Am Freitag, 15. Mai 2020, 09:21:27 CEST schrieb Ansgar Esztermann-Kirchner:
A solution I'd prefer woul look like this: -download the pubkey, once, on the policy server; -distribute it to the clients using CFEngine; -install away, again using CFE.
Hi Ansgar, the pubic key of the repository can be downloaded from the repository, it is located at repodata/repomd.xml.key So downloading the publick keys to your repo server should be doable, I guess. Importing to the rpm database on the client would work via rpm --import, as Andrej suggested earlier. Distributing with CFE is then your part anyway. You might need to consider the case when a repository gets a new key, though. /Andreas -- Time flies like an arrow. Fruit flies like a banana. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org