[OpenAFS] OpenAFS RPMs and GPG signatures

Jason Edgecombe jason@rampaginggeek.com
Fri, 13 Jun 2008 08:26:20 -0400

Alexander Boström wrote:
> tor 2008-06-12 klockan 16:07 +0100 skrev Simon Wilkinson:
>> Ultimately, the place you get the RPMs from is probably the  
>> key signifier of their status
> Yes.
> Btw, I think I'd be happy with gpgcheck=0 combined with a https URL for
> the yum repository, except that I'm not sure yum's HTTP client does any
> certificate validation.
Would sucking them straight out of AFS make you feel any better? You can
have the CellServDB entries hard-coded and the AFS folders can only be
modified by someone who has access.