How do i auto sign rpm's with rpmbuild?

[Todd Zullinger]

Mark wrote:
> i'm making quite a few rpm's at this moment but i can't seem to find
> out how to auto sign them.
> 
> I currently run commands like this:
> rpmbuild -ba --sign my_rpm.spec
> 
> than it wants me to fill in a passphrase. i want to do that
> automatically.

Unless you remove the passprase on your key I don't think this is
possible.  If you're just making packages for your own systems and you
have adequate access controls on the builder, this may be an option
for you.

I don't personally see the problem with manually signing though.  I
build packages in mock under a build account setup specifically for
packaging.  Once the packages are built, I sign them from my normal
user account (e.g.: rpm --addsign ~build/mock/<package>/*.rpm).

> It is possible (i don't assume that fedora is typing it all manually
> for there packages).

I believe it is a manual process.  Michael Schwendt could probably
provide more info as I believe he's one of those authorized to do
pushes for FC-6 Extras.

There is some work being done toward a signing server.  See the draft
at http://fedoraproject.org/wiki/JesseKeating/SigningServerSpecDraft

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Ambition is a poor excuse for not having enough sense to be lazy.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/users/attachments/20070827/6e14cebf/attachment-0002.bin