RPM packages for Varnish 6.0.7 not signed

[jnk0]

Expected Behavior

If yum repo is configured on CentOS or RHEL servers, updates can be done via yum update.

Current Behavior

Update via yum fails with message "Package varnish-6.0.7-1.el7.x86_64.rpm is not signed".

Possible Solution

1. Sign the packages in Packagecloud.
2. Disable gpgcheck for package repository.

Steps to Reproduce (for bugs)

1. Install yum repo (see https://packagecloud.io/varnishcache/varnish60lts/install#bash-rpm).
2. Update to new Varnish version (yum update varnish*).

Context

RPMs for Varnish 6.0.6 for example were signed.

Your Environment

• Version used: 6.0.6
• Operating System and version: CentOS 7
• Source of binary packages used (if any): Packagecloud

[gquintard]

assigning to me

[jnk0]

@gquintard: Will you also make sure that the already released RPM packages for Varnish 6.0.7 will be re-released signed at Packagecloud?

[gquintard]

that will possibly wait until next LTS release, but we can possibly push one out just to get the signed packages

[ninja-ops]

6.0.8 still not signed

[FabRons]

Same thing on my side:

Package varnish-6.0.8-1.el7.x86_64.rpm is not signed

Temp fix:

yum install varnish --nogpgcheck

From Packagecloud rpm repo

Regards,

Fabien.

[moutonnoireu]

I had this problem too, could you sign your packages, please ?

[Madko]

Still occurs :
$ rpm -qpi varnish-7.5.0-1.el9.x86_64.rpm
Name : varnish
Version : 7.5.0
Release : 1.el9
...
Signature : (none)

Any plan to fix that ?