diff options
| author | Philip Withnall <withnall@endlessm.com> | 2017-08-08 18:58:52 +0100 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2017-08-08 18:08:05 +0000 |
| commit | 8c148eb7e1d7d5d7317e144b336b64aa39a57215 (patch) | |
| tree | 75ceecc61c5b58180c2d2aca392dc6c711794938 /src/libostree/ostree-repo-finder-mount.c | |
| parent | 8642ef5ab3fec3ac8eb8f193054852f83a8bc4d0 (diff) | |
| download | ostree-8c148eb7e1d7d5d7317e144b336b64aa39a57215.tar.gz | |
lib/repo-finder: Emit gpg-verify-summary=false in dynamic remote config
When returning results from finding repos, set gpg-verify-summary=false
in their configs, since any pulls from such remotes will necessarily
involve collection IDs, and hence should be using the unsigned summary
support. In the intended deployment mode for P2P transmission of OSTree
refs, summaries *cannot* be signed, so setting gpg-verify-summary=true
would cause all the pulls to fail.
The unsigned summary support is the move of repository metadata from
the summary file (not spliceable) to the well-known ostree-metadata ref
(spliceable, as it can exist for multiple collection IDs in the same
repository).
Signed-off-by: Philip Withnall <withnall@endlessm.com>
Closes: #1066
Approved by: cgwalters
Diffstat (limited to 'src/libostree/ostree-repo-finder-mount.c')
| -rw-r--r-- | src/libostree/ostree-repo-finder-mount.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/libostree/ostree-repo-finder-mount.c b/src/libostree/ostree-repo-finder-mount.c index ffe31e99..1eb3d31d 100644 --- a/src/libostree/ostree-repo-finder-mount.c +++ b/src/libostree/ostree-repo-finder-mount.c @@ -392,9 +392,10 @@ ostree_repo_finder_mount_resolve_async (OstreeRepoFinder *finde g_clear_pointer (&remote->keyring, g_free); remote->keyring = g_strdup (repo->keyring); + /* gpg-verify-summary is false since we use the unsigned summary file support. */ g_key_file_set_string (remote->options, remote->group, "url", repo->uri); g_key_file_set_boolean (remote->options, remote->group, "gpg-verify", TRUE); - g_key_file_set_boolean (remote->options, remote->group, "gpg-verify-summary", TRUE); + g_key_file_set_boolean (remote->options, remote->group, "gpg-verify-summary", FALSE); /* Set the timestamp in the #OstreeRepoFinderResult to 0 because * the code in ostree_repo_pull_from_remotes_async() will be able to |