[CentOS-devel] Making EPEL available in CBS for SIG builds

Fri May 7 13:16:52 UTC 2021
Neal Gompa <ngompa13 at gmail.com>

On Fri, May 7, 2021 at 9:15 AM Matthew Miller <mattdm at mattdm.org> wrote:
> On Fri, May 07, 2021 at 08:07:12AM +0200, Fabian Arrotin wrote:
> > So we have two solutions and the easiest/fastest one is probably just to
> > import pkgs in koji and SIG can just tag-build what they want/need
> > (including cherry-picking ENVR) but with the downside effect of pkg
> > signed with a different gpg key (and so my original question to Fedora :
> > is that allowed  ?)
> I don't *think* that would be a problem. It's too bad RPMs can't have
> multiple signatures.

RPM the file format supports it, the problem is that the signing
infrastructure can't handle it.

> But wouldn't cherry-picking ENVR cause problems if a system has EPEL
> enabled?

Yes, it will.

真実はいつも一つ!/ Always, there's only one truth!