Wormhole RPM Repository Bootstrap
=================================

Package:
  wormhole-repository

Version:
  1.0.0-1

Purpose
-------

This package installs the Wormhole RPM repository public key and
automatically configures the correct Wormhole repository for the
supported RPM-based operating system.

Supported systems
-----------------

Architecture:
  x86_64 only

Fedora:
  35
  36
  37
  38
  39
  40
  41
  42
  43
  44
  45
  46
  47

CentOS Linux:
  8

CentOS Stream:
  8

Unknown distributions, unsupported versions and unsupported
architectures fail closed.

Repository
----------

Base URL:

  https://rpm.wormhole.dns.army

Generated repository file:

  /etc/yum.repos.d/wormhole.repo

Installed public key:

  /etc/pki/rpm-gpg/RPM-GPG-KEY-WORMHOLE

Repository verification is configured with:

  gpgcheck=1
  repo_gpgcheck=1
  sslverify=1

The package does not run dnf update, dnf upgrade, yum update or any
equivalent package-management operation automatically.

Normal bootstrap flow
---------------------

Install the bootstrap RPM:

  dnf install ./wormhole-repository-1.0.0-1.noarch.rpm

Refresh repository metadata:

  dnf makecache

Install the Wormhole template package:

  dnf install wormhole-domu-template

The repository configuration is generated from /etc/os-release.

Existing repository configuration
---------------------------------

If /etc/yum.repos.d/wormhole.repo already exists and differs from the
generated configuration, the existing regular file is backed up under:

  /var/backups/wormhole-repository/

Symlinks and non-regular files are refused.

Removal
-------

On final package removal, wormhole.repo is removed only when it still
matches the exact configuration previously generated by this package.

If the administrator modified wormhole.repo, the file is preserved.

Signing
-------

The RPM package itself is signed separately by the Wormhole offline
RPM signing key.

The private signing key is not stored in this package and must never be
present on the repository server.
