Story #3055: As a user, I can publish a Yum repository that works with repo_gpgcheck=1 - RPM Support - Pulp

Actions

Send by e-mail Copy link

Story #3055

closed

As a user, I can publish a Yum repository that works with repo_gpgcheck=1

Added by PaulSD about 7 years ago. Updated over 4 years ago.

Status:

CLOSED - CURRENTRELEASE

Priority:

Normal

Assignee:

PaulSD

Sprint/Milestone:

Start date:

Due date:

% Done:

100%

Estimated time:

Platform Release:

2.15.0

Groomed:

Sprint Candidate:

Tags:

Pulp 2

Sprint:

Quarter:

Description

To allow a Yum repository to be used with Yum clients that have repo_gpgcheck=1 configured in /etc/yum.conf:

Create a new GPG signing key that can be used by Pulp worker processes without a password. (Documentation provides example procedures.)
Append the public key associated with the new GPG signing key to the gpgkey file specified in the distributor config for the Yum repository in Pulp.
Set gpg_sign_metadata to True in the distributor config for the Yum repository in Pulp.

See also https://access.redhat.com/solutions/2850911

Actions

Copy link

Updated by PaulSD about 7 years ago

https://github.com/pulp/pulp_rpm/pull/1065

Actions

Copy link

Updated by dkliban@redhat.com about 7 years ago

Tracker changed from Issue to Story
% Done set to 0

Actions

Copy link

Updated by PaulSD about 7 years ago

Subject changed from Pulp does not generate repomd.xml.asc files needed by yum repo_gpgcheck to As a user, I can publish a Yum repository that works with repo_gpgcheck=1

Actions

Copy link

Updated by PaulSD about 7 years ago

Description updated (diff)

Actions

Copy link

Updated by bmbouter about 7 years ago

Status changed from NEW to POST
Assignee set to PaulSD

So this feature defaults to off because it's only enabled if the user specifies gpg_sign_metadata=True right?

As an FYI, we do have an integration test suite called pulp-smash which is run by ichimonji10 in #pulp-dev in case you are interested in writing any tests to use and verify this feature. Whatever you want to do is fine of course. Thanks for contributing this great feature.

Added by Paul Donohue about 7 years ago

Revision f73805f6 | View on GitHub

Add support for generation of repomd.xml.asc files

fixes #3055 https://pulp.plan.io/issues/3055

Actions

Copy link

Updated by PaulSD about 7 years ago

Correct, it defaults to off. I implemented it this way because this feature will not work unless the user first manually prepares and distributes a GPG signing key.

Actions

Copy link