Hey all,
I was originally hoping to flick the switch as soon as
https://fedoraproject.org/wiki/Changes/Enforcing_signature_checking_by_default
got accepted, but in my test-builds, an unexpected setback appeared.
That setback is now resolved (a silly one-liner cmake issue causing a
miscompilation), but it's now also getting quite close to the X-mas
break. Apparently a lot of folks will be heading off next week already,
and then I myself will be unavailable for more than two weeks. This just
doesn't seem like a good time to do a potentially disruptive change. So,
instead of creating unnecessary stress just before X-mas, lets just push
this to 2026. The plan is now to flick signature enforcing mode on in
RPM on week 3 of 2026, Jan 13th most likely.
For those wanting to test it in advance, f44-build-side-123720 side-tag
has an RPM with the enforcing mode enabled. There's no intention to
merge this side-tag, it's purely for testing purposes so feel free to
test builds if needed and so on. I've built one package (popt) there to
verify that building in koji works with the enforcing mode enabled. It
does, and Fedora CI passes for the change itself, so at least basic
operation of the buildsystem seems to work. For all the things out there
that I don't even know about, we'll see. If it uses dnf with
appropriately configured gpgcheck= entries on repos, it should continue
to work without modifications.
- Panu -
--
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
