12:10 p.m.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-e1a19af16e
2018-11-01 17:09:14.377305
--------------------------------------------------------------------------------
Name : pungi
Product : Fedora 27
Version : 4.1.29
Release : 3.fc27
URL : https://pagure.io/pungi
Summary : Distribution compose tool
Description :
A tool to create anaconda based installation trees/isos of a set of rpms.
--------------------------------------------------------------------------------
Update Information:
This release brings mostly updates to handling modular content mixed with bare
RPMs in a single variant, which is not particularly relevant for Fedora. We
have a new feature where it's possible to list particular Koji builds in the
config and they will be pulled into the package set. This can be handy to test
new builds against an existing tag or to compose content that does not have a
common tag. OSTree behaviour when nothing changes in the repo was fixed and it
does not crash anymore. Creating ISO images using the legacy pungi command is
now closer to being reproducible, but it still needs changes in createrepo. As
usual, there are some minor bug fixes and improvements.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Oct 15 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-3
- Save memory less agressively
* Wed Oct 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-2
- Add dependency on xorriso to pungi-legacy
- Bump dependency on python-productmd
* Wed Oct 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.29-1
- hybrid: Only include modules that are not in lookaside (lsedlar)
- Try to be more conservative about memory usage (lsedlar)
- hybrid: Remove modules not listed by fus (lsedlar)
- gather: Make devel modules configurable (lsedlar)
- pkgset: Stop prefilling RPM artifacts (lsedlar)
- gather: Create devel module for each normal module (lsedlar)
- pkgset: Save package set for each module (lsedlar)
- fus: List lookaside repos first (lsedlar)
- gather: Work with repos without location_base (lsedlar)
- Remove extra dependencies (lsedlar)
- Set repodata mtime to SOURCE_DATE_EPOCH (marmarek)
- Make sure .treeinfo file is sorted (marmarek)
- Use constant MBR ID for isohybrid (marmarek)
- Use xorriso instead of genisoimage (marmarek)
- Use $SOURCE_DATE_EPOCH (if set) in discinfo file (marmarek)
- unified_isos: Add extra variants to metadata (lsedlar)
- extra_iso: Add list of variants to metadata (lsedlar)
- linker: Simplify creating pool (lsedlar)
- gather: Hide pid of fus process (lsedlar)
- fus: Strip protocol from repo path (lsedlar)
- Add 'pkgset_koji_builds' option to include extra builds in a compose
(jkaluza)
- ostree: Reduce duplication in tests (lsedlar)
- ostree: Use --touch-if-changed (lsedlar)
- ostree: Fix handler crash without commit ID (lsedlar)
- gather: Filter arches similarly to pkgset (lsedlar)
- Stop shipping and remove RELEASE-NOTES (pbrobinson)
* Thu Sep 6 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.28-1
- gather: Fix multilib query for hybrid solver (lsedlar)
- gather: Expand multilib lists for hybrid method (lsedlar)
- Index arch modulemd by full NSVC (lsedlar)
- pkgset: Apply whitelist to modules in the tag (lsedlar)
- ostree: Wait for updated ref as well as signature (lsedlar)
- extra_iso: Set unified flag in metadata (lsedlar)
- pkgset: Respect koji event when searching for modules (lsedlar)
- Use dogpile.cache to cache the listTaggedRPMS calls if possible (jkaluza)
- gather: Keep original rpms.json in debug mode (lsedlar)
- Reduce duplication in tests (lsedlar)
- docs: Add better description for package globs (lsedlar)
- Create non-bootable ISO for variant without buildinstall (lsedlar)
- Clean up after yum tests (lsedlar)
- gather: Honor module whitelist (lsedlar)
- Clarify error about non-existing module (lsedlar)
- gather: Print full unresolved dependency (lsedlar)
- Fix tests on Python 2.6 (lsedlar)
- Include all test data in tarball (lsedlar)
* Fri Aug 17 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.27-1
- extra-iso: Rename test data file (lsedlar)
- createiso: Use correct python version (lsedlar)
- ostree: Update tests for working with YAML file (lsedlar)
- pungi/ostree: Convert rpm-ostree YAML to JSON (walters)
