On Sun, 24 May, 2020 at 18:36, Danishka Navin <danishka(a)gmail.com>
wrote:
Hi,
Is it possible to find out all installed packages which were not
signed (installed by ignoring gpgcheck).
Start with:
rpm --query --queryformat "%{NAME} %{SIGPGP:pgpsig}\n" --all
You may need to cross-check the key ID to verify to find packages that
were signed, but you don't have the key for.