enable GPG check for package installation
Bug #1278414 reported by
Matthew Mosesohn
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Fuel for OpenStack |
Fix Committed
|
Low
|
Dmitry Burmistrov | ||
Bug Description
We don't currently have gpg checking enabled on our deployment. We sign all of our packages + use CentOS RPMs when deploying on CentOS, but we don't even check them on install.
We should fix this so that there is some level of trust when installing our packages.
Revision history for this message
| Matthew Mosesohn (raytrac3r) wrote | #1 |
| Changed in fuel: | |
| importance: | Undecided → Low |
| status: | New → Triaged |
| Changed in fuel: | |
| assignee: | nobody → Fuel OSCI Team (fuel-osci) |
| Changed in fuel: | |
| importance: | Low → Medium |
| milestone: | 5.0 → 5.1 |
| Changed in fuel: | |
| assignee: | Fuel OSCI Team (fuel-osci) → Dmitry Burmistrov (dburmistrov) |
| Changed in fuel: | |
| milestone: | 5.1 → 6.0 |
| Changed in fuel: | |
| milestone: | 6.0 → next |
| importance: | Medium → Low |
| Changed in fuel: | |
| milestone: | next → 6.0 |
| assignee: | Dmitry Burmistrov (dburmistrov) → Fuel OSCI Team (fuel-osci) |
| Changed in fuel: | |
| milestone: | 6.0 → next |
Revision history for this message
| Roman Vyalov (r0mikiam) wrote | #2 |
| Changed in fuel: | |
| status: | Triaged → Won't Fix |
| Changed in fuel: | |
| milestone: | next → 7.0 |
| Changed in fuel: | |
| status: | Won't Fix → Confirmed |
| status: | Confirmed → In Progress |
| assignee: | Fuel OSCI Team (fuel-osci) → Dmitry Burmistrov (dburmistrov) |
| Changed in fuel: | |
| milestone: | 7.0 → 8.0 |
| status: | In Progress → Triaged |
Revision history for this message
| Roman Vyalov (r0mikiam) wrote | #3 |
| Changed in fuel: | |
| status: | Triaged → Fix Committed |
| tags: | added: area-build |
To post a comment you must log in.
Also we don't even distribute our GPG key on the Fuel ISO. That needs to be added to the iso build process before we can put it on nodes and use it for installation