On Mon, 18 Jan 2010 19:59:20 +0100
Till Maas <opensource(a)till.name> wrote:
The mock config can be changed to not use this repo that only provides
unsigned RPMs:
http://buildsys.fedoraproject.org/buildgroups/rhel5/i386/
Then one can a lot easier enable gpgcheck in the mock config.
Currently it involves downloading and auditing the rpms in above repo
and mirror it locally.
Perhaps we could just sign those packages?
(Possibly with a different key)?
kevin