On Fri, Oct 24, 2025 at 03:42:28PM +0300, Panu Matilainen wrote:
> On 10/24/25 12:35 PM, Vít Ondruch wrote:
> >
> >Dne 24. 10. 25 v 11:15 Panu Matilainen napsal(a):
> >>On 10/24/25 11:56 AM, Vít Ondruch wrote:
> >>>
> >>>Dne 23. 10. 25 v 19:19 Allison King via devel-announce napsal(a):
> >>>>
> >>>>Mock has a plugin for signing locally built packages, and
> >>>>COPR has it's own automatic signing.
> >>>
> >>>
> >>>Is this enabled by default?
> >>
> >>For COPR, yes.
> >>
> >>For mock, I don't see how it could be because it cannot know how
> >>you'd like to sign your packages.
> >
> >
> >Honestly, neither I know. I was fine doing my packages without
> >signature. But this change appears to force me (either to use some
> >additional options or) to have signature. So this change seems
> >incomplete to me without mock singing the packages out of the box
> >or with little documented setup.
> 
> Of course, we can add a bit about configuring mock to do signing eg
> using a key set up with rpm-setup-autosign. That's a fair point.

Couldn't we create a "host signing key" when RPM is installed, and
have that sign any locally rpmbuild-/mock- built RPMs?

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
Fedora Windows cross-compiler. Compile Windows programs, test, and
build Windows installers. Over 100 libraries supported.
http://fedoraproject.org/wiki/MinGW

-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to