Skip to content

Commit

Permalink
packages: Enable GPG signature check for base RPM repositories
Browse files Browse the repository at this point in the history
While the contents of a buildroot may not be signed, any packages that are
installed from the distribution's base repositories should always be.
  • Loading branch information
dpward committed Mar 10, 2024
1 parent 791df6e commit b8163fe
Showing 1 changed file with 0 additions and 3 deletions.
3 changes: 0 additions & 3 deletions src/ansible/roles/packages/tasks/Fedora.yml
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,6 @@
- python3-pip
- sudo
- systemd
disable_gpg_check: yes
when: "'base_ground' in group_names"

- name: Install extended set of packages
Expand Down Expand Up @@ -91,7 +90,6 @@
- tmate
- tmux
- vim
disable_gpg_check: yes
when:
- "'base_ground' in group_names"
- extended_packageset
Expand Down Expand Up @@ -138,7 +136,6 @@
- realmd
- tcpdump
- wireshark-cli
disable_gpg_check: yes
when: "'base_client' in group_names"

- name: Install packages for LDAP base image
Expand Down

0 comments on commit b8163fe

Please sign in to comment.