On Fri, May 7, 2021 at 9:15 AM Matthew Miller <mattdm at mattdm.org> wrote: > > On Fri, May 07, 2021 at 08:07:12AM +0200, Fabian Arrotin wrote: > > So we have two solutions and the easiest/fastest one is probably just to > > import pkgs in koji and SIG can just tag-build what they want/need > > (including cherry-picking ENVR) but with the downside effect of pkg > > signed with a different gpg key (and so my original question to Fedora : > > is that allowed ?) > > I don't *think* that would be a problem. It's too bad RPMs can't have > multiple signatures. > RPM the file format supports it, the problem is that the signing infrastructure can't handle it. > But wouldn't cherry-picking ENVR cause problems if a system has EPEL > enabled? Yes, it will. -- 真実はいつも一つ！/ Always, there's only one truth!