[marionnet-1.0.x]
name=Marionnet 1.0.x
baseurl=https://www.marionnet.org/download/rpm/
enabled=1
# Signed (episode 30b). gpgcheck verifies EACH PACKAGE, repo_gpgcheck verifies the index
# (repomd.xml.asc) -- two mechanisms, unlike apt where one signature on Release chains down
# to the packages by digest.
#
# The key is a LOCAL file, put there by you, and it comes from the SOURCES and not from this
# repository: a key travelling beside the packages it signs proves no more than https already
# does. Fetch it and check its fingerprint before installing anything -- see § 3 of the INSTALL
# page, or:
#   sudo curl -o /etc/pki/rpm-gpg/RPM-GPG-KEY-marionnet \
#        https://git.launchpad.net/marionnet/plain/marionnet-archive-keyring.asc
#   gpg --show-keys /etc/pki/rpm-gpg/RPM-GPG-KEY-marionnet
gpgcheck=1
repo_gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-marionnet