Unable to upgrade 14.3 to 15.0 using pkgbase, even after following instructions (No trusted public keys found)

neal

neal

I'm trying to upgrade a pkgbasified system from 14.3 to 15.0-RELEASE, without much luck. I've been following the instructions in the handbook, with the addendum from the release notes about keys, as well as this forum post: https://forums.freebsd.org/threads/...trusted-public-keys-found.100527/#post-730252

Alas I'm still getting the dreaded "No trusted public keys found" message when trying to do the upgrade. Looking at pkg repos it looks like it is looking at the new pkgbase-15 keys, which all have the same sha256 signatures as detailed in the release notes, but it's still not happy.

Is there any reason why pkg-static won't use the new FreeBSD-base keys under 14.3? I'm at a complete loss here.
 
SirDice said:
Can you post the entire error message? Including the output before it?
Click to expand...

Code: 
env ABI=FreeBSD:15:amd64 pkg-static -c /mnt/upgrade upgrade -r FreeBSD-base
pkg-static: Setting ABI requires setting OSVERSION, guessing the OSVERSION as: 1500000
pkg-static: Warning: Major OS version upgrade detected.  Running "pkg bootstrap -f" recommended
Updating FreeBSD-base repository catalogue...
pkg-static: Repository FreeBSD-base has a wrong packagesite, need to re-create database
Fetching meta.conf: 100%    179 B   0.2kB/s    00:01    
Fetching data.pkg: 100%   80 KiB  81.5kB/s    00:01    
pkg-static: No trusted public keys found
FreeBSD-base repository is up to date.
FreeBSD-base is up to date.
pkg-static: Repository FreeBSD-base has a wrong packagesite, need to re-create database
pkg-static: Repository FreeBSD-base cannot be opened. 'pkg update' required
Checking for upgrades (0 candidates): 100%
Processing candidates (0 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.
I've tried increasingly hard coding the repos to make sure they are as expected, but it doesn't help:
Code: 
FreeBSD-ports-kmods: {  
    url             : "pkg+https://pkg.freebsd.org/FreeBSD:14:amd64/kmods_quarterly_3",
    enabled         : yes,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkg"
  }
FreeBSD-base: { 
    url             : "pkg+https://pkg.freebsd.org/FreeBSD:15:amd64/base_release_0",
    enabled         : yes,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkgbase-15"
  }
FreeBSD-ports-latest: { 
    url             : "pkg+https://pkg.freebsd.org/FreeBSD:14:amd64/latest",
    enabled         : yes,
    priority        : 0,
    mirror_type     : "SRV",
    signature_type  : "FINGERPRINTS",
    fingerprints    : "/usr/share/keys/pkg"
  }
 
I suspect it's because you're chroot'ing the installation. What happens if you set up the keys inside the /mnt/upgrade environment? So /mnt/upgrade/usr/share/keys/pkgbase-15? It might be looking for the keys there.
 
I've tried that, but it makes no difference.

I'm following the instructions from the handbook, which also matches that on the earlier linked forum post. Unfortunately my outcome seems to differ from that expected.
 
I've had no problems upgrading my other systems using freebsd-update, but this is on a system that I thought I was doing the right thing by pkgbasifying. Is there any way to go back to a non-pkgbase system so that I can use freebsd-update? I imagine not.
 
Apparently not yet. What I did (after advice from SirDice, was check the release notes, at https://www.freebsd.org/releases/15.0R/relnotes/#upgrade-rc
and then, get the src code and run
Code: 
cp -R /usr/src/share/keys/pkgbase-15 /usr/share/keys/pkgbase-15
I then edited my fingerprints line to read
Code: 
fingerprints = "/usr/share/keys/pkgbase-15"
Which you seem to have.

The stupid question, does your pkgbase-15 have the keys from /usr/src/share/keys/pkgbase-15?

I should mention that though this worked for me several days ago, I'm having trouble using a pkgbase update on a VM that I'm testing, although so far it's a different error. petan has good writeup on what worked for him, here.
petan

Solved Post in thread 'Upgrade from 14.3 to 15.0-RELEASE using pkgbase (wrong packagesite and No trusted public keys found)'

Erichans said:
See this for further clarification. For an upgrade path from a pkgbasified 14.3-RELEASE to pkgbasified 15.0-RELEASE (unsupported, not recommended), you may hack your way through, as mentioned above.
Click to expand...
Ok, I performed this upgrade tonight. At least for now it seems to work. The path I followed was:

# cat /usr/local/etc/pkg/repos/FreeBSD-base.conf
FreeBSD-base: {
url: "pkg+https://pkg.FreeBSD.org/${ABI}/base_release_0",
mirror_type: "srv",
signature_type: "fingerprints",
fingerprints: "/usr/share/keys/pkgbase-15",
enabled: yes
}

# pkg add -f...
  • Thanks
  • Like
 
scottro said:
Apparently not yet. What I did (after advice from SirDice, was check the release notes, at https://www.freebsd.org/releases/15.0R/relnotes/#upgrade-rc
and then, get the src code and run
Code: 
cp -R /usr/src/share/keys/pkgbase-15 /usr/share/keys/pkgbase-15
I then edited my fingerprints line to read
Code: 
fingerprints = "/usr/share/keys/pkgbase-15"
Which you seem to have.

The stupid question, does your pkgbase-15 have the keys from /usr/src/share/keys/pkgbase-15?

I should mention that though this worked for me several days ago, I'm having trouble using a pkgbase update on a VM that I'm testing, although so far it's a different error. petan has good writeup on what worked for him, here.
petan

Solved Post in thread 'Upgrade from 14.3 to 15.0-RELEASE using pkgbase (wrong packagesite and No trusted public keys found)'

Erichans said:
See this for further clarification. For an upgrade path from a pkgbasified 14.3-RELEASE to pkgbasified 15.0-RELEASE (unsupported, not recommended), you may hack your way through, as mentioned above.
Click to expand...
Ok, I performed this upgrade tonight. At least for now it seems to work. The path I followed was:

# cat /usr/local/etc/pkg/repos/FreeBSD-base.conf
FreeBSD-base: {
url: "pkg+https://pkg.FreeBSD.org/${ABI}/base_release_0",
mirror_type: "srv",
signature_type: "fingerprints",
fingerprints: "/usr/share/keys/pkgbase-15",
enabled: yes
}

# pkg add -f...
  • Thanks
  • Like
Click to expand...
I checked to ensure that the keys are there and, as in the release notes, checked their sha256 checksums, so it all seems to be as expected unfortunately.

The write-up you mentioned is the one I've been following, along with the handbook and release notes, which it seems to agree with. My only difference is that I have no src on the system in question, so I installed the FreeBSD-pkg-bootstrap-15.0 package, as specified in the release notes. I later reinstalled the pkg binary from a backup when it all went a bit pear shaped, but the system seems to be back to it's old self again. This didn't affect pkg-static at any point though.
 
You must log in or register to reply here.
Back
Top