srbala
/
fedora-kickstarts
mirror of https://pagure.io/fedora-kickstarts.git
1
1
Fork 1
Code Issues Releases Activity

atomic: re-enable ostree commit gpg checking 

In d57f0a2 we managed to lose enablement of gpg signature checking
in Fedora Atomic Host. Re-enable it now.
This commit is contained in:
Dusty Mabe 2017-08-23 17:44:58 -04:00
parent 62eddab5a6
commit 3c02bf385d
No known key found for this signature in database
GPG Key ID: 3302DBD73952E671
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
fedora-atomic.ks
View File

@ -48,6 +48,10 @@ ostree refs fedora-atomic:fedora/26/x86_64/updates/atomic-host --create fedora-a
# cleaned up.
ostree refs fedora-atomic:fedora/26/x86_64/updates/atomic-host --delete
# delete/add the remote with new options to enable gpg verification
ostree remote delete fedora-atomic
ostree remote add --set=gpg-verify=true --set=gpgkeypath=/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-26-primary fedora-atomic 'https://kojipkgs.fedoraproject.org/atomic/26/'
# older versions of livecd-tools do not follow "rootpw --lock" line above
# https://bugzilla.redhat.com/show_bug.cgi?id=964299
passwd -l root