Opened 13 years ago

Closed 9 years ago

#18 closed enhancement (fixed)

add signature support

Reported by: Bruno Cornec Owned by: Bruno Cornec
Priority: major Milestone: 0.11.3
Component: pb Version: 0.8.11
Keywords: Cc:

Description

pb should support package signing at the end of the build process, before the delivery.

Change History (13)

comment:1 Changed 13 years ago by Bruno Cornec

Milestone: 0.9.00.9.1

comment:2 Changed 12 years ago by Bruno Cornec

Milestone: 0.9.10.9.3
Owner: set to Bruno Cornec
Status: newassigned

comment:3 Changed 12 years ago by Bruno Cornec

We need to change that macro to use the gpg-agent

rpm --showrc | grep gpg
-14: __gpg_sign_cmd     %{__gpg}
        gpg --batch --no-verbose --no-armor --passphrase-fd 3 --no-secmem-warning
        -u "%{_gpg_name}" -sbo %{__signature_filename} %{__plaintext_filename}

then sign the package when it comes back from the VM/VE and before sending it to the ftp server

comment:4 Changed 12 years ago by Bruno Cornec

Milestone: 0.9.30.9.4

comment:5 Changed 12 years ago by Bruno Cornec

Milestone: 0.9.40.9.5

comment:6 Changed 12 years ago by Bruno Cornec

Changing the gpg_sign_cmd command isn't sufficient as the rpm --addsign command is asking for a password anyway. Will have to look at rpm sources to see how to sign a package using gpg directly

comment:7 Changed 12 years ago by Bruno Cornec

Milestone: 0.9.50.9.6

comment:8 Changed 12 years ago by Bruno Cornec

Milestone: 0.9.60.9.7

comment:9 Changed 11 years ago by Bruno Cornec

Milestone: 0.9.70.9.8

comment:10 Changed 10 years ago by Bruno Cornec

Milestone: 0.9.90.9.10

comment:11 Changed 10 years ago by Bruno Cornec

Milestone: 0.9.100.9.11

comment:12 Changed 10 years ago by Bruno Cornec

Milestone: 0.10.10.10.2

comment:13 Changed 9 years ago by Bruno Cornec

Resolution: fixed
Status: assignedclosed

Supported for both RPM and DEB as of rev [1279]

Note: See TracTickets for help on using tickets.