From: Daan De Meyer Date: Wed, 21 Jan 2026 09:05:24 +0000 (+0100) Subject: rpm: Set pkgverify_level to digest X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=41cd2067bcbc3e985418a95e2aa9f8426260136d;p=thirdparty%2Fmkosi.git rpm: Set pkgverify_level to digest This was changed to all in rpm 6.0.0, which means that rpm is checking for signatures from dnf/zypper repos that have gpgcheck=0. dnf5 was updated to deal with this but for some reason the fix isn't working in Arch and zypper doesn't deal with this at all, so revert back to the previous level until package managers can actually deal with this. --- diff --git a/mkosi/installer/rpm.py b/mkosi/installer/rpm.py index a7929f1d6..a90c59cdf 100644 --- a/mkosi/installer/rpm.py +++ b/mkosi/installer/rpm.py @@ -91,6 +91,10 @@ def setup_rpm( if dbbackend: (confdir / "macros.db_backend").write_text(f"%_db_backend {dbbackend}") + # TODO: Drop when zypper and dnf5 correctly disable signature checks for gpgcheck=0 repositories. + if not (confdir / "macros.pkgverify_level").exists(): + (confdir / "macros.pkgverify_level").write_text("%_pkgverify_level digest") + if context.config.distribution == Distribution.opensuse or ( context.config.distribution.is_centos_variant() and context.config.release == "9" ):