Commit Graph

7 Commits

Author SHA1 Message Date
Mustafa Gezen
6e77412823
Import RPM key to verify signature and stop blocking on failure
Previously Keykeeper had a faulty verify check, where `rpm --checksig` didn't actually work because the RPM key was never imported. This would normally be caught but the TaskSignature creation was done after every signature without a transaction. That led to the activity succeeding next launch with either a faulty signed RPM or a correctly signed RPM.

We caught all instances of this by verifying signature of all artifacts during compose, but it was an annoying problem that we would run into occasionally. This should fix that.
2022-11-05 18:32:58 +01:00
Mustafa Gezen
1ffd01550a
Remove unused function (deleteGpgKey)
Signed-off-by: Mustafa Gezen <mustafa@ctrliq.com>
2022-08-17 02:13:52 +02:00
Mustafa Gezen
e810946c70
Switch to sync.Map for keywarming
Signed-off-by: Mustafa Gezen <mustafa@ctrliq.com>
2022-08-17 02:13:52 +02:00
Mustafa Gezen
70c45775cb
Remove verification step from keykeeper
Signed-off-by: Mustafa Gezen <mustafa@ctrliq.com>
2022-08-17 02:13:52 +02:00
Mustafa Gezen
0a712673a7
Fix merge conflict upstream/resf
Signed-off-by: Mustafa Gezen <mustafa@ctrliq.com>
2022-08-17 02:13:29 +02:00
Mustafa Gezen
8ef874b5ae
Re-use instead of reloading pre-warmed key
Signed-off-by: Mustafa Gezen <mustafa@ctrliq.com>
2022-08-17 02:12:29 +02:00
Mustafa Gezen
ce632b9498
Initial commit 2022-07-07 22:13:21 +02:00