Signing metadata requires a lot of manual interaction and knowledge of the customer. This was the reason why we never implemented it for SUMA as the benefit was very low.

Now with the change in the zypp stack to not allow installing unsigned RPMs without user interaction or completly disabling GPG checks the benefit of such a feature increased.

I plan to implement this without any GUI support.

  • the customer need to create an own GPG key pair
  • the customer need to enable this feature in the config and configure the keyid and the password
  • during metadata generation the taskomatic task check, if metadata signing is configured and only then sign them
  • if metadata signing is configured, we need to change the GPG check options of the repos.

Looking for hackers with the skills:

susemanager uyuni

This project is part of:

Hack Week 17

Activity

  • almost 4 years ago: dmaiocchi liked this project.
  • almost 4 years ago: mcalmer added keyword "susemanager" to this project.
  • almost 4 years ago: mcalmer added keyword "uyuni" to this project.
  • almost 4 years ago: mcalmer started this project.
  • almost 4 years ago: mcalmer originated this project.

  • Comments

    Be the first to comment!

    Similar Projects

    salt formula for uyuni proxy setup by mbussolotto

    Project Description

    Goal is to write a sa...


    Write a formula with forms for setting up a container registry by mcalmer

    [comment]: # (Please use the project descriptio...


    Testing and adding GNU/Linux distributions on Uyuni by juliogonzalezgil

    Join the Gitter channel! [https://gitter.im/uy...


    Saline: Salt state appliement monitoring by vzhestkov

    Project Description

    In case of applying s...


    Uyuni/SUSE Manager Server Helm chart on k3s by moio

    ![Combined icons of k3s and Uyuni](https://user...