[Rpm-maint] [rpm-software-management/rpm] Support automatic signing on build when _openpgp_autosign_id is set (PR #3575)

Panu Matilainen notifications at github.com
Fri Feb 14 09:29:36 UTC 2025


This is obviously only an enabler for automatic signing. The other half of the equation is automatically setting it up, but that's another ticket (#3522). This lets us at least manually enable automatic signing in the test-suite, which in turn is a pre-requisite for enabling enforcing signature checking by default (#1573).

Set up auto-signing inside the test-suite throughout, using a freshly generated key for each run. With the exception of the reproducibility tests where this would be harmful.

This is a rather primitive thing in this state - ideally the signing would happen in parallel, but as the signing code relies heavily on macro manipulation, that's a much bigger task for some other time. Also I think we'd rather use an rpm specific keyring for the automatic signing,  but that requires further changes to how the signing macros work.

Fixes: #2678

You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/3575

-- Commit Summary --

  * Link librpmbuild to librpmsign
  * Convert package build priority calculation to STL
  * Support automatic signing on build when _openpgp_autosign_id is set

-- File Changes --

    M CMakeLists.txt (2)
    M build/CMakeLists.txt (2)
    M build/pack.cc (69)
    M tests/data/macros.testenv (1)
    M tests/local.at (4)
    M tests/pinned/common/buildrepr.sh (1)
    M tests/rpmquery.at (2)
    M tests/rpmsigdig.at (29)
    M tests/setup.sh (30)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/3575.patch
https://github.com/rpm-software-management/rpm/pull/3575.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/3575
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/3575 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20250214/97130194/attachment-0001.htm>


More information about the Rpm-maint mailing list