Neal H. Walfield

There should be a function to read a keyring (binary, or one or more concatenated ASCII-armor blocks) and extract all of the certificates, cf. https://github.com/rpm-software-management/rpm/issues/2487 . In Sequoia, this is...

A couple of thoughts: - In non-interactive environments, the secret key material should probably not be made available to the build infrastructure. That means exactly something like gpg-agent (a daemon...

> Oh, and part of the this "automation vision" here would be automatically generating that "local builds" key so that a person just wanting to build and install rpms for...

>From the user POV, ideally one wouldn't even need the manual import (think something like auto-generated host-specific key on first boot), but that's likely too much of a sacrifice from...

> When you build locally, do you see the same failure also _without_ the patch associated with the PR in that CI job? > > This test has hardcoded checksums...

> Hmm, that's indeed strange. I tried to reproduce the same myself (using the steps you provided, thanks!) but could not - the test passed for me. > > Could...

My built `rpm` doesn't udnerstand `--xml`: ``` us@alice:/tmp/rpm/rpm/b$ ./rpm -qp --xml ./tests/rpmtests.dir/273/testing/build/RPMS/noarch/attrtest-1.0-1.noarch.rpm rpm: --xml: unknown option ``` Instead I've attached the generated rpm file (found in `tests/rpmtests.dir/273/testing/build/RPMS/noarch`). If that is...

I'd like to second this. First, requiring users to fetch keys from key servers exposes to the key server operator that they are subscribed to the keylist. This reveals meta-data,...

Thanks for this interesting feedback about the chameleon! (cc: @teythoon) > there are still significant unimplemented methods that would still be needed to satisfy qubes-gpg-client If you are thinking of...

I added a `print(data)` just before the data is inserted and I see: ``` $ ./make-sqlitedb.py Initializing new sqlite3 db with metadata version 1 Loading all valid pubkeys ... ('872AA58E2C282883',...