[Rpm-maint] [rpm-software-management/rpm] RFE: automatically sign packages on build (Issue #2678)

[Neal H. Walfield]

A couple of thoughts:

  - In non-interactive environments, the secret key material should probably not be made available to the build infrastructure.  That means exactly something like gpg-agent (a daemon that provides a smartcard like interface) is needed.
  - How does rpm figure out what key to use for signing?
 


-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2678#issuecomment-1738753306
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/2678/1738753306 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20230928/06c1eb38/attachment.html>