Sublime Forum

DNF install fails

#1

I’m seeing the following error when I attempt to run sudo dnf upgrade, which has worked in the past:

Error: Transaction test error:
package sublime-text-4152-1.x86_64 does not verify: no digest

Below are the contents of my /etc/yum.repos.d/sublime-text.repo file:

cat /etc/yum.repos.d/sublime-text.repo
[sublime-text]
name=Sublime Text - x86_64 - Stable
baseurl=https://download.sublimetext.com/rpm/stable/x86_64
enabled=1
gpgcheck=1
gpgkey=https://download.sublimetext.com/sublimehq-rpm-pub.gpg

I’m running RHEL 8 with FIPS mode enabled.

0 Likes

#2

Installation works fine on my end using dnf on Fedora 38. Are you sure you installed the GPG key as per the instructions?

0 Likes

#3

I believe there is a difference between Fedora and RHEL where Fedora has patched around the problem (which is to do with package signing using insecure algorithms as far as I can tell) and RHEL has not yet received the patch or simply won’t institute it due to the perceived insecurely signed third party package.

I did attempt to re-add the key, but to no avail.

The best solution would be to provide a signed package using secure algorithms. Alternatively, if we could get an official Flatpak or even AppImage release then we could sidestep this issue, but I understand that’s simply more work that I’m asking for and I realize that it’s not easy or cheap to do.

I’m grateful for any suggestions on how to move forward with Sublime Text on RHEL 8. I’d also be grateful to know if I’ve missed the mark completely here and am wrong about the actual X problem itself. My Y problem is that I can’t install Sublime Text in a manner which is supported that will receive timely updates on a machine that I do not own (it’s my employer’s) and am only partially responsible for administering.

0 Likes

#4

I was able to install to /opt by hand after downloading a pkg.tar.xz file, extracting it’s contents, and placing them in the appropriate directories. I then had to update permissions on the files and refresh my gtk icon cache for everything to look correct. This probably is not a long term solution but it does bring my installation up to date for now.

0 Likes