On Wed, Mar 4, 2026, at 10:00 AM, Zbigniew Jędrzejewski-Szmek wrote: > On Wed, Mar 04, 2026 at 11:21:50AM +0100, Miro Hrončok via devel-announce > wrote: >> Dear maintainers. >> >> Based on the current fail to build from source policy, the following packages >> will be retired from rawhide in a week. > >> sigul kevin > > That seems bad. But it depends on python-nss which is no more. > What's the plan here?
The replacement[0] nearly has feature parity. There's a few things I need to sort out, like adding support to rpmsign for IMA signatures via PKCS#11[1] and adjusting or re-implementing robosignatory. I also hope to beg some folks for reviews once I've got documentation in order. There is also the small matter of Sequoia not having released with PKCS#11 support. I think it's all tied up to the PQC work and is waiting on RFC 9580 to be accepted. I believe it's possible, although I have not yet tested it, to get gpg working with keys in PKCS#11 so that might be a short-term solution. If that's the case we might be able to get a replacement deployed to the staging environment in a couple weeks. [0] https://github.com/fedora-infra/siguldry/ [1] https://github.com/rpm-software-management/rpm/pull/4125 Cheers, Jeremy -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
