| |
@@ -14,7 +14,7 @@
|
| |
|
| |
append usr/share/anaconda/interactive-defaults.ks "%post --erroronfail"
|
| |
append usr/share/anaconda/interactive-defaults.ks "rm -f /etc/ostree/remotes.d/${ostree_osname}.conf"
|
| |
- append usr/share/anaconda/interactive-defaults.ks "ostree remote add --set=gpg-verify=false ${ostree_osname} '${ostree_update_repo}'"
|
| |
+ append usr/share/anaconda/interactive-defaults.ks "ostree remote add --set=gpg-verify=true --set=gpgkeypath=/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-27-primary ${ostree_osname} '${ostree_update_repo}'"
|
| |
append usr/share/anaconda/interactive-defaults.ks "cp /etc/skel/.bash* /root"
|
| |
append usr/share/anaconda/interactive-defaults.ks "%end"
|
| |
|
| |
dustymabe
commented 6 years ago
Taking the first step towards enabling gpg verification for our
users we'll make it so that the media they download will verify
gpg signatures of commits by default.
The next step is to enable gpg verification during install as well
but there is a race condition where the commit that was just created
might not yet be signed. See [1] for more details.
[1] https://pagure.io/pungi/issue/650