[OE-core] [PATCH 2/2] lib/oe/package_manager.py (rpm): Allow use of non-signed feeds

Otavio Salvador otavio.salvador at ossystems.com.br
Sun Oct 1 22:01:56 UTC 2017


On Sun, Oct 1, 2017 at 4:39 AM, Alexander Kanavin
<alexander.kanavin at linux.intel.com> wrote:
> On 09/30/2017 09:06 PM, Otavio Salvador wrote:
>>
>> When we wish to use the package feed for local development, it does
>> not uses GPG signed feeds by default but dnf does. We need to
>> configure the GPG signature check out so it works out of box.
>>>
>>> @@ -551,7 +551,7 @@ class RpmPM(PackageManager):
>>
>>           if self.d.getVar('PACKAGE_FEED_SIGN') == '1':
>>               gpg_opts +=
>> 'gpgkey=file://%s/pki/packagefeed-gpg/PACKAGEFEED-GPG-KEY-%s-%s\n' %
>> (self.d.getVar('sysconfdir'), self.d.getVar('DISTRO'),
>> self.d.getVar('DISTRO_CODENAME'))
>>           else:
>> -            gpg_opts = ''
>> +            gpg_opts = 'gpgcheck=0\n'
>>
>
>
> Again, 'gpcheck' option has nothing to do with verifying signed package
> feeds. NAK.

Oh really? so tell me why it fixed my error?

Without this patch I need to use:

dnf install --nogpgcheck <pkg>

and it is sub-optimal as I did not enabled signed support.

-- 
Otavio Salvador                             O.S. Systems
http://www.ossystems.com.br        http://code.ossystems.com.br
Mobile: +55 (53) 9981-7854            Mobile: +1 (347) 903-9750



More information about the Openembedded-core mailing list