[OE-core] [PATCH 1/2] lib/oe/package_manager.py (rpm): Signature check is enabled by default

Otavio Salvador otavio.salvador at ossystems.com.br
Sun Oct 1 22:00:37 UTC 2017


On Sun, Oct 1, 2017 at 4:36 AM, Alexander Kanavin
<alexander.kanavin at linux.intel.com> wrote:
> On 09/30/2017 09:06 PM, Otavio Salvador wrote:
>>
>> The dnf has GPG signature check enabled by default. It has been confimed
>> using:
>>
>> ,----
>> | root at qemux86-64:~# grep gpgcheck /etc/dnf/dnf.conf
>> | gpgcheck=1
>
> ...
>>
>>           if self.d.getVar('PACKAGE_FEED_SIGN') == '1':
>> -            gpg_opts = 'repo_gpgcheck=1\n'
>>               gpg_opts +=
>> 'gpgkey=file://%s/pki/packagefeed-gpg/PACKAGEFEED-GPG-KEY-%s-%s\n' %
>> (self.d.getVar('sysconfdir'), self.d.getVar('DISTRO'),
>> self.d.getVar('DISTRO_CODENAME'))
>
>
>
> NAK both patches, I'm afraid. gpgcheck and repo_gpgcheck are two different
> options, which control different things, and you thoroughly confused them
> here.

I did test both patches and this is not what I figured. Did you test it?


-- 
Otavio Salvador                             O.S. Systems
http://www.ossystems.com.br        http://code.ossystems.com.br
Mobile: +55 (53) 9981-7854            Mobile: +1 (347) 903-9750



More information about the Openembedded-core mailing list