Raspberry Pi Education server

Can confirm the key’s do not import on arm32 (works fine on x86_64) :thinking: for now disabled both gpg checks in /etc/yum.repos.d/danb35.repo

yum --enablerepo=mark_devel install lasso-perl

did you configure the [lemonldap-ng] repository?

1 Like

ok so i disabled the repo installed the dependancies manualy

warning: nethserver-lemonldap-ng-0.2.0-6.ns7.noarch.rpm: Header V4 RSA/SHA512 Signature, key ID 2d55864b: NOKEY

yeah i did and installed lemonldap-ng and perl-lasso

yum install --enablerepo=mark_devel nethserver-lemonldap-ng

it is installing here on arm32

Summary
Installed:
  nethserver-lemonldap-ng.noarch 0:0.2.0-6.ns7

Dependency Installed:
  ImageMagick.armv7hl 0:6.9.10.68-5.el7_9                              ImageMagick-perl.armv7hl 0:6.9.10.68-5.el7_9
  OpenEXR-libs.armv7hl 0:1.7.1-8.el7                                   adobe-mappings-cmap.noarch 0:20171205-3.el7
  adobe-mappings-cmap-deprecated.noarch 0:20171205-3.el7               adobe-mappings-pdf.noarch 0:20180407-1.el7
  gd.armv7hl 0:2.0.35-27.el7_9                                         gdbm-devel.armv7hl 0:1.10-8.el7
  gdk-pixbuf2.armv7hl 0:2.36.12-3.el7                                  glibc-devel.armv7hl 0:2.17-324.el7_9
  glibc-headers.armv7hl 0:2.17-324.el7_9                               ilmbase.armv7hl 0:1.0.3-7.el7
  jasper-libs.armv7hl 0:1.900.1-33.el7                                 jbigkit-libs.armv7hl 0:2.0-11.el7
  kernel-headers.armv7hl 0:5.4.129-200.el7                             lasso.armv7hl 0:2.7.0-1.1.ns7
  lasso-perl.armv7hl 0:2.7.0-1.1.ns7                                   lcms2.armv7hl 0:2.6-3.el7
  lemonldap-ng.noarch 0:2.0.12-1.el7                                   lemonldap-ng-conf.noarch 0:2.0.12-1.el7
  lemonldap-ng-doc.noarch 0:2.0.12-1.el7                               lemonldap-ng-handler.noarch 0:2.0.12-1.el7
  lemonldap-ng-manager.noarch 0:2.0.12-1.el7                           lemonldap-ng-portal.noarch 0:2.0.12-1.el7
  lemonldap-ng-test.noarch 0:2.0.12-1.el7                              libICE.armv7hl 0:1.0.9-9.el7
  libSM.armv7hl 0:1.2.2-2.el7                                          libXcursor.armv7hl 0:1.1.15-1.el7
  libXi.armv7hl 0:1.7.9-1.el7                                          libXinerama.armv7hl 0:1.1.3-2.1.el7
  libXmu.armv7hl 0:1.1.2-2.el7                                         libXpm.armv7hl 0:3.5.12-1.el7
  libXrandr.armv7hl 0:1.5.1-2.el7                                      libXt.armv7hl 0:1.1.5-3.el7
  libXxf86misc.armv7hl 0:1.0.3-7.1.el7                                 libdb-devel.armv7hl 0:5.3.21-25.el7
  libfontenc.armv7hl 0:1.1.3-3.el7                                     libgs.armv7hl 0:9.25-5.el7
  libjpeg-turbo.armv7hl 0:1.2.90-8.el7                                 liblzf.armv7hl 0:3.6-7.el7
  libpaper.armv7hl 0:1.1.24-9.el7                                      librsvg2.armv7hl 0:2.40.20-1.el7
  libtiff.armv7hl 0:4.0.3-35.el7                                       libtool-ltdl.armv7hl 0:2.4.2-22.el7_3
  libwmf-lite.armv7hl 0:0.2.8.4-44.el7                                 mod_fcgid.armv7hl 0:2.3.9-6.el7
  mod_perl.armv7hl 0:2.0.11-1.el7                                      openjpeg2.armv7hl 0:2.3.1-3.el7_7
  perl-Any-Moose.noarch 0:0.21-5.el7                                   perl-Apache-LogFormat-Compiler.noarch 0:0.23-1.el7
  perl-Apache-Session.noarch 0:1.93-2.el7                              perl-Apache-Session-Browseable.noarch 0:1.2.1-1.el7
  perl-AuthCAS.noarch 0:1.6-4.el7                                      perl-Authen-Radius.noarch 0:0.26-4.el7
  perl-B-Hooks-EndOfScope.noarch 0:0.13-2.el7                          perl-BSD-Resource.armv7hl 0:1.29.07-1.el7
  perl-CGI.noarch 0:3.63-4.el7                                         perl-CGI-Compile.noarch 0:0.15-6.el7
  perl-CGI-Emulate-PSGI.noarch 0:0.15-4.el7                            perl-Cache-Cache.noarch 0:1.06-12.el7
  perl-Cache-Memcached.noarch 0:1.30-8.el7                             perl-Class-Accessor.noarch 0:0.34-12.el7
  perl-Class-Data-Inheritable.noarch 0:0.08-14.el7                     perl-Class-ErrorHandler.noarch 0:0.03-1.el7