- createrepo: Allow passing arbitrary arguments (lsedlar)
- gather: Get modular packages from fus (lsedlar)
- util: Remove escaping spaces from volume ID (lsedlar)
- Allow removing non-alnum chars from volid (lsedlar)
- extra-isos: Include treeinfo pointing to all variants (lsedlar)
- createiso: Use unique paths for breaking hardlinks (lsedlar)
- gather: Detect hybrid variant with additional packages (lsedlar)
- Include exact version of pungi in the logs (mboddu)
- gather: Allow empty result for gather (lsedlar)
- gather: Add langpacks in hybrid solver (lsedlar)
- comps: Add get_langpacks function (lsedlar)
- pungi-legacy: Add --joliet-long option (lsedlar)
- gather: Early exit for non-comps sources (lsedlar)
- tests: Use unittest2 when available (lsedlar)
- buildinstall: Make output world readable (lsedlar)
- buildinstall: Copy file without preserving owner (lsedlar)
- Report failed failable deliverables as errors (lsedlar)
- Stop importing PDCClient (lsedlar)
- spec: build require python-multilib (lsedlar)
* Fri Jul 20 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.26-2
- Backport patch for DNF 3 compatibility
- Fix querying Koji about modules with dash in stream
* Mon Jul 16 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.26-1
- gather: Add a hybrid depsolver backend (lsedlar)
- Always use lookasides for repoclosure (lsedlar)
- doc: closing parentheses for require_all_comps_packages (kdreyer)
- osbs: Generate unique repo names (lsedlar)
- Expand version field during image_build using version_generator (sinny)
- createrepo: Stop including modulemd in debug repos (lsedlar)
- Simplify iterating over module defaults (lsedlar)
- pkgset: Apply module filters on pkgset level (lsedlar)
- init: Validate whitespace in comps groups (lsedlar)
- createrepo: Include empty modules (lsedlar)
- createiso: Break hardlinks by copying files (lsedlar)
- pkgset: Query Koji instead of PDC (mcurlej)
- config: Report variants validity issues (lsedlar)
- variants: Reject values with whitespace (lsedlar)
- osbs: Fresh koji session for getting metadata (lsedlar)
- gather: Ignore comps in lookaside repo (lsedlar)
- init: Test that init phase correctly clones defaults (lsedlar)
- init: Add tests for cloning module defaults (lsedlar)
- init: Add validation for module defaults (lsedlar)
- ostree-installer: Skip comps repo if there are no comps (lsedlar)
- Add test for getting licenses from a repo (lsedlar)
- Add content_licenses to module metadata (sgallagh)
- Update virtualenv instructions (lsedlar)
- Allow extracting koji event from another compose (lsedlar)
- Copy modules instead of reparsing them (sgallagh)
- Silence config warnings in quiet mode (lsedlar)
- osbs: Add nvr to metadata (lsedlar)
- Always get old compose with release type suffix (patrick)
- Make ostree_installer check if buildinstall is skipped correctly (puiterwijk)
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.1.25-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Jul 4 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.25-6
- Add dependency on python2-productmd to legacy subpackage
* Mon Jun 18 2018 Miro Hron��ok <mhroncok(a)redhat.com> - 4.1.25-5
- Rebuilt for Python 3.7
* Mon Jun 4 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.25-4
- Call chmod recursively
* Thu May 31 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.25-3
- Don't mark all runroots as successful by chmod
* Wed May 30 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.25-2
- Make results of runroot tasks world readable
* Tue May 22 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.25-1
- comps-wrapper: Make tests pass on EL6 (lsedlar)
- pkgset: Add option to ignore noarch in ExclusiveArch (lsedlar)
- Handling multiple modules with the same NSV - PDC (onosek)
- createrepo: Allow disabling SQLite database (lsedlar)
- init: Drop database from comps repo (lsedlar)
- createrepo: Add module arch to metadata (lsedlar)
- arch: Drop mapping ppc64 -> ppc64p7 (lsedlar)
- arch: Make i386 map to i686 instead of athlon (lsedlar)
- Add a phase for creating extra ISOs (lsedlar)
- Stop using .message attribute on exceptions (lsedlar)
- Validation of parameter skip_phases (onosek)
- Capture sigterm and mark the compose as DOOMED (puiterwijk)
- createiso: Remove useless method (lsedlar)
