[OE-core] [PATCH 2/2] lib/oe/package_manager.py (rpm): Allow use of non-signed feeds

[Alexander Kanavin]

On 11/06/2017 07:04 AM, Neal Gompa wrote:

> This logic is kind of dumb, but basically, this is how this works:
> 
> gpgcheck - controls pkg_gpgcheck and repo_gpgcheck. With gpgcheck=1,
> DNF defaults to pkg_gpgcheck=1 and repo_gpgcheck=0, but if gpgcheck=0,
> repo_gpgcheck is forced off.
> pkg_gpgcheck (not currently working)
> repo_gpgcheck - enable repo_gpgcheck, this is default to 0 (thus, disabled)
> 
> At some point, this needs to be fixed in libdnf and dnf so that the
> options are saner...

Dnf documentation claims otherwise: gpgcheck is for package signing and 
repo_gpgcheck is for feed signing, one is not dependent on the other.

I looked at the code, and couldn't find any spot where one overrides or 
controls the other. Can you point it out please? Until then, I think the 
current code is correct.

Alex