  perl-Class-Inspector.noarch 0:1.28-2.el7                             perl-Class-Load.noarch 0:0.20-3.el7
  perl-Class-Singleton.noarch 0:1.4-14.el7                             perl-Clone.armv7hl 0:0.34-5.el7
  perl-Compress-LZF.armv7hl 0:3.7-1.el7                                perl-Config-IniFiles.noarch 0:2.79-1.el7
  perl-Convert-Bencode.noarch 0:1.03-9.el7                             perl-Convert-BinHex.noarch 0:1.119-20.el7
  perl-Convert-PEM.noarch 0:0.08-14.el7                                perl-Cpanel-JSON-XS.armv7hl 0:3.0104-1.el7
  perl-Crypt-DES.armv7hl 0:2.05-20.el7                                 perl-Crypt-DES_EDE3.noarch 0:0.01-18.el7
  perl-Crypt-DH-GMP.armv7hl 0:0.00012-13.el7                           perl-Crypt-OpenSSL-Bignum.armv7hl 0:0.04-18.el7
  perl-Crypt-OpenSSL-RSA.armv7hl 0:0.28-7.el7                          perl-Crypt-OpenSSL-Random.armv7hl 0:0.04-21.el7
  perl-Crypt-OpenSSL-X509.armv7hl 0:1.803-4.el7                        perl-Crypt-Rijndael.armv7hl 0:1.12-1.el7
  perl-Crypt-URandom.noarch 0:0.34-1.el7                               perl-DBI.armv7hl 0:1.627-4.el7
  perl-DB_File.armv7hl 0:1.830-6.el7                                   perl-Data-Dump.noarch 0:1.22-1.el7
  perl-Data-HexDump.noarch 0:0.02-26.el7                               perl-Data-OptList.noarch 0:0.107-9.el7
  perl-Date-Manip.noarch 0:6.41-2.el7                                  perl-DateTime.armv7hl 2:1.04-6.el7
  perl-DateTime-Format-RFC3339.noarch 0:1.0.5-1.el7                    perl-DateTime-Locale.noarch 0:0.45-6.el7
  perl-DateTime-TimeZone.noarch 0:1.70-2.el7                           perl-Devel-GlobalDestruction.noarch 0:0.12-1.el7
  perl-Devel-PartialDump.noarch 0:0.15-8.el7                           perl-Devel-StackTrace.noarch 1:1.30-2.el7
  perl-Devel-StackTrace-AsHTML.noarch 0:0.15-1.el7                     perl-Digest-SHA1.armv7hl 0:2.13-9.el7
  perl-Dist-CheckConflicts.noarch 0:0.06-2.el7                         perl-Email-Abstract.noarch 0:3.007-1.el7.1
  perl-Email-Address.noarch 0:1.898-3.el7                              perl-Email-Date-Format.noarch 0:1.002-15.el7
  perl-Email-Sender.noarch 0:0.120002-4.el7                            perl-Email-Simple.noarch 0:2.214-1.el7
  perl-Error.noarch 1:0.17020-2.el7                                    perl-Eval-Closure.noarch 0:0.08-4.el7
  perl-ExtUtils-Install.noarch 0:1.58-299.el7_9                        perl-ExtUtils-MakeMaker.noarch 0:6.68-3.el7
  perl-ExtUtils-Manifest.noarch 0:1.61-244.el7                         perl-ExtUtils-ParseXS.noarch 1:3.18-3.el7
  perl-FCGI.armv7hl 1:0.74-8.el7                                       perl-FCGI-Client.noarch 0:0.08-6.el7
  perl-File-pushd.noarch 0:1.005-2.el7                                 perl-GD.armv7hl 0:2.49-3.el7
  perl-GD-SecurityImage.noarch 0:1.72-1.el7                            perl-HTML-Template.noarch 0:2.95-1.el7
  perl-HTTP-Body.noarch 0:1.07-10.el7                                  perl-Hash-MultiValue.noarch 0:0.15-2.el7
  perl-IO-SessionData.noarch 0:1.03-1.el7                              perl-IO-Socket-Timeout.noarch 0:0.27-1.el7
  perl-IO-String.noarch 0:1.08-19.el7                                  perl-IO-Tty.armv7hl 0:1.10-11.el7
  perl-IPC-Run.noarch 0:0.92-2.el7                                     perl-IPC-ShareLite.armv7hl 0:0.17-12.el7
  perl-JSON-MaybeXS.noarch 0:1.003005-1.el7                            perl-JSON-XS.armv7hl 1:3.01-2.el7
  perl-LWP-Protocol-https.noarch 0:6.04-4.el7                          perl-Lemonldap-NG-Common.noarch 0:2.0.12-1.el7
  perl-Lemonldap-NG-Handler.noarch 0:2.0.12-1.el7                      perl-Lemonldap-NG-Manager.noarch 0:2.0.12-1.el7
  perl-Lemonldap-NG-Portal.noarch 0:2.0.12-1.el7                       perl-Linux-Pid.armv7hl 0:0.04-18.el7
  perl-List-MoreUtils.armv7hl 0:0.33-9.el7                             perl-Log-Dispatch.noarch 0:2.41-1.el7.1
  perl-Log-Dispatch-FileRotate.noarch 0:1.19-13.el7                    perl-Log-Log4perl.noarch 0:1.42-2.el7
  perl-MIME-Lite.noarch 0:3.030-1.el7                                  perl-MIME-Types.noarch 0:1.38-2.el7
