rpm sign

.rpmmacros

# The original settings confirmed by running: rpm --showrc
# -14: __gpg      %{_bindir}/gpg2 
# -14: __gpg_check_password_cmd   %{__gpg}
#         gpg --batch --no-verbose --passphrase-fd 3 -u "%{_gpg_name}" -so -
# 
# -14: __gpg_sign_cmd     %{__gpg} 
#         gpg --batch --no-verbose --no-armor --passphrase-fd 3
#         %{?_gpg_digest_algo:--digest-algo %{_gpg_digest_algo}}
#         --no-secmem-warning
#         -u "%{_gpg_name}" -sbo %{__signature_filename} %{__plaintext_filename}

%_gpg_name hnakamur@gmail.com
%__gpg_check_password_cmd /bin/true
%__gpg_sign_cmd     %{__gpg} \
         gpg --batch --no-verbose --no-armor \
         --passphrase-file /home/admin/rpmsign-work/passphrase \
         %{?_gpg_digest_algo:--digest-algo %{_gpg_digest_algo}} \
         --no-secmem-warning \
         -u "%{_gpg_name}" -sbo %{__signature_filename} %{__plaintext_filename}

• Modify _gpg_name and the filename for --passphrase-file for your environments
• Use the fowllowing command to sign a rpm

cat /dev/null | setsid rpmsign --resign /path/to/your-rpm

• Secure distribution of RPM packages - Red Hat Customer Portal
• docker/release-rpm at 8b02a15d527edeaae9135c3f6d23948bf95efb55 · docker/docker

Thanks so much for this, I've been struggling with this!

I'm glad it helped!