Comments (5)
Right now ostree has ostree_repo_sign_commit
, but no commandline for it.
from rpm-ostree.
Would a CLI for ostree_repo_sign_delta()
be useful as well?
Had an idea for ostree gpg-sign [--delete] COMMIT|DELTA
from rpm-ostree.
Yeah, though I am considering moving towards signing the summary file instead of commits and deltas, but we can get to that as a next step.
One thing that would be nice is to skip adding a signature if the commit is already signed with the given key (this would involve parsing the signatures, which would likely involve a much more sophisticated gpg helper - or does e.g. evolution have something like that?) That'd also be necessary for --delete presumably, so it can show an error if the commit isn't signed with the given key, etc.
from rpm-ostree.
OSTree is already ahead of Evolution (libcamel, actually) by the fact that you're using GPGME instead of GPG over pipes. There was demand for more sophisticated signature parsing in libcamel but I insisted on moving to GPGME as a prerequisite and then never got to it.
from rpm-ostree.
This is obsolete, we don't do signing here anymore.
from rpm-ostree.
Related Issues (20)
- container: "rpm-ostree update" finds an update but "rpm-ostree update --check" does not HOT 2
- `opt-usrlocal` treefile option is too specific HOT 2
- Add packit test to build c9s or AutoSD image HOT 3
- Fails to install cuda with error: opendir(local): No such file or directory HOT 1
- Can't install local packages because of broken repo HOT 2
- allow `json` format for `rpm-ostree db diff --changelogs` HOT 3
- Rpm-ostree override replace on android aboot doesn't trigger aboot-update HOT 2
- `override replace` on the systemd rpm does not replace `/usr/bin/systemctl` HOT 4
- dracut: Add more safe args to allowlist
- Rebase to Fedora Silverblue 40, cleanup removing layered deployment and re-doing rebase causes invalid rpm cache?
- Auto-wrap `kernel-install` if layering kernel packages
- Layer chunk with rpmostree-unpackaged-content and initramfs balloons update size
- uninstalling a package that's not present with --idempotent returns non-zero exit code
- SIGSEGV during labeling when importing RPMs HOT 19
- [request] add progress bar for rebase HOT 1
- Do not ask for admin password for `upgrade --check`
- Roundtripping a commit via oci image looses the commitmeta which makes signed ostree break HOT 4
- [Bug] error: Bus owner changed, aborting. This likely means the daemon crashed HOT 2
- Kernel change detection excludes "boutique" kernels HOT 1
- Failed to include akmod to compose HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rpm-ostree.