  perl-MIME-tools.noarch 0:5.505-1.el7                                 perl-MRO-Compat.noarch 0:0.12-2.el7
  perl-Mail-Sender.noarch 0:0.8.23-1.el7                               perl-Mail-Sendmail.noarch 0:0.79-21.el7
  perl-Module-Implementation.noarch 0:0.06-6.el7                       perl-Module-Pluggable.noarch 1:4.8-3.el7
  perl-Module-Refresh.noarch 0:0.17-6.el7                              perl-Module-Runtime.noarch 0:0.013-4.el7
  perl-Moose.armv7hl 0:2.1005-1.el7                                    perl-Mouse.armv7hl 0:1.11-1.el7
  perl-Net-Daemon.noarch 0:0.48-5.el7                                  perl-Net-Facebook-Oauth2.noarch 0:0.11-2.el7
  perl-Net-IP.noarch 0:1.26-4.el7                                      perl-Net-OAuth.noarch 0:0.28-2.el7
  perl-Net-OpenID-Common.noarch 0:1.20-8.el7                           perl-Net-OpenID-Consumer.noarch 0:1.18-8.el7
  perl-Net-OpenID-Server.noarch 0:1.09-11.el7                          perl-Package-DeprecationManager.noarch 0:0.13-7.el7
  perl-Package-Generator.noarch 0:0.103-14.el7                         perl-Package-Stash.noarch 0:0.34-2.el7
  perl-Package-Stash-XS.armv7hl 0:0.26-3.el7                           perl-Params-Util.armv7hl 0:1.07-6.el7
  perl-Params-Validate.armv7hl 0:1.08-4.el7                            perl-PerlIO-via-Timeout.noarch 0:0.29-1.el7
  perl-PlRPC.noarch 0:0.2020-14.el7                                    perl-Plack.noarch 0:1.0033-1.el7
  perl-Redis.noarch 0:1.978-1.el7                                      perl-Regexp-Assemble.noarch 0:0.35-11.el7
  perl-Regexp-Common.noarch 0:2013031301-1.el7                         perl-SOAP-Lite.noarch 0:1.10-2.el7
  perl-Stream-Buffered.noarch 0:0.02-1.el7                             perl-String-CRC32.armv7hl 0:1.4-19.el7
  perl-String-Random.noarch 0:0.25-1.el7                               perl-Sub-Exporter.noarch 0:0.986-2.el7
  perl-Sub-Exporter-Progressive.noarch 0:0.001011-1.el7                perl-Sub-Install.noarch 0:0.926-6.el7
  perl-Sub-Name.armv7hl 0:0.09-1.el7                                   perl-Throwable.noarch 0:0.102080-11.el7
  perl-Try-Tiny.noarch 0:0.12-2.el7                                    perl-Types-Serialiser.noarch 0:1.0-1.el7
  perl-Unicode-String.armv7hl 0:2.09-29.el7                            perl-Variable-Magic.armv7hl 0:0.54-2.el7
  perl-XML-DOM.noarch 0:1.44-19.el7                                    perl-XML-LibXML.armv7hl 1:2.0018-5.el7
  perl-XML-LibXSLT.armv7hl 0:1.80-4.el7                                perl-XML-RegExp.noarch 0:0.04-2.el7
  perl-XML-SAX.noarch 0:0.99-9.el7                                     perl-XML-Simple.noarch 0:2.20-5.el7
  perl-YAML.noarch 0:0.84-5.el7                                        perl-common-sense.noarch 0:3.6-4.el7
  perl-devel.armv7hl 4:5.16.3-299.el7_9                                perl-namespace-clean.noarch 0:0.24-2.el7
  perl-version.armv7hl 3:0.99.07-6.el7                                 perltidy.noarch 0:20121207-3.el7
  pyparsing.noarch 0:1.5.6-9.el7                                       rrdtool-perl.armv7hl 0:1.4.8-9.el7
  systemtap-sdt-devel.armv7hl 0:4.0-13.el7                             urw-base35-bookman-fonts.noarch 0:20170801-10.el7
  urw-base35-c059-fonts.noarch 0:20170801-10.el7                       urw-base35-d050000l-fonts.noarch 0:20170801-10.el7
  urw-base35-fonts.noarch 0:20170801-10.el7                            urw-base35-fonts-common.noarch 0:20170801-10.el7
  urw-base35-gothic-fonts.noarch 0:20170801-10.el7                     urw-base35-nimbus-mono-ps-fonts.noarch 0:20170801-10.el7
  urw-base35-nimbus-roman-fonts.noarch 0:20170801-10.el7               urw-base35-nimbus-sans-fonts.noarch 0:20170801-10.el7
  urw-base35-p052-fonts.noarch 0:20170801-10.el7                       urw-base35-standard-symbols-ps-fonts.noarch 0:20170801-10.el7
  urw-base35-z003-fonts.noarch 0:20170801-10.el7                       xmlsec1.armv7hl 0:1.2.20-7.el7_4
  xmlsec1-openssl.armv7hl 0:1.2.20-7.el7_4                             xorg-x11-font-utils.armv7hl 1:7.5-21.el7
  xorg-x11-server-utils.armv7hl 0:7.7-20.el7

