[OE-core] [PULL][PATCH 0/2] Implement debian packages GPG signing

[Alexander Kanavin]

Yes, that is fine. Let me know if something is not clear in that test case.

Btw, the apt version we have is badly out of date (and has a significant security issue I think) so if you can update that, that’d be awesome.

Alex

> On 2 Apr 2019, at 9.36, Xavier Berger <xavier.berger at bio-logic.net> wrote:
> 
> Hi Alexender, 
> 
> I'm working on test case but I've a lot of things to understand (and setup to perform).
> I'm basically taking dnf as example and creating a test for apt. Please let me know if you think my strategy is not correct.
> 
> I'll let you know here when it will work.
> 
> Xavier
> 
> -----Original Message-----
> From: Alexander Kanavin <alex.kanavin at gmail.com> 
> Sent: lundi 1 avril 2019 16:50
> To: Xavier Berger <xavier.berger at bio-logic.net>
> Cc: OE-core <openembedded-core at lists.openembedded.org>
> Subject: Re: [OE-core] [PULL][PATCH 0/2] Implement debian packages GPG signing
> 
>> On Mon, 1 Apr 2019 at 15:57, Xavier Berger <xavier.berger at bio-logic.net> wrote:
>> Xavier Berger (2):
>>  gpg-sign: Add parameters to gpg signature function
>>  package_manager: sign DEB package feeds
>> 
>> meta/lib/oe/gpg_sign.py        |  6 +++++-
>> meta/lib/oe/package_manager.py | 19 ++++++++++++++++---
> 
> How do we make sure this does not regress? Can you add a test case similar to one for rpm feed signing?
> 
> Alex