[packagekit] Extending the RepoDetail signal

James Antill james at fedoraproject.org
Thu Oct 7 06:32:48 PDT 2010


On Thu, 2010-10-07 at 12:25 +0200, Anders F Björklund wrote:
> 
> Does this make any difference between whether it is the rpm packages
> that are signed, or if it is the repomd.xml metadata that is signed ?
> 
> Currently yum doesn't make a difference between, which causes some
> problems for other clients. Or maybe that is more of a backend worry ?
> 
> But "gpgcheck=1" can mean either.

 From man yum.conf (localpkg_gpgcheck is new):

              gpgcheck Either ‘1’ or ‘0’. This tells yum  whether  or  not  it
              should  perform  a GPG signature check on packages. When this is
              set in the [main] section it sets the default for all  reposito-
              ries.  The default is ‘0’.

              localpkg_gpgcheck  Either  ‘1’ or ‘0’. This tells yum whether or
              not it should perform a GPG signature check  on  local  packages
              (packages in a file, not in a repositoy).  The default is ‘0’.

              repo_gpgcheck  Either  ‘1’ or ‘0’. This tells yum whether or not
              it should perform a GPG signature check on  the  repodata.  When
              this  is  set  in the [main] section it sets the default for all
              repositories. The default is ‘0’.




More information about the PackageKit mailing list