Complete!

yum install --enablerepo=mark_devel nethserver-lemonldap-ng
Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile

  • ce-base: mirror.nsw.coloau.com.au
  • ce-extras: mirror.nsw.coloau.com.au
  • ce-updates: mirror.nsw.coloau.com.au
  • centos-kernel: mirror.nsw.coloau.com.au
    Nothing to do

ill remove it then reinstall just incase some of the manual .rpm is still there

ok now i got

[root@orion yum.repos.d]# yum --enablerepo=mark_devel install nethserver-lemonldap-ng

Loaded plugins: changelog, fastestmirror, nethserver_events
Loading mirror speeds from cached hostfile
 * ce-base: mirror.nsw.coloau.com.au
 * ce-extras: mirror.nsw.coloau.com.au
 * ce-updates: mirror.nsw.coloau.com.au
 * centos-kernel: mirror.nsw.coloau.com.au
No package nethserver-lemonldap-ng available.

ONLY FOR TESTING NOW did you remove the gpg checks for dan35 repo:

cat /etc/yum.repos.d/danb35.repo
[danb35]
name=DanB35 repository for nethserver $releasever - $basearch
baseurl=https://repo.familybrown.org/nethserver/$releasever
enabled=1
gpgcheck=0
repo_gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-danb35 file:///etc/pki/rpm-gpg/RPM-GPG-KEY-danb35-2
2 Likes

11 posts were merged into an existing topic: Install LemonLDAP::NG SSO/IAM on Nethserver

My goals for the moment is to install

  • Lemon-ldap-ng ✓
  • Automx ✓
  • Glpi, flyvemdm
  • Savaprint
  • Sogo ✓
  • WordPress ✓
  • Web filter and proxy ✓

I’m thinking of getting another raspberry pi
To install

  • Zammad
  • Guacamole
  • Nextcloud ✓
2 Likes

Ok next step getting glpi and mdm working

is this a self hosted product or it is a plugin for glpi, just heard of it i think, and it seems nifty.

Both actually there is a plugin but they have a seperate web admin panel that is supposed to work through the plugin to connect flyve with glpi at least how they worded it

so this still works with a self hosted glpi version. because they keep mentioning the cloud version of glpi.

