On Tue, Jan 29, 2019 at 4:28 PM Kevin Fenzi kevin@scrye.com wrote:
On 1/21/19 10:13 AM, Neal Gompa wrote:
Hey all,
So, we've got a bit of a problem. The sigul package is not installable in Fedora 29, and pygpgme is half-broken in Fedora 28 and was retired during Fedora 29 development due to constant breakage.
This means that sigul is in danger of being retired in Fedora. Unfortunately, sigul is the only supported signer system for Koji at the moment.
What do we want to do here? It's well-known that sigul does not work with GnuPG 2, though I vaguely recall that some work was done to try to fix this.
Do we want to port sigul to python3-gpg, switching Sigul to Python 3 and the official gpgme bindings so that it works with GnuPG 2?
I would think this would be the way to go, but of course it's up to Patrick.
Is this in progress anywhere?
Or do we want to adapt the bridge to work with obs-signd (which is already used by Copr)?
This is a non starter, obs-signd doesn't do everything that sigul does and we have a number of things that depend on sigul working the way it does.
Forgive me, but what does sigul do that signd cannot? I'm unaware of any material differences between the two.