github.com/users/Thotth/orgs","repos_url":"https://api.github.com/users/Thotth/repos","events_url":"https://api.github.com/users/Thotth/events{/privacy}","received_events_url":"https://api.github.com/users/Thotth/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-11-17T15:57:47Z","updated_at":"2015-11-17T17:29:06Z","closed_at":"2015-11-17T15:58:56Z","body":"Hi!\r\nI've tried to sign the repo full of *.xbps packs cross-built for the armv7l. Whole stuff is running  on the x86_64 machine.\r\n\r\nWhen I've tried to make xbps-rindex -a ${REPO}/*.xbps  and facing the issue of \"Incompatible architecture (armv7l)\" // on the XBPS 0.47/0.48 // met complete silence with no action at all on the XBPS 0.50 // - it's just stalled right after the start.\r\n\r\nAs soon as xbps-packs were built by the xbps-src, the repo already contains ${ARCH}-repodata file: \"armv7l-repodata\" in my case. I've put that file in the ${REPO} folder on my ftp server and tried to sign only the packs contained in ${REPO}. All packs were \"signed successfully\" (xbps-rindex --sign ${REPO}; xbps-rindex --sign-pkg ${REPO}; said that). \r\n\r\nNext issue happens on the armv7l machine (using the local ftp server as the signed ${REPO} holder):\r\n...\r\n\\# xbps-install -Sy  \\#successfully grabs repo content\r\n\\# xbps-install mc \\#mc - for example\r\n...downloading packs\r\n...verifying RCA signature\r\nERROR: libgpm-1.20.7_8: the RCA signature is not valid!\r\nERROR: libgpm-1.20.7_8: removed pkg archive and its signature.\r\n\r\nThis issue is permanent and I don't know how to be with that: XBPS/Void documentation doesn't spot this case so I'm stuck with the own XBPS repo, compiled but not working.\r\n\r\nAny hope to make it works?"},"comment":{"url":"https://api.github.com/repos/voidlinux/xbps/issues/comments/157444874","html_url":"https://github.com/voidlinux/xbps/issues/137#issuecomment-157444874","issue_url":"https://api.github.com/repos/voidlinux/xbps/issues/137","id":157444874,"user":{"login":"Thotth","id":15891058,"avatar_url":"https://avatars.githubusercontent.com/u/15891058?v=3","gravatar_id":"","url":"https://api.github.com/users/Thotth","html_url":"https://github.com/Thotth","followers_url":"https://api.github.com/users/Thotth/followers","following_url":"https://api.github.com/users/Thotth/following{/other_user}","gists_url":"https://api.github.com/users/Thotth/gists{/gist_id}","starred_url":"https://api.github.com/users/Thotth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Thotth/subscriptions","organizations_url":"https://api.github.com/users/Thotth/orgs","repos_url":"https://api.github.com/users/Thotth/repos","events_url":"https://api.github.com/users/Thotth/events{/privacy}","received_events_url":"https://api.github.com/users/Thotth/received_events","type":"User","site_admin":false},"created_at":"2015-11-17T17:29:06Z","updated_at":"2015-11-17T17:29:06Z","body":"Thanks! Your solution partially helps.\r\n> Is this solution some-kind mirrored in the Void/XBPS documentation? \r\n> Where is the '-a' param? Is it don't needed anymore? (XBPS 0.50 seems to requires it to be presented)\r\n\r\nAnyway, how about second part of my question? Your solution solves only the half of mentioned issue, second one is still here after the signing the whole ${REPO}.\r\n\r\nSo, the question is: how the whole ${REPO} must be signed RIGHT WAY?\r\nMy current script looks like this:\r\n\r\n>\\#/bin/sh\r\n>REPO=/home/ftp/binpkgs.armv7l\r\n> \\#generate the RCA key:\r\n>openssl genrsa -des3 -out privkey.pem.base 4096\r\n> \\#cut the pass from the key due to signing of 6000++ packs:\r\n>openssl rsa -in privkey.pem.base -out privkey.pem \r\n>\r\n>\\#remove all the previous signatures:\r\n>rm -rf ${REPO}/*.sig \r\n> \\#sign for repo:\r\n>xbps-rindex --sign --signedby \"13.0.2.16.16\" --privkey privkey.pem  ${REPO}\r\n>\\# sign for packs:\r\n>xbps-rindex --signedby \"13.0.2.16.16\" --privkey privkey.pem  --sign-pkg  ${REPO}/*.xbps \r\n> \\# index repo\r\n>XBPS_ARCH=armv7l xbps-rindex -a ${REPO}/*.xbps\r\n\r\nThis part works now without visible issues. \r\nBut the \"RCA signature is not valid!\" error during package installation on the target armv7i is still exists! How it can be solved? I don't know. Am I done something wrong on the repo signing stage? \r\nPlease spot the light on this issue too: how I must sign the void/xbps repo to use it on the remote machines in the network without any problems? Or what could bring to the mentioned RCA error on the target host?\r\n"}}