From 01a8306c56e0764557fd78f6e65f844f48827177 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E8=A3=98=E4=BD=BA?= Date: Tue, 2 Jul 2024 05:58:50 +0000 Subject: [PATCH] Use the local RPM GPG key for better security. HTTP transport is susceptible to tampering. A local GPG key file chains the trust up to the installation source, which is usually verified at download, thus becoming an anchor of trust. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 裘佺 --- generic.repo | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/generic.repo b/generic.repo index 5d0536b..1337fb0 100644 --- a/generic.repo +++ b/generic.repo @@ -12,39 +12,39 @@ name=OS baseurl=http://repo.openeuler.org/openEuler-20.03-LTS/OS/$basearch/ enabled=1 gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-20.03-LTS/OS/$basearch/RPM-GPG-KEY-openEuler +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-openEuler-20.03-LTS [everything] name=everything baseurl=http://repo.openeuler.org/openEuler-20.03-LTS/everything/$basearch/ enabled=1 gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-20.03-LTS/everything/$basearch/RPM-GPG-KEY-openEuler +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-openEuler-20.03-LTS [EPOL] name=EPOL baseurl=http://repo.openeuler.org/openEuler-20.03-LTS/EPOL/$basearch/ enabled=1 gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-20.03-LTS/OS/$basearch/RPM-GPG-KEY-openEuler +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-openEuler-20.03-LTS [debuginfo] name=debuginfo baseurl=http://repo.openeuler.org/openEuler-20.03-LTS/debuginfo/$basearch/ enabled=1 gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-20.03-LTS/debuginfo/$basearch/RPM-GPG-KEY-openEuler +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-openEuler-20.03-LTS [source] name=source baseurl=http://repo.openeuler.org/openEuler-20.03-LTS/source/ enabled=1 gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-20.03-LTS/source/RPM-GPG-KEY-openEuler +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-openEuler-20.03-LTS [update] name=update baseurl=http://repo.openeuler.org/openEuler-20.03-LTS/update/$basearch/ enabled=1 gpgcheck=1 -gpgkey=http://repo.openeuler.org/openEuler-20.03-LTS/OS/$basearch/RPM-GPG-KEY-openEuler +gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-openEuler-20.03-LTS -- Gitee