GPG/RPM Problems with VMware Tools OSP for RHEL 5.3

[cmoorehsu]

I have a new, fully updated RHEL 5.3 x64 VM that will not accept the RPM packages from the VMware yum repository. I've followed the instructions from the OSPs Install Guide, but something's not liking either the RPM packages or the GPG key.

After following the instructions in the Download OSPs for the RHEL 5 Guest OS section of the Installation Guide, you can see that the GPG key is installed (package "gpg-pubkey-a6406560-4803fe57"):

[root@host ~]# rpm -q gpg-pubkey
gpg-pubkey-37017186-45761324
gpg-pubkey-a6406560-4803fe57

My attempt to install the main package I want:

[root@host ~]# yum install vmware-tools-nox
Loaded plugins: rhnplugin, security
Setting up Install Process
Parsing package install arguments
Resolving Dependencies
--> Running transaction check
---> Package vmware-tools-nox.x86_64 0:7.4.6-123630.134790.el5 set to be updated
--> Processing Dependency: vmware-tools-common = 7.4.6 for package: vmware-tools-nox
--> Processing Dependency: open-vm-tools-nox = 7.4.6 for package: vmware-tools-nox
--> Running transaction check
---> Package vmware-tools-common.x86_64 0:7.4.6-123630.134790.el5 set to be updated
--> Processing Dependency: open-vm-tools-common = 7.4.6 for package: vmware-tools-common
--> Processing Dependency: vmware-tools-kmod-7.4.6 for package: vmware-tools-common
---> Package open-vm-tools-nox.x86_64 0:7.4.6-123630.134790.el5 set to be updated
--> Running transaction check
---> Package open-vm-tools-common.x86_64 0:7.4.6-123630.134790.el5 set to be updated
--> Processing Dependency: open-vm-tools-kmod-7.4.6 for package: open-vm-tools-common
---> Package vmware-tools-kmod.x86_64 0:7.4.6-123630.134790.el5 set to be updated
--> Running transaction check
---> Package open-vm-tools-kmod.x86_64 0:7.4.6-123630.134790.el5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

====================================================================================================================
 Package                         Arch              Version                            Repository               Size
====================================================================================================================
Installing:
 vmware-tools-nox                x86_64            7.4.6-123630.134790.el5            vmware-tools            2.5 k
Installing for dependencies:
 open-vm-tools-common            x86_64            7.4.6-123630.134790.el5            vmware-tools            481 k
 open-vm-tools-kmod              x86_64            7.4.6-123630.134790.el5            vmware-tools            171 k
 open-vm-tools-nox               x86_64            7.4.6-123630.134790.el5            vmware-tools            2.5 k
 vmware-tools-common             x86_64            7.4.6-123630.134790.el5            vmware-tools            165 k
 vmware-tools-kmod               x86_64            7.4.6-123630.134790.el5            vmware-tools             24 k

Transaction Summary
====================================================================================================================
Install      6 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total size: 845 k
Is this ok [y/N]: y
Downloading Packages:
warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 signature: NOKEY, key ID 66fd4949
Importing GPG key 0x66FD4949 "VMware, Inc. -- Linux Packaging Key -- <linux-packages@vmware.com>" from /etc/pki/rpm-gpg/VMWARE-PACKAGING-GPG-KEY.pub
Is this ok [y/N]: y


Public key for open-vm-tools-nox-7.4.6-123630.134790.el5.x86_64.rpm is not installed

Notice that the GPG key is listed twice now:

[root@host ~]# rpm -q gpg-pubkey
gpg-pubkey-37017186-45761324
gpg-pubkey-a6406560-4803fe57
gpg-pubkey-a6406560-4803fe57

