On Sat, Apr 29, 2006 at 02:54:12PM +0200, houghi wrote:
On Fri, Apr 28, 2006 at 10:31:33PM +0200, houghi wrote:
On Fri, Apr 28, 2006 at 10:07:06PM +0200, Marcus Meissner wrote:
Please open a bugreport.
Bug 170944 Submitted
Transfered to bug 166011 There I see some info: <quote> - (once) create a GPG key for signing the modified source (or use an existing key)
- adapt the packages file with "=Cks: SHA1 <sha1sum>" entries of the RPMs
- add META and KEY entries to /content, see URL above
- sign /content (gpg --detach-sign -a content) - create /content.key (the above public key used to sign /content) (gpg --export -a -u keyid > content.key) </quote>
I now have the following added to makeSUSEdvd to no avail: LOCAL_KEY=$(gpg --fingerprint | grep ^pub | awk '{print $2}' | cut -d"/" -f2) gpg --export -a > $CD_DIR/gpg-pubkey-${LOCAL_KEY}.asc rm $CD_DIR/content.asc echo "KEY SHA1 $(cd $CD_DIR && sha1sum gpg-pubkey-${LOCAL_KEY}.asc)" \ >> $CD_DIR/content gpg --export -a -u $LOCAL_KEY > $CD_DIR/content.key rm $CD_DIR/media.1/products.asc gpg --detach-sign -a $CD_DIR/media.1/products gpg --export -a > $CD_DIR/media.1/products.key So according to the above, I have done: 1) create a GPG key 2) adapted the "packages" file the latest create_package_descr 3) signed content 4) created /content.key As long as I do not know if I am doing things correctly, I can't put anything in bugzilla. :-( houghi -- Nutze die Zeit. Sie ist das Kostbarste, was wir haben, denn es ist unwiederbringliche Lebenszeit. Leben ist aber mehr als Werk und Arbeit, und das Sein wichtiger als das Tun - Johannes Müller-Elmau