All we want to achieve here is to make moving from one keystore to another
POSSIBLE. Doesn't need to be grandma easy, this is not something normal users
are expected to do ever, it's expected to be scripted by distros instead (and
advanced users are expected to know what they're doing).
Here's the essential AC for that:
- Add an API + `--rebuild`cli for rebuilding the keystore:
- By default, rebuilds the currently configured keystore by trying to reimport
the existing keys (converting short keyids to long ones in the process)
- Optionally convert from one keystore type to another.
The exact UI for the conversion is still a bit of a questionmark, but since the
primary usecase is migrating to another keystore after an rpm upgrade, this
needs to be done by the new version whose configuration is already in place and
possibly now pointing to an empty keystore. So maybe it should be just `--from
<keystore>` on the cli as already discussed above. It's not like there dozens
of alternatives to choose from, 'rpmdb' is the thing where the vast majority
will be migrating from.
--
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3347#issuecomment-2615430940
You are receiving this because you are subscribed to this thread.
Message ID: <rpm-software-management/rpm/issues/3347/[email protected]>
_______________________________________________
Rpm-maint mailing list
[email protected]
https://lists.rpm.org/mailman/listinfo/rpm-maint
