When i install a package, system says "The package is not signed". How to install it?

silentemotion · #1 15th July 2006, 02:10 AM

When i try use yum to install a software package, the system says the package is not signed and it stops there. May i know is there a way to force it install even the package is not signed? The package i wanna install is xchm-1.9-3.FC5.i386.rpm. I use yum install xchm-1.9-3.FC5.i386.rpm to install it.

thanks

#2 15th July 2006, 02:20 AM

Quote:

Originally Posted by silentemotion

When i try use yum to install a software package, the system says the package is not signed and it stops there. May i know is there a way to force it install even the package is not signed? The package i wanna install is xchm-1.9-3.FC5.i386.rpm. I use yum install xchm-1.9-3.FC5.i386.rpm to install it.

thanks

If you've downloaded the RPM, double click on it and you can install it that way.

Wayne

insearchof · #3 15th July 2006, 02:27 AM

if it isnt downloaded and your pulling it from a yum repository... determine the repo it is pulling from...

and edit /etc/yum.repo.d/(the feed).repo

and change gpgcheck=1 to 0

this will stop it from checking the sig...

Late

silentemotion · #4 16th July 2006, 02:31 PM

Quote:

Originally Posted by rondonjin

If you've downloaded the RPM, double click on it and you can install it that way.

Wayne

i know that i can use rpm command to install it but there are dependencies there. so i use yum would be easier but i checks for signed or not signed....

silentemotion · #5 17th July 2006, 02:42 AM

Quote:

Originally Posted by insearchof

if it isnt downloaded and your pulling it from a yum repository... determine the repo it is pulling from...

and edit /etc/yum.repo.d/(the feed).repo

and change gpgcheck=1 to 0

this will stop it from checking the sig...

Late

Firstly, thank you for ur helping. Other than edit the .repo file, do i have another way to do it? i am not saying that i lazy to follow ur way but my purpose is to know more things. But firstly, why teh system doesnt provide me an option whether to proceed to install ornot even if the package is not signed? This is strange....

Thanks

***bob*** · #6 17th July 2006, 03:49 AM

The '1' or '0' is the option. If you want the system to verify packages as legitimate, you use the 'gpgcheck=1'. If you're willing to take chances with unsigned packages,use the 'gpgcheck=0'. In this case, I beleive the package is in 'extras' and someone may have missed the signature when approving the package. I'd do the change for this one package and then change it back:

gedit /etc/yum.repos.d/fedora-extras.repo

Then, you'll see that only the top one (extras) is enabled=1. That's the one to change the gpgcheck=0. Then, run your transaction and repeat the process to return gpgcheck=1

#7 17th July 2006, 04:01 AM

Quote:

Originally Posted by silentemotion

i know that i can use rpm command to install it but there are dependencies there. so i use yum would be easier but i checks for signed or not signed....

I've double-clicked on downloaded RPM files and it has checked for and downloaded needed dependencies. Guess I'm charmed

Wayne

silentemotion · #8 17th July 2006, 04:27 AM

Quote:

Originally Posted by rondonjin

I've double-clicked on downloaded RPM files and it has checked for and downloaded needed dependencies. Guess I'm charmed

Wayne

Haha, now only i realized that system would download the dependencies if using GUI and double-click on it. Thanks for your mention. I never tried it because i wanna learn Linux through command based. Anyway thanks for your seggestion also.

#9 17th July 2006, 04:43 AM

Quote:

Originally Posted by silentemotion

Haha, now only i realized that system would download the dependencies if using GUI and double-click on it. Thanks for your mention. I never tried it because i wanna learn Linux through command based. Anyway thanks for your seggestion also.

There's more than one way to skin a cat

I use the method best suited for the occasion, sometimes YUM, sometimes RPM but I'm not knowledgable enough to compile my own.

Wayne

silentemotion · #10 17th July 2006, 10:52 AM

haha...never mine, i learned one thing from you also. It is worth. But what do you mean by "I'm not knowledgable enough to compile my own"?

silentemotion · #11 17th July 2006, 03:06 PM

when i follow the way to change the flag from 1 to 0, the result is still the same. But nvm, i ended up double-click to install it.

silentemotion · #12 17th July 2006, 03:14 PM

another thing is, i cannot find it in the GUI program list there...normally when we installed program in Windows, we will see the program when we navigate to Start button and programs. Can i know how to do this? i can type command to run it only currently.

#13 18th July 2006, 12:06 AM

Quote:

Originally Posted by silentemotion

haha...never mine, i learned one thing from you also. It is worth. But what do you mean by "I'm not knowledgable enough to compile my own"?

It means I don't know enough (and basically I'm not brave enough) to grab the source code of a program and compile it. Maybe in another 10 years.... but then maybe I'll be too old!

Wayne

silentemotion · #14 18th July 2006, 01:49 AM

then does anybody here knows how to add the newly installed program into the program's bar just like what Windows does?

#15 18th July 2006, 01:56 AM

Quote:

Originally Posted by silentemotion

then does anybody here knows how to add the newly installed program into the program's bar just like what Windows does?

Do you mean add it to the menu? If you're using Gnome you can install alacarte or smeg, they are menu editors. I prefer smeg, sometimes alacarte hangs on me when I try to navigate through the file system to find the executable I'm trying to add.

Wayne