- createiso: Refactor code into smaller functions (lsedlar)
- arch: Remove mocks in tests (lsedlar)
- ostree-installer: Allow overwriting buildinstall (lsedlar)
- ostree-installer: Work with skipped buildinstall (lsedlar)
- createrepo: Use less verbose logs (lsedlar)
- pkgset: Create global repo in parallel to merging pkgsets (lsedlar)
- createiso: Skip if buildinstall fails (lsedlar)
- Update tests for libmodulemd 1.4.0 (lsedlar)
* Wed May 16 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.24-4
- Use python function to copy ostree installer output
* Thu May 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.24-3
- Make wait-for-signed-ostree repeat the fedmsg in case the signer crashed
- Stop filtering comps environments all the time
* Fri May 4 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.24-2
- Copy ostree-installer without preserving owner
* Wed May 2 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.24-1
- koji-wrapper: Log failed subtasks (lsedlar)
- Update compose status when config validation fails (lsedlar)
- pkgset: Allow different inheritance for modules (lsedlar)
- ostree: Recognize force_new_commit option in old config (lsedlar)
- modules: Correctly report error for unexpected modules (lsedlar)
- modules: Allow context in variants XML (lsedlar)
- gather: Print profiling information to stderr (lsedlar)
- pkgset: Stop creating database for repodata (jkaluza)
- gather: Use another variant as lookaside (lsedlar)
- buildinstall: Use metadata if skipped (lsedlar)
- Allow reusing pkgset FileCache from old composes. (jkaluza)
- validation: Populate dict of all variants (lsedlar)
- gather: Stop pulling debuginfo and source for lookaside packages (lsedlar)
- Only use comps repo if we really have comps (lsedlar)
- pkgset: Use modules PDC API (lsedlar)
- Access ci_base date via compose (puiterwijk)
- Allow filtering comps for different variants (lsedlar)
- comps: Make filtering by attribute more generic (lsedlar)
- pkgset: Dump downloaded modulemd to logs (lsedlar)
- Fix PEP8 warning about if not x in y (lsedlar)
- Variant as a lookaside - configuration (onosek)
- Remove comps from arch repo (lsedlar)
- init: Stop creating module defaults dir twice (lsedlar)
- gather: Reduce logs from DNF gathering (lsedlar)
- Clone module defaults into work/ directory (lsedlar)
- Update the configuration JSON schema for module_defaults_dir (contyk)
- Update configuration docs with module_defaults_dir (contyk)
- Handle relative paths in module_defaults_dir (contyk)
- Include module defaults in the repodata (contyk)
- Add *.in fixtures to tarball (lsedlar)
- init: Always filter comps file (lsedlar)
- docs: Describe comps processing (lsedlar)
- gather: Use comps for given variant (lsedlar)
- docs: Fix typo (lsedlar)
- Add all packages to whitelist for hybrid variant (lsedlar)
- comps: Add tests for CompsFilter (lsedlar)
- comps: Move filtering into wrapper module (lsedlar)
- Tests fail if unittest2 library is missing (onosek)
- Add unittest2 and rpmdevools to contributing doc (rmarshall)
- pkgset: Construct UID for PDC modules (lsedlar)
- gather: Simplify creating temporary directory (lsedlar)
- buildinstall: Add extra repos (lsedlar)
- tests: Use dummy modulesdir for DNF (lsedlar)
- Update tests for Python 2.6 (onosek)
* Tue Apr 24 2018 Kevin Fenzi <kevin(a)scrye.com> - 4.1.23-5
- Backport fix for Accessing ci_base date via compose
- https://pagure.io/pungi/pull-request/910
* Thu Apr 12 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.23-4
- Stop creating module defaults dir twice
* Thu Apr 12 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.23-3
- Add support for module defaults
* Wed Apr 11 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.23-2
- Revert reordering of ostree phases
* Wed Apr 4 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.23-1
- Update documentation section 'contributing' (onosek)
- Write module metadata (onosek)
- Support multilib in GatherSourceModule (jkaluza)
- ostree: Always substitute basearch (lsedlar)
- If sigkeys is specified, require at least one (puiterwijk)
- Allow setting <kojitag/> in <modules/> in variants.xml to get the modules
from this Koji tag. (jkaluza)
- Move Modulemd import to pungi/__init__.py to remove duplicated code.
