@@ -39,18 +39,18 @@ scp /etc/chelon/certs/chelon_ca.crt ~/.chelon/certs/
3939
4040``` bash
4141# Sign a single RPM (detached signature)
42- chelon-sign-rpm package.rpm
42+ chelon-sign package.rpm
4343
4444# Embed signature into RPM header (Integrated Signing)
4545# This allows 'rpm -K' to work natively
46- chelon-sign-rpm --resign package.rpm
46+ chelon-sign --resign package.rpm
4747
4848# Specify key type
49- chelon-sign-rpm --key-type legacy package.rpm
49+ chelon-sign --key-type legacy package.rpm
5050
5151# Sign multiple RPMs
5252for rpm in * .rpm; do
53- chelon-sign-rpm " $rpm "
53+ chelon-sign " $rpm "
5454done
5555```
5656
@@ -75,11 +75,14 @@ Signature saved to: /tmp/tmp.xyz123
7575### Sign Repository Metadata
7676
7777``` bash
78- # Sign repomd.xml
79- chelon-sign-repomd repodata/repomd.xml
78+ # Sign repomd.xml (auto-detects type)
79+ chelon-sign repodata/repomd.xml
80+
81+ # Explicitly specify type
82+ chelon-sign --type repodata repodata/repomd.xml
8083
8184# Specify key type
82- chelon-sign-repomd --key-type modern repodata/repomd.xml
85+ chelon-sign --key-type modern repodata/repomd.xml
8386```
8487
8588** Output:**
@@ -226,11 +229,11 @@ sign_packages:
226229
227230 # Sign all RPMs
228231 - for rpm in dist/*.rpm; do
229- chelon-sign-rpm "$rpm"
232+ chelon-sign "$rpm"
230233 done
231234
232235 # Sign repository metadata
233- - chelon-sign-repomd dist/repodata/repomd.xml
236+ - chelon-sign dist/repodata/repomd.xml
234237` ` `
235238
236239### Makefile Example
@@ -241,10 +244,10 @@ RPMS := $(wildcard dist/*.rpm)
241244sign : $(RPMS)
242245 @for rpm in $(RPMS); do \
243246 echo "Signing $$rpm..."; \
244- chelon-sign-rpm $$rpm || exit 1; \
247+ chelon-sign $$rpm || exit 1; \
245248 done
246249 @echo "Signing repository metadata..."
247- @chelon-sign-repomd dist/repodata/repomd.xml
250+ @chelon-sign dist/repodata/repomd.xml
248251
249252.PHONY : sign
250253` ` `
@@ -261,13 +264,13 @@ CHELON_TOKEN="${CHELON_TOKEN:?CHELON_TOKEN not set}"
261264# Sign all RPMs in directory
262265for rpm in "$1"/*.rpm; do
263266 echo "Signing : $rpm"
264- chelon-sign-rpm "$rpm"
267+ chelon-sign "$rpm"
265268done
266269
267270# Sign repository metadata
268271if [ -f "$1/repodata/repomd.xml" ]; then
269272 echo "Signing repository metadata"
270- chelon-sign-repomd "$1/repodata/repomd.xml"
273+ chelon-sign "$1/repodata/repomd.xml"
271274fi
272275
273276echo "All packages signed successfully"
@@ -312,10 +315,10 @@ curl -k https://gamera:5050/api/v1/keys
312315
313316``` bash
314317# Modern key (default)
315- chelon-sign-rpm package.rpm
318+ chelon-sign package.rpm
316319
317320# Legacy key (explicit)
318- chelon-sign-rpm --key-type legacy package.rpm
321+ chelon-sign --key-type legacy package.rpm
319322```
320323
321324---
@@ -422,15 +425,15 @@ sudo firewall-cmd --list-all | grep 5050
422425# Sign all RPMs in parallel (careful with rate limits)
423426
424427find dist/ -name " *.rpm" | \
425- xargs -P 4 -I {} chelon-sign-rpm {}
428+ xargs -P 4 -I {} chelon-sign {}
426429```
427430
428431### Conditional Signing
429432
430433``` bash
431434# Only sign if not already signed
432435if ! rpm -K package.rpm | grep -q " pgp" ; then
433- chelon-sign-rpm package.rpm
436+ chelon-sign package.rpm
434437fi
435438```
436439
0 commit comments