/yum-tools-prod

Artifact storage for Dangerzone and other non-SD .rpm packages

Primary LanguagePython

FPF Tools RPM packages LFS repo

This repository holds RPM packages served on packages.freedom.press. Currently, this includes Dangerzone.

Prerequisites

  • A Fedora machine, since we will use the RPM toolchain.
  • git-lfs to store large files.
  • gpg, for fetching the public/private keys.
  • rpm-sign, for signing the packages.

Usage

  • Set up a machine with the GPG key used for signing/verifying RPMs.

  • Copy package files to each suite in dangerzone. You may want to prune older versions as new ones are released, to keep the repo manageable.

  • Sign packages with /scripts/publish.py --sign --all. You need the private key in the GPG keyring for this action.

  • Verify package signatures with /scripts/publish.py --verify --all. You need the public key in the GPG keyring for this action.