[Spacewalk-list] Unsigned repositories and packages

[Thomas Schweikle]

Hi!

I'm a little confused how to handle unsigned repositories you're
syncing spacewalk channels from.
Any way to have these installed without giving "--nogpgcheck" to yum/dnf?

If I wouldn't use spacewalk, /etc/yum.repos.d would hold a file with:

[epel-apache-maven]
name=maven from apache foundation.
baseurl=http://repos.fedorapeople.org/repos/dchen/apache-maven/epel-$releasever/$basearch/
enabled=1
skip_if_unavailable=1
gpgcheck=0

Thus gpgcheck for this repository where disabled and all ok installing
with yum. How to handle this if I sync to this repository with
spacewalk. Any way to tell some channels do not force packages to be
signed and then force the user of these channels to give
"--nogpgcheck" to yum or dnf?


-- 
Thomas