PVE-Manager scripts logs

[apmuthu]

Everyday we get the appliance info download in /var/log/pveam.log as below even if we do not issue the pveam update command:

[GNUPG:] IMPORT_OK 0 9ABD7E02AD243AD3C2FBBCCCB0C1CC225CAC72FE
[GNUPG:] IMPORT_RES 1 0 0 0 1 0 0 0 0 0 0 0 0 0
Aug 14 06:25:02 start download http://download.proxmox.com/appliances/aplinfo.dat.asc
Aug 14 06:25:03 download finished: 200 OK
Aug 14 06:25:03 start download http://download.proxmox.com/appliances/aplinfo.dat.gz
Aug 14 06:25:04 download finished: 200 OK
Aug 14 06:25:04 gpg: Signature made Mon May 11 17:12:56 2009 SGT using DSA key ID 5CAC72FE
Aug 14 06:25:04 [GNUPG:] SIG_ID GrE8clYyHTs0px3YOfZBa2/v4BQ 2009-05-11 1242033176
Aug 14 06:25:04 [GNUPG:] GOODSIG B0C1CC225CAC72FE Proxmox Support Team <support@proxmox.com>
Aug 14 06:25:04 gpg: Good signature from "Proxmox Support Team <support@proxmox.com>"
Aug 14 06:25:04 [GNUPG:] VALIDSIG 9ABD7E02AD243AD3C2FBBCCCB0C1CC225CAC72FE 2009-05-11 1242033176 0 4 0 17 2 00 9ABD7E02AD243AD3C2FBBCCCB0C1CC225CAC72FE
Aug 14 06:25:04 [GNUPG:] TRUST_UNDEFINED
Aug 14 06:25:04 gpg: WARNING: This key is not certified with a trusted signature!
Aug 14 06:25:04 gpg: There is no indication that the signature belongs to the owner.
Aug 14 06:25:04 Primary key fingerprint: 9ABD 7E02 AD24 3AD3 C2FB BCCC B0C1 CC22 5CAC 72FE
Aug 14 06:25:04 signature valid: 9ABD7E02AD243AD3C2FBBCCCB0C1CC225CAC72FE
Aug 14 06:25:04 update sucessful
Aug 15 06:25:03 starting update

The ProxMox appliance info does not change often.

• Can we switch off appliance info updation?
• Can we change the frequency of updation?
• Can we append our own repositories which change more often?

The manager scripts are in /usr/share/pve-manager and the functions they access are in /usr/share/perl5/PVE.

 

[dietmar]

Why don't you simply fix your repository (import the correct keys with apt-key)?

 

[apmuthu]

# apt-key list

/etc/apt/trusted.gpg
--------------------
pub 1024D/6070D3A1 2006-11-20 [expired: 2009-07-01]
uid Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>

pub 1024D/ADB11277 2006-09-17
uid Etch Stable Release Key <debian-release@lists.debian.org>

pub 1024D/BBE55AB3 2007-03-31 [expires: 2010-03-30]
uid Debian-Volatile Archive Automatic Signing Key (4.0/etch)
sub 2048g/36CA98F3 2007-03-31 [expires: 2010-03-30]

pub 1024D/F42584E6 2008-04-06 [expires: 2012-05-15]
uid Lenny Stable Release Key <debian-release@lists.debian.org>

pub 4096R/55BE302B 2009-01-27 [expires: 2012-12-31]
uid Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org>

pub 2048R/6D849617 2009-01-24 [expires: 2013-01-23]
uid Debian-Volatile Archive Automatic Signing Key (5.0/lenny)

pub 1024D/9887F95A 2008-10-28
uid Proxmox Release Key <proxmox-release@proxmox.com>
sub 2048g/A87A1B00 2008-10-28

# apt-key update

gpg: key 6070D3A1: "Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>" not changed
gpg: key ADB11277: "Etch Stable Release Key <debian-release@lists.debian.org>" not changed
gpg: key BBE55AB3: "Debian-Volatile Archive Automatic Signing Key (4.0/etch)" not changed
gpg: key F42584E6: "Lenny Stable Release Key <debian-release@lists.debian.org>" not changed
gpg: key 55BE302B: "Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org>" not changed
gpg: key 6D849617: "Debian-Volatile Archive Automatic Signing Key (5.0/lenny)" not changed
gpg: Total number processed: 6
gpg: unchanged: 6

Since there is already a key for Proxmox and it has not been updated by apt-key update, what command(s) should I give to replace with / import the correct key.

 

[apmuthu]

# gpg --keyserver subkeys.pgp.net --search-keys proxmox-release@proxmox.com

gpg: searching for "proxmox-release@proxmox.com" from hkp server subkeys.pgp.net
(1) Proxmox Release Key <proxmox-release@proxmox.com>
1024 bit DSA key 9887F95A, created: 2008-10-28
Keys 1-1 of 1 for "proxmox-release@proxmox.com". Enter number(s), N)ext, or Q)uit > 1
gpg: requesting key 9887F95A from hkp server subkeys.pgp.net
gpg: key 9887F95A: public key "Proxmox Release Key <proxmox-release@proxmox.com>" imported
gpg: Total number processed: 1
gpg: imported: 1

I expect that the above is correct. Please confirm.

 

[dietmar]

I just re-read the above warning again, and it only says that the TRUST is undefined. I also get that warning here - you can ignore that.

 

[apmuthu]

Thanks for the info dietmar.

The above TRUST UNDEFINED is possibly because:

# gpg --keyserver subkeys.pgp.net --search-keys support@proxmox.com

gpg: searching for "support@proxmox.com" from hkp server subkeys.pgp.net
gpg: key "support@proxmox.com" not found on keyserver