[Pulp-list] Can pulp sign repo metadata?

[Mihai Ibanescu]

What we use internally for signing all sorts of things (including invoking
the repository signature for Debian that Brian is referring to):

https://github.com/sassoftware/relic

It was released to the open-source community a few weeks ago.
</plug>

On Mon, Jul 17, 2017 at 4:32 PM, Brian Bouterse <bbouters at redhat.com> wrote:

> Neither pulp or pulp_rpm have GPG signing support, but it is a use case
> that is discussed sometimes as issue 1686 [0] which is RPM specific. The
> pulp_deb plugin that is scheduled to come out with Pulp 2.14 does include
> some signing support [1]. I'm especially interested in having some GPG
> signing use cases written for Pulp3, which could probably happen somewhere
> on the Pulp community wiki [2].
>
> [0]: https://pulp.plan.io/issues/1686
> [1]: https://github.com/pulp/pulp_deb/#signing-support
> [2]: https://pulp.plan.io/projects/pulp/wiki/
>
> -Brian
>
>
> On Fri, Jul 14, 2017 at 4:28 PM, Thomas Munn <symgryph at gmail.com> wrote:
>
>> I want to be able to sign repo metadata when publishing a repository. Is
>> this 'built in' to pulp? Aka if I do a repo-create with already signed
>> rpms, with --gpg-key, will the repo.xml files be signed? If so how do I set
>> it up?
>>
>> Specifically, I want to create an iso with signed repo metadata (in
>> addition to signed rpms)....
>>
>> Thomas
>>
>> --
>> -----------------------
>> Two Wheels Good, Four Wheels Bad
>>
>> _______________________________________________
>> Pulp-list mailing list
>> Pulp-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/pulp-list
>>
>
>
> _______________________________________________
> Pulp-list mailing list
> Pulp-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pulp-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-list/attachments/20170717/6c179e32/attachment.htm>