When signed RPM is written to disc, it is created in the target location directly.
It is thus possible for a random consumer to read the file while it's being written and seeing an RPM parse error on it.
Would it be possible to write the file atomically?
hmm, yes - we can improve this splice_rpm_sighdr should use temp file.
splice_rpm_sighdr
Metadata Update from @tkopecek: - Custom field Size adjusted to None
Metadata Update from @tkopecek: - Issue set to the milestone: 1.28
PR 3239
Metadata Update from @tkopecek: - Issue tagged with: testing-ready
Commit 3faca02c fixes this issue
Commit c1920b33 fixes this issue
Commit e73b0680 fixes this issue
Commit 968eb610 fixes this issue
Metadata Update from @jobrauer: - Issue tagged with: testing-done
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/koji/koji/issues/3097
Please continue any further discussion there.