Project

General

Profile

Actions
Copy link

Bug #3941

closed

Install documentation for Red Hat/CentOS ignores GPG signatures!

Added by Jonathan CLARKE over 10 years ago. Updated about 9 years ago.

Status:
Released
Priority:
1
Assignee:
Jonathan CLARKE
Category:
Documentation
Target version:
2.4.9
Pull Request:
https://github.com/Normation/rudder-d...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

The current doc for installing Rudder on Red Hat/CentOS uses "gpgcheck=0", see

$ echo "[Rudder_2.7]
name=Rudder 2.7 Repository
baseurl=http://www.rudder-project.org/rpm-2.7/RHEL_6/
gpgcheck=0
" > /etc/yum.repos.d/rudder.repo

This is ridiculous, because no security-conscious user will accept this, and our packages are signed.

Please fix this ASAP and update the documentation to import the GPG signing key and not ignore GPG signatures.

Actions
Copy link

Also available in: Atom PDF