(jkaluza)
- Use Modulemd.Module for 'variant.arch_mmds' instead of yaml dump (jkaluza)
- Fix modular content in non-modular variant (lsedlar)
- Remove the filtered RPMs from module metadata even in case all RPMs are
filtered out. (jkaluza)
- pkgset: Allow empty list of modules (lsedlar)
- buildinstall: Add option to disable it (lsedlar)
- Use libmodulemd instead of modulemd Python module (jkaluza)
- gather: Fix package set whitelist (lsedlar)
- pkgset: Merge initial package set without checks (lsedlar)
- pkgset: Remove check for unique name (lsedlar)
- gather: Honor package whitelist (lsedlar)
- Write package whitelist for each variant (lsedlar)
- image-build: Accept tar.xz extension for docker images (lsedlar)
- pkgset: Correctly detect single tag for variant (lsedlar)
- Remove comps groups from purely modular variants (lsedlar)
- gather: Allow filtering debuginfo packages (lsedlar)
- Move ostree phase and pipelines for running phases (onosek)
- Other repo for OstreeInstaller (onosek)
- Add modulemd metadata to repo even without components (jkaluza)
- Correct fix for volume ID substition sorting by length (awilliam)
- Ordering processing for volume ID substitutions (onosek)
- Disable multilib for modules (jkaluza)
- scm: Stop decoding output of post-clone command (lsedlar)
- Remove useless shebang (lsedlar)
- source_koji.py: Properly handle unset pkgset_koji_tag (otaylor)
- pkgset: Only use package whitelist if enabled (lsedlar)
- Fail early if input packages are unsigned (jkaluza)
- Allow composing from tag with unsigned packages (jkaluza)
- Ostree can use pkgset repos (onosek)
- Support multiple sources in one variant (lsedlar)
- gather: Set lookaside flag focorrectly (lsedlar)
- gather: Try getting srpm from the same repo as rpm (lsedlar)
- Minor correction for python backward compatibility (onosek)
* Fri Mar 23 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-10.1
- Always substitute basearch in ostree
* Fri Mar 16 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-10
- Fix package whitelist for non-modular variants
* Wed Mar 14 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-9
- Allow empty modular variants
- Add option to disable multilib
* Fri Mar 9 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-8
- Fix package set whitelist
* Thu Mar 8 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-7
- image-build: Accept tar.xz extension for docker images
- Allow multiple versions of the same package in package set
* Tue Mar 6 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-6
- Speed up compose with modules
* Fri Mar 2 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-5
- Remove comps groups from purely modular variants
* Wed Feb 21 2018 Dennis Gilmore <dennis(a)ausil.us> - 4.1.22-4
- make pungi-utils require python3-fedmsg
* Tue Feb 6 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-3
- Add support for mixing traditional and modular content
* Mon Feb 5 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-2
- Create a subpackage with legacy pungi command
* Wed Jan 24 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.22-1
- Better INFO messages about modules (onosek)
- Updates composes should be marked as supported (lsedlar)
- pkgset: Only add missing packages from global tag (lsedlar)
- ostree/utils: Drop timestamps from generated repo names - tests (onosek)
- ostree/utils: Generate a single pungi.repo file, use repo-<num> IDs (walters)
- ostree/utils: Drop timestamps from generated repo names (walters)
- gather: Do not require variant for module source (lsedlar)
- gather: Comps source should not crash without comps file (lsedlar)
- gather: JSON source returns nothing without configuration (lsedlar)
- buildinstall: Fix treeinfo generating on failure (lsedlar)
- Add buildinstall_use_guestmount boolean option (jkaluza)
- gather: Use arch packages in nodeps method (lsedlar)
- pkgset: Always use global tag if specified (lsedlar)
- config: Make pkgset_koji_tag optional (lsedlar)
- ostree: Add force_new_commit option - test added (onosek)
- ostree: Add force_new_commit option (walters)
- gather: Fix checking string type (lsedlar)
- Improve logging for unsigned packages (onosek)
- Fall back to mount if guestmount is not available (onosek)
- El-Torito boot information on s390x (onosek)
- Remove strace from buildinstall runroot (onosek)
- doc: fix "Miscellaneous" spelling in Config section (kdreyer)
- doc: move "Phases" up, "Contributing" down (kdreyer)
* Tue Jan 16 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.21-4
- Add option to force fallback from guestmount
