On 10/03/2020 20:31, Ken Dreyer wrote: > On Tue, Mar 10, 2020 at 10:40 AM Fabian Arrotin <arrfab at centos.org> wrote: >> >> Now, can you elaborate on "repository pieces be open-source" ? > > Sure, I mean if you are not using mash, what are you using to generate > the repositories with signed and unsigned packages? > "koji dist-repo $options $tag_name $gpg_key_id" and koji , as it will have the rpm signatures imported, will generate the repo with signed pkgs in place, also splitting debuginfo and src.rpm packages -- Fabian Arrotin The CentOS Project | https://www.centos.org gpg key: 17F3B7A1 | twitter: @arrfab -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20200310/efe93879/attachment-0007.sig>