Verify RPM signatures when building ISO

livecd-tools-21.1.verify.signatures.patch

@@ -0,0 +1,22 @@
+diff --git a/imgcreate/creator.py b/imgcreate/creator.py
+index 156a95b..02b0cac 100644
+--- a/imgcreate/creator.py
++++ b/imgcreate/creator.py
+@@ -592,7 +592,7 @@ class ImageCreator(object):
+                 cmd = ["/usr/sbin/urpmi", 
+                        "--auto", "--split-length", "0", 
+                        "--fastunsafe", "--nolock", "--ignorearch", 
+-                       "--no-verify-rpm", "--no-suggests", 
++                       "--no-suggests", 
+                        "--urpmi-root", urpmi_conf, 
+                        "--root", self._instroot, 
+                        'basesystem']
+@@ -605,7 +605,7 @@ class ImageCreator(object):
+                 subprocess.check_call(cmd)
+ 
+             print "Now let's install all other packages"
+-            subprocess.check_call(["/usr/sbin/urpmi", "--auto", "--no-suggests", "--fastunsafe", "--debug", "--no-verify", "--urpmi-root", urpmi_conf, "--root", self._instroot] + packages)
++            subprocess.check_call(["/usr/sbin/urpmi", "--auto", "--no-suggests", "--fastunsafe", "--debug", "--urpmi-root", urpmi_conf, "--root", self._instroot] + packages)
+         except subprocess.CalledProcessError, err:
+             raise CreatorError("Package installation failed, error code %d" % err.returncode)
+ 

livecd-tools.spec

@@ -5,7 +5,7 @@
 Summary: Tools for building live CDs
 Name: livecd-tools
 Version: 21.1
-Release: 24
+Release: 25
 Epoch: 1
 License: GPLv2
 Group: System/Base
@@ -31,6 +31,7 @@ Patch15: livecd-tools-21.1.secureboot.unsigned.kernel.patch
 Patch17: livecd-tools-21.1.efi.grub.cfg.echo.patch
 Patch18: livecd-tools-21.1.fixed.boot.menu.os.name.patch
 Patch19: livecd-tools-21.1.support.efi32.patch
+Patch20: livecd-tools-21.1.verify.signatures.patch
 
 Requires: python-imgcreate = %{epoch}:%{version}-%{release}
 Requires: mkisofs