[atomic-wg] Issue #461: use 'ostree remote gpg-import' when producing cloud-images/ISO

[Jonathan Lebon]

jlebon added a new comment to an issue you are following:
``
Hmm, but then we'd be allowing e.g. F28 content to be signed by the F27 key, right? That seems like the opposite effect of what we want from rotating keys.

OTOH, I appreciate the UX annoyance here. Maybe we should just teach `gpgkeypath` to support `$releasever` and `$basearch`, like dnf? Then `rpm-ostree rebase` should Just Work assuming the newer keys are already part of the installed `fedora-gpg-keys`.
``

To reply, visit the link below or just reply to this email
https://pagure.io/atomic-wg/issue/461