Re: Attaching rpm signature to deltarpm after deltarpm creation

[Michael Schroeder]

On Fri, Dec 14, 2007 at 07:22:09PM +0200, Jonathan Dieter wrote:
>  A few of us have been throwing around some ideas on how to generate
>  deltarpms in the Fedora build system.  See
>  http://fedoraproject.org/wiki/Infrastructure/PrestoBuildsysIntegration
>  for more information.  We've hit an interesting problem, though.
>  
>  Currently in the build system, rpms are (1) built, (2) queued for update
>  and then (3) signed.  The problem is that we want to generate the
>  deltarpms after either (1) or (2), but there is no easy way of attaching
>  the rpm's signature to a deltarpm *after* the deltarpm has been created.
>  
>  Any thoughts or advice? 
Combinedelatrpm is your friend here:

If you sign the deltas later on, you can use combinedeltarpm to
patch the new signature into the deltas.

Here's an example:

    makedeltarpm old.rpm new.rpm delta.drpm
    sign new.rpm
    combinedeltarpm -S new.rpm delta.drpm deltasigned.drpm

(There's actually another way: you can create a "rpm-only no diff"
delta rpm containing just the signature and then use
combinedeltarpm to create a delta containing the signature:

    makedeltarpm -r -u new.rpm newsig.drpm
    combinedeltarpm delta.drpm newsig.drpm deltasigned.drpm

This results in the same drpm as with the -S option.)

Cheers,
  Michael.

-- 
Michael Schroeder                                   mls(a)suse.de
SUSE LINUX Products GmbH, GF Markus Rex, HRB 16746 AG Nuernberg
main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);}