search

RexOps / repositorio

Tool to administrate linux repositories
http://www.repositor.io/
55 stars 18 forks source link

repo_gpgcheck fails even with signed RPMS & metadata signed as well #57

Open symgryph opened 7 years ago

symgryph commented 7 years ago

Looks like all repo is signed, and have repomod.xml and repomod.xml.asc (I loaded my gpg keys and seems like is signing.

Yum still wont' work if I enable repo_gpgcheck (hoping to do this for better security). Any ideas why it wont work?

I did add. Here is my custom repo file. 

name=myrepo
baseurl=http://127.0.0.1/repo/head/myrepo/x86_64/
enabled=1
gpgcheck=1
#Optional - if you have GPG signing keys installed, use the below flags to verify the repository metadata signature:
http://127.0.0.1/repo/head/creepo/x86_64/creepo.asc
#repo_gpgcheck=1

Here is my /etc/rexx/repositorio.conf file

RepositoryRoot = /var/www/html/repo/

# how often a failed download should be retried.
DownloadRetryCount = 3

# specify repo tag style. either TopDir (default) or BottomDir
TagStyle = TopDir

LogFile = /var/log/repositorio.log
LogFileLevel = info

<Repository myrepo>
  local = creepo/x86_64/
  type  = Yum
  <gpg>
    key=secretkeythatworks
    password=secrekeythatworks
  </gpg>
</Repository>