This makes it possible to enable 'repo_gpgcheck' in dnf.conf. That is, do
GPG signature check on repository metadata. Without gnupg dnf fails with
"error: Invalid crypto engine."

[YOCTO #11209]

Signed-off-by: Markus Lehtonen <>
 meta/recipes-devtools/dnf/ | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-devtools/dnf/ 
index cdc2a8549f..88172532bf 100644
--- a/meta/recipes-devtools/dnf/
+++ b/meta/recipes-devtools/dnf/
@@ -27,6 +27,8 @@ EXTRA_OECMAKE = " -DWITH_MAN=0 
 BBCLASSEXTEND = "native nativesdk"
 RDEPENDS_${PN}_class-target += "python3-core python3-codecs python3-netclient 
python3-email python3-threading python3-distutils librepo python3-shell 
python3-subprocess libcomps libdnf python3-sqlite3 python3-compression 
python3-rpm python3-iniparse python3-json python3-importlib python3-curses 
python3-argparse python3-misc python3-gpg"
+# Recommend gnupg so that GPG signature check on repository metadata is 
+RRECOMMENDS_${PN}_class-target += "gnupg"
 # Create a symlink called 'dnf' as 'make install' does not do it, but
 # .spec file in dnf source tree does (and then Fedora and dnf documentation

Openembedded-core mailing list

Reply via email to