enable GPG check for package installation
Bug #1278414 reported by
Matthew Mosesohn
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Fuel for OpenStack |
Fix Committed
|
Low
|
Dmitry Burmistrov |
Bug Description
We don't currently have gpg checking enabled on our deployment. We sign all of our packages + use CentOS RPMs when deploying on CentOS, but we don't even check them on install.
We should fix this so that there is some level of trust when installing our packages.
Changed in fuel: | |
importance: | Undecided → Low |
status: | New → Triaged |
Changed in fuel: | |
assignee: | nobody → Fuel OSCI Team (fuel-osci) |
Changed in fuel: | |
importance: | Low → Medium |
milestone: | 5.0 → 5.1 |
Changed in fuel: | |
assignee: | Fuel OSCI Team (fuel-osci) → Dmitry Burmistrov (dburmistrov) |
Changed in fuel: | |
milestone: | 5.1 → 6.0 |
Changed in fuel: | |
milestone: | 6.0 → next |
importance: | Medium → Low |
Changed in fuel: | |
milestone: | next → 6.0 |
assignee: | Dmitry Burmistrov (dburmistrov) → Fuel OSCI Team (fuel-osci) |
Changed in fuel: | |
milestone: | 6.0 → next |
Changed in fuel: | |
status: | Triaged → Won't Fix |
Changed in fuel: | |
milestone: | next → 7.0 |
Changed in fuel: | |
status: | Won't Fix → Confirmed |
status: | Confirmed → In Progress |
assignee: | Fuel OSCI Team (fuel-osci) → Dmitry Burmistrov (dburmistrov) |
Changed in fuel: | |
milestone: | 7.0 → 8.0 |
status: | In Progress → Triaged |
tags: | added: area-build |
To post a comment you must log in.
Also we don't even distribute our GPG key on the Fuel ISO. That needs to be added to the iso build process before we can put it on nodes and use it for installation