Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RFE: set up signing (semi-)automatically #3522

Open
pmatilai opened this issue Jan 15, 2025 · 0 comments
Open

RFE: set up signing (semi-)automatically #3522

pmatilai opened this issue Jan 15, 2025 · 0 comments
Labels
crypto Signatures, keys, hashes and their verification RFE
Milestone

Comments

@pmatilai
Copy link
Member

pmatilai commented Jan 15, 2025

We want all packages coming out of rpmbuild to be signed in 6.0 (#1256, #1573) but we don't really want to make getting cozy with OpenPGP a pre-requisite of building rpms, rpm itself is plenty enough of learning curve for a first-timer. We should have a no-brainer procedure to set up an rpmbuild-specific signing key and configure rpmbuild to use it.

For this, we need to determine whether signing is configured at the start of an rpmbuild and either stop the build with a single command instruction to configure signing, or just automatically set it up on first run. So I guess the first step is to create a script that does the setup, with an option to use either users existing key setup or fully rpm-specific keys. At least pre-existing keys will need another option for gpg/sq.

At least for a fully automated rpmbuild specific key, it's best buried inside ~/.config/rpm and for that makes this at least partially depend on #3467.

@pmatilai pmatilai added RFE crypto Signatures, keys, hashes and their verification labels Jan 15, 2025
@pmatilai pmatilai added this to RPM Jan 15, 2025
@github-project-automation github-project-automation bot moved this to Backlog in RPM Jan 15, 2025
@pmatilai pmatilai added this to the 6.0.0 alpha milestone Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
crypto Signatures, keys, hashes and their verification RFE
Projects
Status: Backlog
Development

No branches or pull requests

1 participant