From c994845677083a75d2200547ae61357670eb2b3d Mon Sep 17 00:00:00 2001 From: Holger Levsen Date: Fri, 11 Dec 2015 21:17:51 +0100 Subject: reproducible fedora rpms: temporarily disable gpg verification of packages --- TODO | 3 ++- hosts/profitbricks-build3-amd64/etc/mock/fedora-23-x86_64.cfg | 8 ++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/TODO b/TODO index 7e1638e4..45b1172d 100644 --- a/TODO +++ b/TODO @@ -289,7 +289,8 @@ This is about Debian, below are more todo entries for other projects… *** use '-j$NUM_CPU' and 'NEW_NUM_CPU=$(echo $NUM_CPU-1|bc)' *** modify TZ, LANG, LC_ALL, umask * other bits: -** use modified rpmbuild package +** use modified rpmbuild package from dhiru +** verify gpg signatures (via /etc/mock/) * hosts/pb-build3/etc/yum/repos.d/* is really not sooo good but works… * build rawhide too (once fedora-23 builds nicely) ** when adding rawhide make sure this is not needed: 'yumdownloader --enablerepo=fedora-23-src --source sudo' diff --git a/hosts/profitbricks-build3-amd64/etc/mock/fedora-23-x86_64.cfg b/hosts/profitbricks-build3-amd64/etc/mock/fedora-23-x86_64.cfg index 2933415f..aa78fa58 100644 --- a/hosts/profitbricks-build3-amd64/etc/mock/fedora-23-x86_64.cfg +++ b/hosts/profitbricks-build3-amd64/etc/mock/fedora-23-x86_64.cfg @@ -27,15 +27,15 @@ metadata_expire=0 name=fedora mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=fedora-$releasever&arch=$basearch failovermethod=priority -gpgkey=file:///etc/pki/mock/RPM-GPG-KEY-fedora-23-primary -gpgcheck=1 +#gpgkey=file:///etc/pki/mock/RPM-GPG-KEY-fedora-23-primary +#gpgcheck=1 [updates] name=updates mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=updates-released-f$releasever&arch=$basearch failovermethod=priority -gpgkey=file:///etc/pki/mock/RPM-GPG-KEY-fedora-23-primary -gpgcheck=1 +#gpgkey=file:///etc/pki/mock/RPM-GPG-KEY-fedora-23-primary +#gpgcheck=1 [updates-testing] name=updates-testing -- cgit v1.2.3-70-g09d2