Can I trust RPM Fusion?
FedoraForum.org - Fedora Support Forums and Community
Results 1 to 8 of 8
  1. #1
    Join Date
    Aug 2018
    Location
    United States
    Posts
    14
    Linux (Fedora) Firefox 59.0

    Can I trust RPM Fusion?

    I was looking to install Virtualbox and other packages via rpmfusion. Can I trust it, and do they officially work with Fedora and Red Hat? I've never used it before so I don't know what to look out for. Thanks for reading

    https://rpmfusion.org/

  2. #2
    Join Date
    Apr 2018
    Location
    Finland
    Posts
    102
    Linux (Fedora) Chrome 67.0.3396.79

    Re: Can I trust RPM Fusion?

    Basically yes. Of course some common sense is always good, but I don't think it's required to use rpmfusion, so that's how safe I believe it is. Lot of stuff in there is just things that can't be added to official repos for some reasons(none of the reasons is the package being harmful).
    Last edited by keikari; 11th August 2018 at 06:26 PM.

  3. #3
    Join Date
    Jun 2004
    Location
    Maryland, US
    Posts
    7,401
    Unknown Firefox 61.0

    Re: Can I trust RPM Fusion?

    dnf will only install packages signed by the redhat gpg key. Since dnf is installing rpmfusion packages they are officially signed

  4. #4
    Join Date
    Oct 2009
    Location
    Germany
    Posts
    8
    Linux Chrome 67.0.3396.87

    Re: Can I trust RPM Fusion?

    Quote Originally Posted by marko
    dnf will only install packages signed by the redhat gpg key. Since dnf is installing rpmfusion packages they are officially signed
    rpmfusion use its on gpg key. e.g. /etc/yum.rerpos.d/rpmfusion-free-updates.repo
    Code:
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmfusion-free-fedora-$releasever

  5. #5
    Join Date
    Mar 2004
    Location
    In your closet
    Posts
    15,735
    Linux (Fedora) Firefox 61.0

    Re: Can I trust RPM Fusion?

    Yes, you can trust rpmfusion.
    Glenn
    The Bassinator

  6. #6
    Join Date
    Oct 2011
    Posts
    1,884
    Linux Chrome 67.0.3396.87

    Re: Can I trust RPM Fusion?

    Quote Originally Posted by marko
    dnf will only install packages signed by the redhat gpg key. Since dnf is installing rpmfusion packages they are officially signed
    Dnf does not check gpg keys for repoes that does not have it enabled and it will install packages from such repoes without any notice. Example for this is rawhide repo.

  7. #7
    Join Date
    Jun 2005
    Location
    Montreal, Que, Canada
    Posts
    5,480
    Linux (Fedora) Firefox 61.0

    Re: Can I trust RPM Fusion?

    dnf will install downloaded rpm files which may originate from some website. The file has to be local on your system and may not have gpgkey.

    Other than that, dnf uses enabled repositories. Fedora itself does not enable repositories for which there is no gpgkey.
    If you add a repository and force enable repository with internal parameter enabled=1 then as mentioned by "srakitnican", dnf assumes that the repository has been gpgkey checked.
    Leslie in Montreal

    Interesting web sites list
    http://forums.fedoraforum.org/showth...40#post1697840

  8. #8
    Join Date
    Nov 2006
    Location
    Detroit
    Posts
    6,734
    Linux (Fedora) Firefox 61.0

    Re: Can I trust RPM Fusion?

    Code:
    #     #  #######   #####
     #   #   #        #     #
      # #    #        #
       #     #####     #####
       #     #              #
       #     #        #     #
       #     #######   #####
    OS: Fedora 28 x86_64 | Machine: HP Pavilion a6130n | CPU: AMD 64 X2 Dual-Core 5000+ 2.6GHz | RAM: 7GB PC5300 DDR2 | Disk: 400GB SATA | Video: ATI Radeon HD 4350 512MB | Sound: Realtek ALC888S | Ethernet: Realtek RTL8201N

Similar Threads

  1. remove fusion-icon and fusion-incon-qt
    By GODhack in forum Using Fedora
    Replies: 1
    Last Post: 3rd November 2009, 04:02 PM
  2. Don't trust mount!
    By fozner in forum Using Fedora
    Replies: 7
    Last Post: 25th November 2007, 09:35 PM
  3. Trust?
    By downhillgames in forum Wibble
    Replies: 23
    Last Post: 13th August 2007, 06:41 AM
  4. Can We Trust Them To Protect Us?
    By pete_1967 in forum Wibble
    Replies: 9
    Last Post: 13th January 2007, 05:22 PM
  5. How much do you trust memtest86?
    By MakeMyDay in forum Hardware & Laptops
    Replies: 4
    Last Post: 14th September 2005, 11:34 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •