On Thu, Aug 25, 2022 at 02:47:53PM +0100, Richard W.M. Jones wrote:
On Wed, Aug 24, 2022 at 12:31:29PM -0700, Adam Williamson wrote:
> so, from this we learn that the change would prevent PackageKit (and
> presumably other tools) from being able to read old Fedora signing
> keys; I'm not sure if that's a problem or not.
YES - virt-v2v, libguestfs etc relies on being able to inspect old RPM
databases.
This inspection takes place inside the libguestfs appliance VM
though, right ? IOW can libguestfs ensure that its appliance
filesystem sets up crypto-policies in LEGACY mode, regardless
of what policy the host launching libguestfs is using.
With regards,
Daniel
--
|:
https://berrange.com -o-
https://www.flickr.com/photos/dberrange :|
|:
https://libvirt.org -o-
https://fstop138.berrange.com :|
|:
https://entangle-photo.org -o-
https://www.instagram.com/dberrange :|