6.8.3.2. 为 PQC 配置 RPM

流程

1. 将 macros.rpmsign-sequoia 文件复制到 /etc/rpm 目录中：

   # cp /usr/share/doc/rpm/macros.rpmsign-sequoia /etc/rpm/

2. 检查生成的密钥对：

   $ sq key list --cert-email <vendor_email>

    - <ml_dsa_fingerprint>
      - user IDs:
        - <vendor_email> (authenticated)
        - <vendor_name> (authenticated)
      - created 2025-10-03 14:36:44 UTC
      - usable for signing
      - @softkeys/<ml_dsa_fingerprint>: available, unlocked
   
      - <subkey_fingerprint>
        - created 2025-10-03 14:36:44 UTC
        - usable for signing
        - @softkeys/<subkey_fingerprint>: available, unlocked

3. 将密钥指纹导出到 ~/.rpmmacros 文件：

   $ echo "%_gpg_name <ml_dsa_fingerprint>" > ~/.rpmmacros