Closed
Bug 746341
Opened 13 years ago
Closed 13 years ago
use gpgcheck=1 for yum mirrors
Categories
(Infrastructure & Operations :: RelOps: General, task)
Infrastructure & Operations
RelOps: General
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: dustin, Assigned: dustin)
Details
Attachments
(1 file)
:kang asked that this be enabled
This requires setting the flag in the repo definitions, and also installing the various GPG keys.
|
Assignee | |
Comment 1•13 years ago
|
||
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-6 in the repo config will get the GPG keys, so it just remains to make sure the keys are on the local repo servers, and add these lines.
|
||
Updated•13 years ago
|
Assignee: server-ops-releng → dustin
|
|
Assignee | |
Comment 2•13 years ago
|
||
Attachment #616418 -
Flags: review?(jhford)
Attachment #616418 -
Flags: feedback?(gdestuynder)
|
|
Assignee | |
Comment 3•13 years ago
|
||
Oh, I should mention, I tested this with a fresh kickstart, so it at least mostly works. I'll shake out any bugs in base-image-centos6.sh.erb when I re-create the ganeti image.
|
|
||
Comment 4•13 years ago
|
||
Comment on attachment 616418 [details] [diff] [review]
gpg.patch
Review of attachment 616418 [details] [diff] [review]:
-----------------------------------------------------------------
looks good to me. At some point, we should start gpg signing our internal rpms and repositories as well.
Attachment #616418 -
Flags: review?(jhford) → review+
Attachment #616418 -
Flags: review+
Comment on attachment 616418 [details] [diff] [review]
gpg.patch
ops, used to click review instead of feedback.
Anyhow, looks fine.
Attachment #616418 -
Flags: feedback?(gdestuynder) → feedback+
|
|
Assignee | |
Comment 6•13 years ago
|
||
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
|
||
Updated•12 years ago
|
Component: Server Operations: RelEng → RelOps
Product: mozilla.org → Infrastructure & Operations
You need to log in
before you can comment on or make changes to this bug.
Description
•