Changes

Jump to: navigation, search

Signing and Creating a Repository for RPM Packages

163 bytes added, 13:20, 17 July 2017
Creating the Repo and Key Files
# Sign those packages with: <code>rpm --addsign <i>packagefile</i></code>
=== Creating a DNF/YUM repository ===
A dnf/yum repository is just a directory of packages and some metadata. The repository client ''dnf'' is similar to the older client ''yum'' (which is still used in some versions of CentOS and older versions of Fedora).
To create a yum repository:
# Create a directory that can be served. The protocol used to serve that directory could be http, ftp, nfs, or something else (the files can be served by putting them on a DVD too!). For http, create the directory within <code>/var/www/html</code>
# Put your signed packages in that directory.
# Create a new repository file in <code>/etc/yum.repos.d</code> by copying and modifying an existing file in that directory. Keep <code>gpgcheck=1</code> but comment out the <code>gpgkey</code> file.
# Confirm that you cannot install from that repository using dnf or yum, since the gpgkey is unavailable to dnf/yum/rpm.
# Uncomment the <code>gpgkey</code> line, and point it to a new file within <code>/etc/pki/rpm-gpg/</code>
# Create the ASCII gpg public key file by running (as your regular user): <code>gpg --export --armour <i>e-mail-address</i></code> and saving the output to the new filename (note: you'll need to be your regular user to perform the export, but the root user to install the file).

Navigation menu