<div dir="ltr">At this time Pulp always regenerates the repo metadata. In Pulp 3, we plan to add the ability to mirror the metadata. However, the development of that feature has not started yet. </div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 8, 2020 at 3:02 PM James Cassell <<a href="mailto:fedoraproject@cyberpear.com">fedoraproject@cyberpear.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> On Tue, Sep 8, 2020, at 11:12 AM, Neal Gompa wrote: > On Fri, Sep 4, 2020 at 1:10 PM Brian Stinson <<a href="mailto:brian@bstinson.com" target="_blank">brian@bstinson.com</a>> wrote: > > > > While we want signed repodata to be *available* to folks who want to enable it, We don’t want it necessarily to be the default for all users. We want it to be a decision that folks make for their own sites. > > > > This is a very bizarre stance to take. Enabling repo_gpgcheck for > the CentOS provided repos in their repo files should not harm anything > else, and only further ensures the integrity of the repository > content. > > Is there a compelling reason to *not* change the defaults? Because > from my perspective, I don't see any. > The only reason might be to prevent breaking folks who regenerate the repomd locally. Not sure whether pulp preserves the original md or regenerates its own. (I always use exactly the upstream repomd for precisely this reason of avoiding breaking repo_gpgcheck, which is often on "security hardening" checklists.) V/r, James Cassell > > > -- > 真実はいつも一つ！/ Always, there's only one truth! > _______________________________________________ > CentOS-devel mailing list > <a href="mailto:CentOS-devel@centos.org" target="_blank">CentOS-devel@centos.org</a> > <a href="https://lists.centos.org/mailman/listinfo/centos-devel" rel="noreferrer" target="_blank">https://lists.centos.org/mailman/listinfo/centos-devel</a> > _______________________________________________ Pulp-dev mailing list <a href="mailto:Pulp-dev@redhat.com" target="_blank">Pulp-dev@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pulp-dev" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-dev</a> </blockquote></div>