From 86bd1d81cbcba504661ef26535ed318f508f6cab Mon Sep 17 00:00:00 2001 From: justchris1 <30219018+justchris1@users.noreply.github.com> Date: Fri, 18 Mar 2022 09:05:12 -0400 Subject: [PATCH] installation: linux: redhat-centos.md: Update the suggested configuration of the YUM repo to enable gpg checks on the repository metadata as well for security reasons Signed-off-by: justchris1 <30219018+justchris1@users.noreply.github.com> --- installation/linux/redhat-centos.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/installation/linux/redhat-centos.md b/installation/linux/redhat-centos.md index 7853db674..e79d81224 100644 --- a/installation/linux/redhat-centos.md +++ b/installation/linux/redhat-centos.md @@ -28,11 +28,12 @@ name = Fluent Bit baseurl = https://packages.fluentbit.io/centos/7/$basearch/ gpgcheck=1 gpgkey=https://packages.fluentbit.io/fluentbit.key +repo_gpgcheck=1 enabled=1 ``` -It is best practice to always enable the _gpgcheck_ for security reasons. -All our packages are signed. +It is best practice to always enable the _gpgcheck_ and _repo_gpgcheck_ for security reasons. +We sign our repository metadata as well as all ofour packages. ### GPG key updates