<div dir="ltr">Hi everyone,<div><br></div><div>Content signing will be a new feature at pulpcore/pulp_ansible, as other pulp plugins may implement this feature in the future, today we met and gathered some questions that may help the design.</div><div><br>Considering GnuPG<div><ul class="gmail-part" title="" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;padding-left:2em;color:rgb(51,51,51);letter-spacing:0.35px"><li class="gmail-" style="box-sizing:border-box"><span style="box-sizing:border-box"><font face="arial, sans-serif" style="">Should pulp verify signature at sync/upload time?</font></span></li><li class="gmail-" style="box-sizing:border-box;padding-top:0.25em"><span style="box-sizing:border-box"><font face="arial, sans-serif">Should pulp be able to import and retain existing signatures?</font></span></li><li class="gmail-" style="box-sizing:border-box;padding-top:0.25em"><span style="box-sizing:border-box"><font face="arial, sans-serif">Should pulp re-sign every content unit?</font></span></li><li class="gmail-" style="box-sizing:border-box;padding-top:0.25em"><span style="box-sizing:border-box"><font face="arial, sans-serif">Can we add signatures, while retaining existing ones?</font></span></li><li class="gmail-" style="box-sizing:border-box;padding-top:0.25em"><span style="box-sizing:border-box"><font face="arial, sans-serif">Is there a file format for signed collections?</font></span><ul style="box-sizing:border-box;margin-top:0px;margin-bottom:0px;padding-left:2em"><li class="gmail-" style="box-sizing:border-box"><span style="box-sizing:border-box"><font face="arial, sans-serif">Detached/attached signatures</font></span></li><li class="gmail-" style="box-sizing:border-box;padding-top:0.25em"><span style="box-sizing:border-box"><font face="arial, sans-serif">Signature of metadata inside the tarball</font></span></li></ul></li><li class="gmail-" style="box-sizing:border-box;padding-top:0.25em"><span style="box-sizing:border-box"><font face="arial, sans-serif" style="">Do we need to be backward compatible with older ansible-galaxy CLI?</font></span></li></ul><div><div dir="ltr" data-smartmail="gmail_signature"><div dir="ltr"><div dir="ltr">Best regards,</div><div dir="ltr"><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Fabricio</span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize"> </span><span style="color:rgb(0,0,0);font-family:RedHatText,sans-serif;font-size:14px;font-weight:700;text-transform:capitalize">Aguiar</span><div>Software Engineer, Pulp Project</div><div><a href="https://www.redhat.com/" style="color:rgb(0,136,206);font-family:RedHatText,sans-serif;font-size:12px;margin:0px" target="_blank">Red Hat Brazil - Latam</a><br></div><div>+55 11 999652368</div><div><img src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png" width="96" height="22"></div></div></div></div></div></div></div></div>