On Sat, Apr 29, 2006 at 02:54:12PM +0200, houghi wrote:
> On Fri, Apr 28, 2006 at 10:31:33PM +0200, houghi wrote:
> > On Fri, Apr 28, 2006 at 10:07:06PM +0200, Marcus Meissner wrote:
> > > Please open a bugreport.
> >
> > Bug 170944 Submitted
>
> Transfered to bug 166011
> There I see some info:
> <quote>
> - (once) create a GPG key for signing the modified source (or use an
> existing key)
>
> - adapt the packages file with "=Cks: SHA1 <sha1sum>" entries of the RPMs
>
> - add META and KEY entries to /content, see URL above
>
> - sign /content (gpg --detach-sign -a content)
> - create /content.key (the above public key used to sign /content)
> (gpg --export -a -u keyid > content.key)
> </quote>
I now have the following added to makeSUSEdvd to no avail:
LOCAL_KEY=$(gpg --fingerprint | grep ^pub | awk '{print $2}' | cut -d"/" -f2)
gpg --export -a > $CD_DIR/gpg-pubkey-${LOCAL_KEY}.asc
rm $CD_DIR/content.asc
echo "KEY SHA1 $(cd $CD_DIR && sha1sum gpg-pubkey-${LOCAL_KEY}.asc)" \
>> $CD_DIR/content
gpg --export -a -u $LOCAL_KEY > $CD_DIR/content.key
rm $CD_DIR/media.1/products.asc
gpg --detach-sign -a $CD_DIR/media.1/products
gpg --export -a > $CD_DIR/media.1/products.key
So according to the above, I have done:
1) create a GPG key
2) adapted the "packages" file the latest create_package_descr
3) signed content
4) created /content.key
As long as I do not know if I am doing things correctly, I can't put
anything in bugzilla. :-(
houghi
--
Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es
ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk
und Arbeit, und das Sein wichtiger als das Tun
- Johannes Müller-Elmau
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
