[Q&A] Package are not signed ?

[henri9813]

What is a problem?

Hello,

I installed the fluentd package using the repo

[fluent-package-lts]
name=Fluentd Project
baseurl=https://packages.treasuredata.com/lts/5/redhat/$releasever/$basearch
enabled=1
gpgcheck=1
gpgkey=https://packages.treasuredata.com/GPG-KEY-td-agent
       https://packages.treasuredata.com/GPG-KEY-fluent-package

But after install

# dnf info fluent-package
Last metadata expiration check: 0:00:04 ago on Tue Apr 22 00:02:42 2025.
Installed Packages
Name         : fluent-package
Version      : 5.0.6
Release      : 1.el9
Architecture : x86_64
Size         : 66 M
Source       : fluent-package-5.0.6-1.el9.src.rpm
Repository   : @System
From repo    : fluent-package-lts
Summary      : All in one package of Fluentd
URL          : https://docs.fluentd.org/
License      : ASL 2.0
Description  : The stable distribution of Fluentd, formerly known as td-agent.

# rpm -q --qf '%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH} => GPG: %{SIGGPG:pgpsig}\n' fluent-package
fluent-package-5.0.6-1.el9.x86_64 => GPG: (none)

The package is not signed at all.

Is it normal ?

Describe the configuration of Fluentd

No response

Describe the logs of Fluentd

No response

Environment

- Fluentd version: 1.16.7
- TD Agent version: ?
- Fluent Package version: 5.0.6
- Docker image (tag):
- Operating system: Rocky linux 9
- Kernel version: 5.14.0-503.15.1.el9_5.x86_64

[daipom]

Thanks for your report.
We will check it.