[OE-core] [PATCH 1/2] lib/oe/package_manager.py (rpm): Signature check is enabled by default

Alexander Kanavin alexander.kanavin at linux.intel.com
Sun Oct 1 07:36:05 UTC 2017


On 09/30/2017 09:06 PM, Otavio Salvador wrote:
> The dnf has GPG signature check enabled by default. It has been confimed using:
> 
> ,----
> | root at qemux86-64:~# grep gpgcheck /etc/dnf/dnf.conf
> | gpgcheck=1
...
>           if self.d.getVar('PACKAGE_FEED_SIGN') == '1':
> -            gpg_opts = 'repo_gpgcheck=1\n'
>               gpg_opts += 'gpgkey=file://%s/pki/packagefeed-gpg/PACKAGEFEED-GPG-KEY-%s-%s\n' % (self.d.getVar('sysconfdir'), self.d.getVar('DISTRO'), self.d.getVar('DISTRO_CODENAME'))


NAK both patches, I'm afraid. gpgcheck and repo_gpgcheck are two 
different options, which control different things, and you thoroughly 
confused them here.

Alex



More information about the Openembedded-core mailing list