Signing Packages

[Sylke Vicious]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good evening to everyone.
First of all, thanks to the people that make Copr, because is a
fantastic tool.
The question is: is it possible to sign packages? Or still in the todo
list? Because i can't find any way to do that.

Thanks in advance!
Silvio
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.15 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBAgAGBQJSik2SAAoJELTlm30YURiG0FMQALk+Yy7PhA7keo8H7SfZy6P8
> 1TLaH1chvo5eLBBFVL2pP56RRNLueQIDusmmPXC3PB091q185w6ErTqyxwtKW2Xh
> vVtevxnhzNn0E2MlY8q42WfgdBNC7UGcfFg+IN+bISPsRAsiEDALOK+de0+SJqy/
> NWXMlg2kBPWb0IySrQ9qq0oLpmvw/mPC6S9obirNktNrhcpmQ+hKuOsZjr2X5GoB
> VGVdTfjkjm2OYxfsvB1iMHH/Piv7FPntL4zNt2FQ1w9iNlEsl1R1p0K4lkoDHIBt
> dg6Utp52iUIA32iYU7ljSLkZJy6nhJkWhHeYMt5XZbRqtf1OAv347DWZQTLh1ZrL
> NDMRACI7VYdG4B9uWi6kTXl+M1GJ4ZxKKjbt+zZn66DB8A3KUK51Gq5F7vs8eb6y
> f2utPDZPBexVyTMmIMUhZBvPLXjCnuM7+Z2MmnqUXJTbCMel4sWAIUhLuKo8q7kR
> CUUovJvbfavhfbHvUmAkz3U2bZXMB+gEhoZQI3egcDDurL/0TGZK0BNnxXfkL5pA
> 738MaehSC3vQCOri6PWhyfNyphPWwvS88cVh6k6Qg7hNjrsntSAmOpjymoVgLVST
> dFzDa7MxQr12dJYweyTCRy6ma0CMfvM27eUmnvY0VvRe/Xr2FrDZcCLAOxdwC73R
> HrlG06iqz2wiAxINXUi0
> =VAaI
> -----END PGP SIGNATURE-----

[Miroslav Suchý]

On 11/18/2013 06:25 PM, Sylke Vicious wrote:
> The question is: is it possible to sign packages? Or still in the todo
> list? Because i can't find any way to do that.

Unfortunatelly no.
Signing of packages would be nice. But it is not in plan in near term 
future. :(

But obviously - patches are welcome. :)

Current workaround would be to sync yum repo from copr (mrepo should 
handle this). Sign it on your machine. And then upload resulting repo 
somewhere (but not to Copr).

Mirek