It turns out the repo_gpgcheck on arm-32bit for @danb35 's repo causes a problem :thinking: , and cannot figure out why…

@danb35 in time (no hurry)
Just to be sure yum does not fail because of the mess rpm/yum makes for arm-32bit can you rename the directory for arm-32bit from armv7hl to armhfp and update the repo-metadata (ie run createrepo) ?
yum/dnf uses armhfp as basearch (distinction) for arm-32bit and rpm uses the isa distinction,

on a arm-32bit system:
# rpm --eval %{arm}
armv3l armv4b armv4l armv4tl armv5tel armv5tejl armv6l armv7l armv7hl armv7hnl

 # python -c 'import yum, pprint; yb = yum.YumBase(); pprint.pprint(yb.conf.yumvar, width=1)'
Loaded plugins: fastestmirror, nethserver_events
{'basearch': 'armhfp',
 'contentdir': 'altarch',
 'infra': 'stock',
 'kvariant': 'generic',
 'nsrelease': '7.9.2009',
 'releasever': '7',
 'uuid': '57546700-92e6-4222-8e8d-6fdb5406c78e'}
2 Likes

Done. Seems more than a little strange that gnupg’s behavior would be inconsistent.

2 Likes

thank you
still complains of
https://repo.familybrown.org/nethserver/7/repodata/repomd.xml: [Errno -1] repomd.xml signature could not be verified for danb35
but still installs

Sorry to have bothered you with such a long shot;

repo_gpgcheck=0 and gpgcheck=1 works for me on arm32 bit it chokes on repo_gpgcheck=1
Do not know why… :sob:

I remember when I set up the repo, I needed to use a DSA key for the repo metadata, so that the signatures could be generated non-interactively (i.e., without me needing to enter a passphrase). I expect that’s the source of the problem.

But I’m unsure why. I don’t have a Pi running Neth or even CentOS, but I do have one running Raspbian. I downloaded repomd.xml, repomd.xml.asc, and the key itself (it’s the -2 key that signs the repo data) to the Pi, and here was the result:

dan@wxbox:~ $ gpg --verify repomd.xml.asc repomd.xml
gpg: Signature made Sat 31 Jul 2021 02:01:09 PM EDT
gpg:                using DSA key DFBEED1D430C24B7
gpg: Good signature from "DanB35 Signing Key <dan@familybrown.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: A43A 121D F1DF 4219 6F66  10B3 24CF 25C9 2D55 864B
     Subkey fingerprint: 78CC 64E3 C011 2B09 0E68  75E2 DFBE ED1D 430C 24B7
dan@wxbox:~ $ gpg --version
gpg (GnuPG) 2.2.12
libgcrypt 1.8.4
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: /home/dan/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
        CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2
dan@wxbox:~ $ 
1 Like

@danb35

Raspbian would be a mite old…
It’s now officially called Raspberry OS…
(I think since Buster…)

My 2 cents
Andy

Same result with Ubuntu 20.10 on rPi:

dan@tinyca:~$ gpg --import RPM-GPG-KEY-2 
gpg: directory '/home/dan/.gnupg' created
gpg: keybox '/home/dan/.gnupg/pubring.kbx' created
gpg: /home/dan/.gnupg/trustdb.gpg: trustdb created
gpg: key 24CF25C92D55864B: public key "DanB35 Signing Key <dan@familybrown.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1
dan@tinyca:~$ gpg --verify repomd.xml.asc repomd.xml
gpg: Signature made Sat Jul 31 14:01:09 2021 EDT
gpg:                using DSA key DFBEED1D430C24B7
gpg: Good signature from "DanB35 Signing Key <dan@familybrown.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: A43A 121D F1DF 4219 6F66  10B3 24CF 25C9 2D55 864B
     Subkey fingerprint: 78CC 64E3 C011 2B09 0E68  75E2 DFBE ED1D 430C 24B7
dan@tinyca:~$ gpg --version
gpg (GnuPG) 2.2.20
libgcrypt 1.8.5
Copyright (C) 2020 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: /home/dan/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
        CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2

I’m quite unknowable about this stuff… if you want me to check something just ask I’ll run it here on a nethserver arm install.

Try downloading the three files in question:

curl https://repo.familybrown.org/nethserver/7/repodata/repomd.xml > repomd.xml
curl https://repo.familybrown.org/nethserver/7/repodata/repomd.xml.asc > repomd.xml.asc
curl https://repo.familybrown.org/RPM-GPG-KEY-2 > RPM-GPG-KEY-2

Import the key:

gpg --import RPM-GPG-KEY-2

And then see what happens when you try to verify the signature:

gpg --verify repomd.xml.asc repomd.xml