[OE-core] [PATCH 2/2] lib/oe/package_manager.py (rpm): Allow use of non-signed feeds

Alexander Kanavin alexander.kanavin at linux.intel.com
Sun Oct 1 07:39:18 UTC 2017


On 09/30/2017 09:06 PM, Otavio Salvador wrote:
> When we wish to use the package feed for local development, it does
> not uses GPG signed feeds by default but dnf does. We need to
> configure the GPG signature check out so it works out of box.
>> @@ -551,7 +551,7 @@ class RpmPM(PackageManager):
>           if self.d.getVar('PACKAGE_FEED_SIGN') == '1':
>               gpg_opts += 'gpgkey=file://%s/pki/packagefeed-gpg/PACKAGEFEED-GPG-KEY-%s-%s\n' % (self.d.getVar('sysconfdir'), self.d.getVar('DISTRO'), self.d.getVar('DISTRO_CODENAME'))
>           else:
> -            gpg_opts = ''
> +            gpg_opts = 'gpgcheck=0\n'
>   

Again, 'gpcheck' option has nothing to do with verifying signed package 
feeds. NAK.


Alex



More information about the Openembedded-core mailing list