Reposync on CentOS7 Header V4 RSA/SHA1 Signature

[dawne]

Hello.
I just upgraded my Repo server from CentOS 6 to CentOS 7. I'm now seeing some warning messages while downloading only certain files.
Just FYI, I have to use reposync to the mirror sites since my work network does not allow me to use rsync to the internet.

From my CentOS 7 repo server, my command is
reposync -c /root/reposync.repos.d/centos7-repos.d/reposync7.yum.conf -r paas-openshift-origin-7 --norepopath -p /var/repo/centos/7.5/paas/x86_64/openshift-origin

The results says:
warning: /var/repo/centos/7.5/paas/x86_64/openshift-origin/common/openshift-ansible-docs-3.10.68-1.git.0.f908cf5.el7.noarch.rpm: Header V4 RSA/SHA1 Signature, key ID 2f297ecc: NOKEY ] 0.0 B/s | 0 B --:--:-- ETA
Public key for openshift-ansible-docs-3.10.68-1.git.0.f908cf5.el7.noarch.rpm is not installed

My .repo file is as follow:
##-- CENTOS 7 PAAS
#centos 7.paas x86_64 PAAS Origin
[paas-openshift-origin-7]
name=CentOS-7.paas-openshift-origin-x86_64 - PAAS OPENSHIFT ORIGIN (7)
baseurl=http://mirror.centos.org/centos/7/paas/ ... ft-origin/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7


From my CentOS 6 repo server, with the exact same command as above, I get no errors or warnings at all.

Am I missing something that I need to do on my new CentOS 7 repo server? I did import the GPG keys as well.

Thanks in advanced.

[avij]

You seem to be missing the CentOS PaaS SIG key, RPM-GPG-KEY-CentOS-SIG-PaaS

It's included in centos-release-paas-common-1-1.el7.centos.noarch.rpm (in extras), and can be extracted with rpm2cpio centos-release-paas-common-1-1.el7.centos.noarch.rpm | cpio -idm and then imported with rpm --import etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-PaaS

[dawne]

Thank you avij! It worked like you mentioned.