On Fri, 17 Jul 2015, Zbigniew Jędrzejewski-Szmek wrote:
[In light of
https://bugzilla.redhat.com/show_bug.cgi?id=1241383]
'dnf install --installroot=... --releasever=XX dnf' can be used to bootstrap
a Fedora chroot. The only snag is that --nogpg is often recommended, because
fedora-repos only provides the GPG keys for the current and next release.
It would be convenient (and safe!) to provide keys for past and future releases,
so such bootstrapping can be done without either importing the keys manually
and/or using --nogpg.
I thought I'd ask here first: is there a strong reason *not* to include those keys?
I see no reason not to do that. We were also going to put those keys
into DNS, pendig some changes of the OPENPGPKEY ietf draft document.
Paul