Red Hat Summit Red Hat SummitSupportConsoleDéveloppeursCommencer un essaiContact

Chapitre 4. Advanced topics

This section covers topics that are beyond the scope of the introductory tutorial but are useful in real-world RPM packaging.

4.1. Signing RPM packages
Copier lien

You can sign RPM packages to ensure that no third party can alter their content. To add an additional layer of security, use the HTTPS protocol when downloading the package.

You can sign a package by using the --addsign option provided by the rpm-sign package.

Conditions préalables

4.1.1. Creating a GPG key
Copier lien

Use the following procedure to create a GNU Privacy Guard (GPG) key required for signing packages.

Procédure

  1. Generate a GPG key pair: 

    # gpg --gen-key
    Copy to Clipboard Toggle word wrap

  2. Check the generated key pair: 

    # gpg --list-keys
    Copy to Clipboard Toggle word wrap

  3. Exporter la clé publique : 

    # gpg --export -a '<Key_name>' > RPM-GPG-KEY-pmanager
    Copy to Clipboard Toggle word wrap

    Replace <Key_name> with the real key name that you have selected.

  4. Import the exported public key into an RPM database: 

    # rpm --import RPM-GPG-KEY-pmanager
    Copy to Clipboard Toggle word wrap

4.1.2. Configuring RPM to sign a package
Copier lien

To be able to sign an RPM package, you need to specify the %_gpg_name RPM macro.

The following procedure describes how to configure RPM for signing a package.

Procédure

  • Define the %_gpg_name macro in your $HOME/.rpmmacros file as follows: 

    %_gpg_name Key ID
    Copy to Clipboard Toggle word wrap

    Replace Key ID with the GNU Privacy Guard (GPG) key ID that you will use to sign a package. A valid GPG key ID value is either a full name or email address of the user who created the key.

4.1.3. Adding a signature to an RPM package
Copier lien

This section describes the most usual case when a package is built without a signature. The signature is added just before the release of the package.

To add a signature to an RPM package, use the --addsign option provided by the rpm-sign package.

Procédure

  • Add a signature to a package: 

    $ rpm --addsign package-name.rpm
    Copy to Clipboard Toggle word wrap

    Replace package-name with the name of an RPM package you want to sign.

    Note

    You must enter the password to unlock the secret key for the signature.

Retour au début
Red Hat logoGithubredditYoutubeTwitter

Apprendre

Essayez, achetez et vendez

Communautés

À propos de la documentation Red Hat

Nous aidons les utilisateurs de Red Hat à innover et à atteindre leurs objectifs grâce à nos produits et services avec un contenu auquel ils peuvent faire confiance. Découvrez nos récentes mises à jour.

Rendre l’open source plus inclusif

Red Hat s'engage à remplacer le langage problématique dans notre code, notre documentation et nos propriétés Web. Pour plus de détails, consultez le Blog Red Hat.

À propos de Red Hat

Nous proposons des solutions renforcées qui facilitent le travail des entreprises sur plusieurs plates-formes et environnements, du centre de données central à la périphérie du réseau.

Theme

© 2025 Red Hat