Skip to content

tracker: F45 change: Enforcing RPM signature checking by default #2085

@marmijo

Description

@marmijo

Fedora 44 introduces the system‑wide change Enforcing signature checking by default, which tightens RPM’s default package verification behavior (via %_pkgverify_level and related settings). In the 2025-12-10 community meeting, we identified this as potentially impacting rpm-ostree layering. We need to ensure rpm-ostree continues to work correctly with the new defaults, especially for:

  • Layering packages from Fedora’s signed repositories.
  • The behavior and support expectations around layering custom/unsigned RPMs.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions