I was setting up our spacewalk repo for ovirt due to auto
provisioning engine and node based on centos distro, but I was
surprised that you can't sign with gpg key your rpms, instead
gluster rpms is signed with key id 89ccae8b available on her site
Why you don't sign your rpms?
e.g:
$ wget
http://resources.ovirt.org/releases/3.3.2/rpm/EL/6/noarch/ovirt-engine-3....
$ rpm -K -v ovirt-engine-3.3.2-1.el6.noarch.rpm
ovirt-engine-3.3.2-1.el6.noarch.rpm:
Digest SHA1 header: OK (f8cf0a7592ae3d8d298813cf61ec8b4e2ad6b6f6)
MD5 digest: OK (bc4b66e0791b3ef5dd8e9b49828ad7d8)
instead gluster rpms:
$ wget
http://download.gluster.org/pub/gluster/glusterfs/LATEST/EPEL.repo/epel-6...
$ rpm -K -v glusterfs-3.4.2-1.el6.x86_64.rpm
glusterfs-3.4.2-1.el6.x86_64.rpm:
Header V4 RSA/SHA1 Signature, key ID 89ccae8b: NOKEY
Header SHA1 digest: OK (e71040f320da087e6e9012102e0e59f134259d2a)
V4 RSA/SHA1 Signature, key ID 89ccae8b: NOKEY
MD5 digest: OK (01e72fe3ed97ba849327cafe43ca5d45)