I have this in the %prep in libcap, which is a similar situation:

gzip -cd %{SOURCE0} | %{gpgverify} --keyring='%{SOURCE2}' --signature='
%{SOURCE1}' --data=-

On Wed, May 8, 2024 at 1:45 PM Jonathan Wright via devel <
devel@lists.fedoraproject.org> wrote:

> I was having trouble finding the public key(s).  I'll look more into this
> now.
>
> They sign the tar archive before it is compressed, so I'll have to stray
> from the standard way of verifying the sigs in the docs a little.
>
> Thanks for the info.
>
> On Wed, May 8, 2024 at 3:16 PM Carlos Rodriguez-Fernandez <
> carlosrodrifernan...@gmail.com> wrote:
>
>> Would you want to validate the tar download with the signature provided
>> by upstream? It has ".sign" files [1]. The public keys should be in here
>> [2]
>>
>>
>> [1] https://mirrors.edge.kernel.org/pub/linux/utils/raid/mdadm/
>> [2] https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/keys
>>
>>
>> On 5/8/24 09:34, Jonathan Wright via devel wrote:
>> > Hi,
>> >
>> > I'm preparing to update mdadm from 4.2 to 4.3 in rawhide.  There are no
>> > breaking changes and it's a relatively minor update except that this is
>> > my first major update to it since taking over the mdadm package from
>> the
>> > previous maintainer after it was orphaned.
>> >
>> > The majority of the changes in 4.3 were already in Fedora's mdadm 4.2
>> > for F39/40 through the giant patch list (~120 patches).  The previous
>> > maintainer seemed to pull in nearly all commits from upstream mdadm and
>> > add them as patches even prior to them getting tagged for a release.  I
>> > verified each of these commits exist in 4.3 to ensure no regressions
>> and
>> > removed all of those patches.
>> >
>> > I also used this opportunity to clean up the spec file a bit.
>> >
>> > I've prepared the build in a side tag: f41-build-side-89157  My intent
>> > is to push this side tag to rawhide on May 15.
>> >
>> > You can see the commit diff at
>> >
>> https://src.fedoraproject.org/rpms/mdadm/c/4220b6778bbbb150ef86a040bb65058beefd2771?branch=rawhide
>> <
>> https://src.fedoraproject.org/rpms/mdadm/c/4220b6778bbbb150ef86a040bb65058beefd2771?branch=rawhide
>> >
>> >
>> > Koji: https://koji.fedoraproject.org/koji/taskinfo?taskID=117433046
>> > <https://koji.fedoraproject.org/koji/taskinfo?taskID=117433046>
>> >
>> > I would greatly appreciate any feedback, testing, or even just a few
>> > extra sets of eyes on the updates to the spec file.
>> >
>> > Thanks
>> >
>> > --
>> > Jonathan Wright
>> > AlmaLinux Foundation
>> > Mattermost: chat <
>> https://chat.almalinux.org/almalinux/messages/@jonathan>
>> >
>> > --
>> > _______________________________________________
>> > devel mailing list -- devel@lists.fedoraproject.org
>> > To unsubscribe send an email to devel-le...@lists.fedoraproject.org
>> > Fedora Code of Conduct:
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> > List Archives:
>> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
>> > Do not reply to spam, report it:
>> https://pagure.io/fedora-infrastructure/new_issue
>> --
>> _______________________________________________
>> devel mailing list -- devel@lists.fedoraproject.org
>> To unsubscribe send an email to devel-le...@lists.fedoraproject.org
>> Fedora Code of Conduct:
>> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
>> Do not reply to spam, report it:
>> https://pagure.io/fedora-infrastructure/new_issue
>>
>
>
> --
> Jonathan Wright
> AlmaLinux Foundation
> Mattermost: chat <https://chat.almalinux.org/almalinux/messages/@jonathan>
> --
> _______________________________________________
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>
--
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to