Listing 6.x source rpm(s) from 5.x shell

[sturdyworks]

I was going to actually use the src.rpm on my 5.x VM not just look at it :-) It is annoying to have to go through the steps of searching for an src.rpm, right click on copy link location, and then wget with the link.

It doesn't even look like the 6.2 src.rpm work on 5.x either. What a waste. The open source community goes though all the work to create rmpbuild and such and RHEL produces src.rpm that can't even produce a library on previous release of their own system, let allone BSD or and such. I have read all the docs and thing the Owl River reference is good "The RPM Package Manager is one of several approaches to adding better tools to manage the use of the code tarballs may produce, for more systematic (and thus, accurate) system administration. It allows managing and solving at a high level, complex package interdependencies (shared libraries and such), to permit validation that a system has not been tampered with, and to make possible complex provisioning, and life-cycle build qualification, security, 'Change Control', and maintenance."

Except between 5x & 6x (har har)

I have always used ./configure make. I a developer. I am trying to use RPMs to get the latest version of software and the whole system just seems to be c**p.

Why shouldn't this work?

mockbuild$ cd ~/build/libotf
mockbuild$ wget ... libotf-0.9.9-3.1.el6.src.rpm
mockbuild$ rpmbuild --rebuild libotf-0.9.9-3.1.el6.src.rpm
error: unpacking of archive failed on file /home/build/rpmbuild/SOURCES/libotf-0.9.9.tar.gz;4f1b4778: cpio: MD5 sum mismatch
error: libotf-0.9.9-3.1.el6.src.rpm cannot be installed

What some super secret version of md5sum is being used? Stupid!

[pschaff]

RPM was written by Red Hat and given to the open source community, so the abuse you imply is misplaced, and any stupidity seems to relate to an unrealistic opposition to progress across major releases, and an apparent misunderstanding of the nature of Enterprise Linux. Perhaps you should read [url=http://wiki.centos.org/FAQ/General#head-472ce8446ebcfc82ca1800f775ba0e629ac835c7]FAQ#20. Where can I get the latest version of XyZ.rpm for CentOS? I cannot find it anywhere.[/url]

If you manage to add EL6 packages to an EL5-based distro you are likely to create an unstable chimera or Frankenstein's monster.
[quote]
sturdyworks wrote:
... What a waste.... Stupid![/quote]
Sums up this thread nicely. :-) I'm outta' here. Off to cook a nice dinner.

[sturdyworks]

An "unrealistic opposition to progress"? I mean really! I just want to get a directory listing from http://vault.centos.org/6.2/os/Source/SPackages/ using yum, and download a file using yumdownloader. The click, click, click, search, click, click, right click, copy, click paste click, click is tiersome.

I must admit I was messing with you a bit and I appologise. It is possible, and for heavons sake it should be possible, to build a library on 5.x from a src.prm (SRPM) from 6.x as such:

yum-builddep libotf-0.9.9-3.1.el6.src.rpm
do this: rpm --nomd5 -i libotf-0.9.9-3.1.el6.src.rpm; cd ~/rpmbuild/SPECS; rpmbuild -ba libotf.spec
not this: rpm --rebuild libotf-0.9.9-3.1.el6.src.rpm

I am well on my way to building my newest RPM based monster development environment. Even Enterprises like the faster performance and better security available from libraries that have progressed.

Next I will try installing new yum from 6.x and all the plugins (imagine all the clicking) to get a list from http://vault.centos.org/6.2/os/Source/SPackages/.

The dream remains `yumdownloader --disablerepo \* --enablerepo os6-source yum*`

[pschaff]

Seems that [b]sturdyworks[/b] filed [url=http://bugs.centos.org/view.php?id=5458]bug #5458[/url] on the rpm incompatibility issue, and developers are awaiting feedback.

[sturdyworks]

I was reading though the official CentOS 5.x docs on SRPM files:
http://wiki.centos.org/HowTos/RebuildSRPM

And I read this, "The chance of success in rebuilding a SRPM package depends (mostly) on how close the distribution is to CentOS. The chance of rebuilding SRPMs for [from] a higher version of Red Hat or CentOS is fairly good, the chance of rebuilding SRPMs from Fedora Core 6 or Fedora 7 is still quite good"

So, it is good to know I'm about as close as it gets (CentOS 5.x -> CentOS 6.x). It's not like I am trying to build a Fedora 15 SRPM :-)

The doc also says, "Only content signed with the relevant CentOS GPG key are a product of the CentOS project."

I am wondering if there are Offical docs on how we should go about doing this. Does CentOS publish its public Official Signing Key? I think a lot of people use a 'RPM Find' type web pages, but I never hear about determining if the SRPM (or RPM) is from a reputable source. I would certainly not trust that a SRPM is doing the right thing unless I downloaded it from the next CentOS or RHEL version (again for me CentOS 5.x -> CentOS 6.x).

ANYWAY...

I did submit a few bug reports about the key signing issues between 5.x and 6.x.

A CentOS developer is looking into making the fix, and would like to get feedback from CentO 4.x, 5.x, 6.x users about if the new key is accessable to them.

Try this command:
$ rpm --nofiles -Vp http://people.centos.org/hughesjr/new-c6-sigs/c6-new/xorg-x11-server-1.10.4-6.el6_2.1.src.rpm

And please let him know if it worked or gives an error in this but report:

http://bugs.centos.org/view.php?id=5458

the new key with which he is going to sign the SRPM packages he works on.

I am still not sure if the new key he has created will become the 'Official CentOS 6.x Signing Key' but, hey, at least the SRPM files he will be signing working for me, AND working with the SRPM files is getting easier.

[sturdyworks]

I was reading a section in this CentOS doc
http://wiki.centos.org/TipsAndTricks/YumAndRPM#head-0b576ad62c41cbd3283b1d05e8b1f9354cd84175

And I just learned about rpmdevtools for CentOS 5.x

So, I checked it out a bit

$ yum --disablerepo \* --enablerepo epel list rpmdevtools
Available Packages
rpmdevtools.noarch 6.8-1.el5 epel
$ yumdownloader --disablerepo \* --enablerepo epel --urls rpmdevtools
Loaded plugins: fastestmirror
http://mirrors.cat.pdx.edu/epel/5/i386//rpmdevtools-6.8-1.el5.noarch.rpm
$ rpm --nofiles -Vp http://mirrors.cat.pdx.edu/epel/5/i386//rpmdevtools-6.8-1.el5.noarch.rpm
Unsatisfied dependencies for rpmdevtools-6.8-1.el5.noarch: config(rpmdevtools) = 6.8-1.el5, fakeroot

The reference to 'fakeroot' just above got me thinking that rpmdevtools might help to solve the problems related to accessing source repositories. For example, this bug report show problem with /root

$ yumdownloader --source --disablerepo \* --enablerepo updates-source kernel
Loaded plugins: fastestmirror, priorities, refresh-packagekit
Loading mirror speeds from cached hostfile
Loading mirror speeds from cached hostfile
Could not download/verify pkg kernel-2.6.32-220.2.1.el6.src: failed to retrieve SPackages/kernel-2.6.32-220.2.1.el6.src.rpm from updates-source
error was [Errno 2] Local file does not exist: /root/nique-md-filenames/SPackages/kernel-2.6.32-220.2.1.el6.src.rpm

Just a thought, I have not had time to look into it--maybe some one else does :-)