On Fri, Nov 19, 2010 at 19:38, Patrick J. LoPresti <lopresti@gmail.com> wrote:
Third, I was completely unable to get the various <signature-handling> options to work. (I only tried it in the <global> section, not as part of the add-on.) No matter what I tried, my updates repository was rejected because of signature failures. So I had to do [...]
The really really nasty thing about the signature handling is that the syntax for the general case vs. the per-repo case is different: - On the *global/general level*, you can ONLY use true/false to enable/disable certain options globally for the repos. ex.: <import_gpg_key config:type="boolean">true</import_gpg_key> - On the *per-repo level*, you specify the individual keys that you want to trust. ex.: <import_gpg_key> <all config:type="boolean">false</all> <keys config:type="list"> <keyid>3B3011B76B9D6523</keyid> </keys> </import_gpg_key> (see near http://www.suse.de/~ug/autoyast_doc/CreateProfile.Software.html#id366839)
I automated this entire process, from generating the GPG key to signing the files to adding the key to the initrd... It is a single Makefile that I would be happy to clean up and share if anybody thinks that might be useful. Is there someplace I could upload it? A wiki or something?
I was gonna ask the same thing. I think that would also help improving the documentation; there are many items that aren't easily found or misleading/confusing, some examples are just wrong etc. I would really like a wiki (with priv. write access, maybe) or a git repo or *anything* I can do to contribute back to the main docs that is not email. (; I know Uwe has been busy the last few days (and possibly will be some more), but he didn't forget us, he will read and answer in time, he promised. (; tty, 686f6c6d -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-autoinstall+help@opensuse.org