#6460 Disable GPG check in repository config between branch and Bodhi enablement
Closed: Invalid None Opened 7 years ago by adamwill.

Every cycle, we have a problem in the time between the branch point and the Bodhi enablement point.

During that period, not all packages are signed. However, the 'fedora' repository configuration has gpgcheck=1 . So you either have to manually modify the repository configuration or pass --nogpgcheck (or equivalent for whatever package install method you're using) every time you try to install a package.

This is especially annoying for automated tests, because to deal with it you need a messy logic branch in all your tests, and you also need to somehow detect when the test is running between branch point and Bodhi enablement point, which isn't especially easy to do.

We've been saying this will be fixed properly (by making sure all the packages are signed) forever, but it never seems to happen; until that happens, it would be good if fedora-repos could be built with gpgcheck=0 for the fedora repo at branch point, then with gpgcheck=1 for the fedora repo at Bodhi enablement point.


Probably worth just doing a pull request against the branching SOP documentation.

https://docs.pagure.org/releng/sop_mass_branching.html

But we now have someone actually actively working to improve sigul and add much better autosigning functionality amoungst other new functionality

closing as will not fix. with automated signing going in now we should not have this issue any longer

Login to comment on this ticket.

Metadata