Fedora 44 introduces the system‑wide change Enforcing signature checking by default, which tightens RPM’s default package verification behavior (via %_pkgverify_level and related settings). In the 2025-12-10 community meeting, we identified this as potentially impacting rpm-ostree layering. We need to ensure rpm-ostree continues to work correctly with the new defaults, especially for:
- Layering packages from Fedora’s signed repositories.
- The behavior and support expectations around layering custom/unsigned RPMs.