When to use the nogpgcheck when installing using yum
FedoraForum.org - Fedora Support Forums and Community
Results 1 to 4 of 4
  1. #1
    Join Date
    Feb 2009
    Posts
    173
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    When to use the nogpgcheck when installing using yum

    Hello,

    Fedora 18

    I am just wondering when and why I would have to use the --nogpgcheck when installing rpm packages?

    yum --nogpgcheck localinstall packagename.arch.rpm

    I understand that the localinstall will install a rpm package that has been download on to my system and it will install all the dependances.

    However, I am not sure when I would have to use the nogpgcheck option?

    Many thanks for any suggestions,

  2. #2
    Join Date
    Aug 2006
    Posts
    517
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Re: When to use the nogpgcheck when installing using yum

    Well, you basically have to use the nogpgcheck when the rpm is unsigned or you don't have the signer's key. The purpose of signing an RPM is to be able to verify its authenticity.

    For example, suppose I package an RPM, sign it, distribute it on the web and provide a key. You can then verify the RPM is authentic and packaged by me. You know it's safe to install because I'm a trusted source for the package.

    Without the GPG signing, someone else could come along and add a rootkit or virus to my RPM and the user would never know. If a malicious person tried to modify a signed file, the signature would no longer be valid and the RPM would then become untrusted.

    Of course, some very trusted packagers don't sign their RPMs and it's fine to use the --nogpgcheck option. Just make sure you trust the source when installing unsigned and unofficial RPMs.
    Last edited by gadgetwiz; 17th January 2013 at 09:00 AM.
    Gimp Chat | Gimp Scripts | Gimp Tutorials

    The Linux philosophy is 'Laugh in the face of danger'.
    Oops. Wrong One.
    'Do it yourself'. Yeah, that's it. - Linus Torvalds

  3. #3
    Join Date
    Feb 2009
    Posts
    173
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Re: When to use the nogpgcheck when installing using yum

    Hello,

    Thanks for the explaination for the nogpgcheck.

    However, I have one more questions. How do I know if the rpm package has been signed or not.

    Today I installed Dropbox rpm by downloading it from their website. I didn't see anything that would indicate that the rpm package was signed?

    https://www.dropbox.com/download?dl=...ora.x86_64.rpm

    Even on their website I didn't see anything.

    Thanks for your suggestions,

  4. #4
    Join Date
    Aug 2006
    Posts
    517
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Re: When to use the nogpgcheck when installing using yum

    You should be warned if you attempt to install an unsigned package.

    Looks like they do provide a public gpg key and some instructions for installing it on a few distros.

    For Fedora, see /etc/yum.repos.d

    http://docs.fedoraproject.org/en-US/...ositories.html

    http://docs.fedoraproject.org/en-US/...e-sources.html
    Last edited by gadgetwiz; 17th January 2013 at 12:55 PM.
    Gimp Chat | Gimp Scripts | Gimp Tutorials

    The Linux philosophy is 'Laugh in the face of danger'.
    Oops. Wrong One.
    'Do it yourself'. Yeah, that's it. - Linus Torvalds

Similar Threads

  1. Software updates error nvidia --nogpgcheck
    By geion in forum Using Fedora
    Replies: 0
    Last Post: 6th April 2012, 06:04 PM
  2. Problem installing Fedora 15 x64 from installing CD
    By jackscorrow in forum Installation, Upgrades and Live Media
    Replies: 2
    Last Post: 14th October 2011, 04:31 PM
  3. Help installing Installing nVidia Drivers and 32bit OpenGL
    By Jeff91 in forum Installation, Upgrades and Live Media
    Replies: 3
    Last Post: 25th August 2009, 12:25 AM
  4. Replies: 11
    Last Post: 28th October 2008, 05:49 AM
  5. Problem installing updates after installing MySQL 4.1.11
    By garthbrown in forum Using Fedora
    Replies: 4
    Last Post: 26th May 2005, 06:49 AM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •