mikeeq / mbp-fedora-kernel

65 stars 12 forks source link

Sign rpms by default. #63

Closed sharpenedblade closed 2 years ago

sharpenedblade commented 2 years ago

This makes the CI sign the rpms after they are built. A github secret called RPM_SIGNING_KEY is necessary for this to work. Run:

# Create gpg key pair. Leave the password blank, and make the user of this key RPM_SIGNING_KEY
gpg --gen-key
gpg --export -a 'Package Manager' > ./RPM_SIGNING_KEY

Then copy the contents of ./RPM_SIGNING_KEY into the secret.