gpg keys of older/newer fedora versions

Paul Wouters paul at nohats.ca
Fri Jul 17 17:31:42 UTC 2015


On Fri, 17 Jul 2015, Zbigniew Jędrzejewski-Szmek wrote:

> [In light of https://bugzilla.redhat.com/show_bug.cgi?id=1241383]
>
> 'dnf install --installroot=... --releasever=XX dnf' can be used to bootstrap
> a Fedora chroot. The only snag is that --nogpg is often recommended, because
> fedora-repos only provides the GPG keys for the current and next release.
>
> It would be convenient (and safe!) to provide keys for past and future releases,
> so such bootstrapping can be done without either importing the keys manually
> and/or using --nogpg.
>
> I thought I'd ask here first: is there a strong reason *not* to include those keys?

I see no reason not to do that. We were also going to put those keys
into DNS, pendig some changes of the OPENPGPKEY ietf draft document.

Paul


More information about the devel mailing list