* Wed Jan 10 2018 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.21-3
- Fix checking string type in nodeps method
* Wed Dec 13 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.21-2
- Remove /usr/bin/pungi
- Remove dummy compose from check section
* Wed Dec 6 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.21-1
- tests: Use correct python version for config validation test (lsedlar)
- Use dnf backend for repoclosure on PY3 (lsedlar)
- Drop checks for git and cvs (lsedlar)
- Relax check for gettext (lsedlar)
- Drop check for repoquery command (lsedlar)
- Use modifyrepo_c if possible (lsedlar)
- pkgset: Add SRPMs to whitelist (lsedlar)
- modules: Allow multilib (lsedlar)
- add ability to specify ostree ref in OSTREE phase - update (onosek)
- add ability to specify ostree ref in OSTREE phase (onosek)
- buildinstall: Allow using external dire for runroot task (jkaluza)
- pkgset: Remove package skip optimization for bootable products (lsedlar)
- Add documentation for modular composes (lsedlar)
- osbs: Get correct path to repo for addons (lsedlar)
- Remove deprecated options (onosek)
- module-source: Log details about what packages are gathered (lsedlar)
- gather: Log details about nodeps method (lsedlar)
- gather: get_packages_to_gather returns a tuple (lsedlar)
- iso-wrapper: Fix calling wrong logger method (lsedlar)
- Turn COMPOSE_ID version generator into DATE_RESPIN (puiterwijk)
- iso-wrapper: Remove hacks for sorting (lsedlar)
- Report missing module dependencies earlier (lsedlar)
- Implement version.compose_id version generator (patrick)
- Optionally do old_compose per release type (patrick)
* Wed Nov 22 2017 Patrick Uiterwijk <puiterwijk(a)redhat.com> - 4.1.20-3
- Backport patch for PR#790 - old_composes per release type
- Backport patch for PR#791,796 - implement DATE_RESPIN version generator
* Tue Nov 21 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.20-2
- Fix crash in modular compose
* Wed Nov 1 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.20-1
- image-build: Drop suffixes from configuration (lsedlar)
- kojiwrapper: Deal with multiple values for image-build (lsedlar)
- Add modulemd to the missing module error (patrick)
- notification: Add more info into the messages (lsedlar)
- notification: Fix running on Python 3 (lsedlar)
- remove remaining hard coded createrepo threads (onosek)
- tests: Fix remaining missing assertions (lsedlar)
- tests: Work with older unittest2 (lsedlar)
- tests: Skip testing pdc logs if dependencies are not installed (lsedlar)
- Log PDC communications and info for modular composes (dowang)
- Update documentation section "Contributing to Pungi". (onosek)
- Reject yum gather backend on Python 3 (lsedlar)
- Stop using deprecated pipes.quote (lsedlar)
- Convert configparser values to string (lsedlar)
- Explicitly decode test files as UTF-8 (lsedlar)
- Use universal_newlines when running other commands (lsedlar)
- Port to Python 3 (lsedlar)
- checks: Use list of release types from productmd (patrick)
- Add an option to make pungi-koji print its compose_dir to stdout (patrick)
- buildinstall: Expose template arguments for lorax (lsedlar)
- Add support for new modules naming policy with colon delimiter (jkaluza)
- Catch the issue when PDC does not contain RPMs, but the module definition
says there should be some. (jkaluza)
- pkgset: Cherry-pick packages from Koji when we know already what packages
will end up in compose (jkaluza)
- config: Allow comps_file for any gather_source (lsedlar)
- pkgset: Allow unsigned packages by empty key (lsedlar)
- gather: Nodeps should allow noarch packages (lsedlar)
- pkgset: Clean up path generation (lsedlar)
- createiso: Fix logging for media split (lsedlar)
- Raise the Exception when a symlink cannot be created. (randy)
- Use variant UID for subvariant fallback (lsedlar)
- Fixup for opening config dumps (lsedlar)
- Open and close file descriptors. (rbean)
- live-images: Honor global settings for target (lsedlar)
- unified-isos: Stop erasing metadata on failure (lsedlar)
- Add directory name for checksum file (lsedlar)
- createrepo: Allow customizing number of threads (lsedlar)
- Make ostree installer before cloud images (lsedlar)
* Mon Oct 23 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.19-4
- Expose template arguments for lorax
* Wed Oct 18 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.19-3
- Allow comps_file for any gather_source
* Mon Oct 2 2017 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 4.1.19-2
- Update dependencies for EPEL 7
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-e1a19af16e' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------