Packaging 3-rd party repositories in rpmfusion
Till Maas
opensource at till.name
Mon Feb 3 12:03:02 CET 2014
On Mon, Feb 03, 2014 at 11:30:42AM +1100, Ankur Sinha wrote:
> One concern is that some of the rpms that third parties provide do ship
> their own repo files. So, after the user installs a package, he might
> end up with two repo files? We'll have to use proper conflicts in the
> specs. What about GPG keys? (The adobe-release package ships a repo file
> and a GPG key.)
If RPMFusion ships configuration for other repos, the package should
also include the GPG key, set gpgcheck=1 and include only the intended
packages with includepkgs to minimise security problems.
Regards
Till
More information about the rpmfusion-developers
mailing list