On 2/11/26 4:06 PM, Cristian Le via devel wrote:
On 2026/02/11 14:55, Panu Matilainen wrote:
Okay, F44 was just branched, time to move on with this finally.
I'm planning to flick the switch next Monday, Feb 16th, infrastructure
and life permitting. And, be prepared to flick it back and forth a few
times in the face of unforeseen complications.
To the extent I've been able to test, the core build toolchain - mock,
copr and koji are fine with this change. As should be anything that
uses dnf to install and disables signature checks for repos that don't
have them. But who knows what all is out there lurking in the CI and
so on, no doubt there will be changes required to various machineries.
If you run into a showstopper wrt this, file a bug and we'll see what
we can do about it. And revert temporarily if needed.
We expect this will break testing-farm tests almost immediately because
we are using the koji artifacts which are unsigned. Can you provide some
guidance on how to get ready for this as fast as possible? [1] Is there
something that can be setup in the `.repo` file to disable this check?
Setting pkg_gpgcheck=0 (aka gpgcheck=0) in the .repo lets you install
unsigned packages. That's how mock etc operate, and keep working over
this change.
> [1]: https://discussion.fedoraproject.org/t/f45-change-proposal-
enforcing-signature-checking-by-default-systemwide/169774/7
I don't know what the story behind that "local" plugin is, but there
seem to be various workaround suggested?
- Panu -
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