If I keep attempting the install, RPM keeps importing the package over and over again -- adding more gpg-pubkey packages. Here's my /etc/yum.repos.d/vmware-tools.repo file:

name=VMware Tools for Red Hat Enterprise Linux $releasever - $basearch
baseurl=http://packages.vmware.com/tools/esx/3.5u3/rhel5/x86_64
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/VMWARE-PACKAGING-GPG-KEY.pub

Contents of /etc/pki/rpm-gpg/VMWARE-PACKAGING-GPG-KEY.pub:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.7 (GNU/Linux)
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=bXtp
-----END PGP PUBLIC KEY BLOCK-----

The RPM data for the GPG key:

[root@host ~]# rpm -qi gpg-pubkey-a6406560-4803fe57
Name        : gpg-pubkey                   Relocations: (not relocatable)
Version     : a6406560                          Vendor: (none)
Release     : 4803fe57                      Build Date: Sat 07 Mar 2009 04:05:59 AM CST
Install Date: Sat 07 Mar 2009 04:05:59 AM CST      Build Host: localhost
Group       : Public Keys                   Source RPM: (none)
Size        : 0                                License: pubkey
Signature   : (none)
Summary     : gpg(VMware, Inc. -- Linux Packaging Key -- <linux-packages@vmware.com>)
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.4.2.3 (NSS-3)
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=bXtp-----END PGP PUBLIC KEY BLOCK-----

And finally, what GPG thinks about the RPM data:

[root@host ~]# rpm -qi gpg-pubkey-a6406560-4803fe57 | gpg
pub  1024R/66FD4949 2008-04-15 VMware, Inc. -- Linux Packaging Key -- <linux-packages@vmware.com>

What am I missing here? Can anyone duplicate this issue or point me to a resolution? Thanks

[Roanry]

This might sound stupid but I have to ask, to you have the compiler installed?

1. yum install gcc gcc-c++ autoconf automake

We had this strange issue on our RHEL 5 VM's where tools would say it was installed but yet in VC it wasn't showing that it was. Found out we had to reinstall the compiler package on our main template.

Not sure if this is it but worth a try.

[cmoorehsu]

@Roanry:

Thanks for the suggestion, but it didn't help solve my problem. I'm still seeing the exact same behavior. Rolling back to my snapshot.

[Texiwill]

Hello,

SOunds like the key is messed up. I would post something on the open source page about this.

Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
Blue Gears and SearchVMware Pro Blogs -- Top Virtualization Security Links -- Virtualization Security Round Table Podcast

[cmoorehsu]

@Texiwill:

Where is this "open source page" you speak of? Is it a community on this site? Or do you mean open-vm-tools.sourceforge.net? Or something else?

[Texiwill]

Hello,

That is the link.... Since you are using 'open-vm-tools' it looks like their GPG keys do not match their packages.

Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009
====
Author of the book 'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
Blue Gears and SearchVMware Pro Blogs -- Top Virtualization Security Links -- Virtualization Security Round Table Podcast

[markreynolds]

Yes, I am getting same outcomes.

Did you find a solution?

Am not sure where to try next.

thanks

mark

[cmoorehsu]

Mark,

I did not find a solution to this problem, but I had to destroy the VM and go a different direction for other reasons (I was going to use the VM as a Service Desk Plus host, but the Linux version of SDP doesn't support Active Directory integration). Please post to this thread if you get this resolved. I'd still like to know when it's fixed. Thanks

[dofford]

https://bugzilla.redhat.com/show_bug.cgi?id=493777

looks like you will have to disable gpgcheck for the time being.

[Texiwill]

Hello,

Moved to the VMware Tools OS-SPecific Packaging forum.

Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009, DABCC Analyst
====
Author of the books 'VMware vSphere(TM) and Virtual Infrastructure Security: Securing ESX and the Virtual Environment' available for pre-order now
'VMWare ESX Server in the Enterprise: Planning and Securing Virtualization Servers', Copyright 2008 Pearson Education.
SearchVMware Pro|Blue Gears|Top Virtualization Security Links|Virtualization Security Round Table Podcast