From 163c72df6431d729173a41ec0d3229f0e2fb86f8 Mon Sep 17 00:00:00 2001 From: Joanna Rutkowska Date: Thu, 10 Nov 2011 18:03:17 +0100 Subject: [PATCH] Set gpgcheck=0 for locally-built repos This is needed for make iso to succeed with NO_SIGN=1 setting. This doesn't compromise security, because: 1) These are local reports anyway, 2) They are additioanlly verified by update_repo when NO_SIGN is not set. --- conf/qubes-x86_64.conf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/conf/qubes-x86_64.conf b/conf/qubes-x86_64.conf index d218ac2..8057a2b 100644 --- a/conf/qubes-x86_64.conf +++ b/conf/qubes-x86_64.conf @@ -30,14 +30,14 @@ cost=10 name=Qubes Local Repository baseurl=file:///tmp/qubes-installer/yum/installer/ enabled=1 -gpgcheck=1 +gpgcheck=0 gpgkey=file:///tmp/qubes-installer/keys/qubes-release-1-signing-key.asc cost=1 [qubes-dom0] name=Qubes Local Repository baseurl=file:///tmp/qubes-installer/yum/qubes-dom0/ -enabled=1 +enabled=0 gpgcheck=1 gpgkey=file:///tmp/qubes-installer/keys/qubes-release-1-signing-key.asc cost=1 @@ -45,7 +45,7 @@ cost=1 [dom0-updates] name=Qubes Dom0 Updates Local Repository baseurl=file:///tmp/qubes-installer/yum/dom0-updates/ -enabled=1 +enabled=0 gpgcheck=1 gpgkey=file:///tmp/qubes-installer/keys/qubes-release-1-signing-key.asc cost=1