Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-35082

RpmSignPlugin randomly does not sign

XMLWordPrintable

      Jenkins version: 1.647
      rpmsign-plugin version: 0.4.6

      We package code up into RPMs and the plugin signs it (in one job). Our local Satellite server has it's own GPG key. The plugin randomly does not sign packages. No failure messages.

      E.g.: this build did not sign the rpm (extract from the job console output/log):

      [RpmSignPlugin] - Starting signing RPMs ...
      [RpmSignPlugin] - Importing private key
      [workspace] $ gpg --import -
      gpg: key XXXXXX: already in secret keyring
      gpg: Total number processed: 1
      gpg:       secret keys read: 1
      gpg:  secret keys unchanged: 1
      [RpmSignPlugin] - Imported private key
      [workspace] $ gpg --fingerprint XXXXX
      pub   1024D/XXXXXX 2008-07-23
            Key fingerprint = blahblahblah
      uid                  Some User <someuser@some.email>
      sub   2048g/blergh 2008-07-23
      
      [RpmSignPlugin] - Publishing */**/*.rpm
      [RpmSignPlugin] - Running rpm --define "_gpg_name XXXXXX" --addsign /path/to/where/build/was/done/RPMS/noarch/packagename-version.noarch.rpm
      [workspace] $ expect -
      [RpmSignPlugin] - Finished signing RPMs ...

      And the same build repeated straight after, which does sign the rpm:

      [RpmSignPlugin] - Starting signing RPMs ...
      [RpmSignPlugin] - Importing private key
      [workspace] $ gpg --import -
      gpg: key XXXXXX: already in secret keyring
      gpg: Total number processed: 1
      gpg:       secret keys read: 1
      gpg:  secret keys unchanged: 1
      [RpmSignPlugin] - Imported private key
      [workspace] $ gpg --fingerprint XXXXXX
      pub   1024D/XXXXXX 2008-07-23
            Key fingerprint = blahblahblah
      uid                  Some User <someuser@some.email>
      sub   2048g/blergh 2008-07-23
      
      [RpmSignPlugin] - Publishing */**/*.rpm
      [RpmSignPlugin] - Running rpm --define "_gpg_name XXXXXX" --addsign /path/to/where/build/was/done/RPMS/noarch/packagename-version.noarch.rpm
      [workspace] $ expect -
      spawn rpm --define _gpg_name XXXXXX --addsign /path/to/where/build/was/done/RPMS/noarch/packagename-version.noarch.rpm
      Enter pass phrase: 
      Pass phrase is good.
      /path/to/where/build/was/done/RPMS/noarch/packagename-version.noarch.rpm:
      gpg: WARNING: standard input reopened
      gpg: WARNING: standard input reopened
      [RpmSignPlugin] - Finished signing RPMs ...

      Nothing in the logs on the server.

            mtizzoni Marco Tizzoni
            rav_i Ravi N
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: