Skip to content

rpmfusion

Version 2026.227.0830
Repo box/github.com/opencharly/layer-rpmfusion:v2026.239.1634

Enables the RPM Fusion free and nonfree Fedora repositories. Installs the rpmfusion-free-release and rpmfusion-nonfree-release packages from download.rpmfusion.org with their OpenPGP signatures VERIFIED, by importing the RPM Fusion keys from Fedora’s own signed distribution-gpg-keys package first. Each release package registers its RPM Fusion repo definitions under /etc/yum.repos.d/ and drops the repo signing-key FILES under /etc/pki/rpm-gpg/ — it does NOT import them into the rpm database, which is why the key-import step in the plan below is a separate step rather than a side effect. Verifiable because both release packages land in the rpm database, their .repo files appear on disk, and the imported keys are queryable via rpm -q gpg-pubkey.

This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.

Intent Step
run import the RPM Fusion keys from Fedora’s signed distribution-gpg-keys, then install both release packages with their signatures verified
check the RPM Fusion free signing key is in the rpm database, proving the release packages were verified rather than trusted blind
check the RPM Fusion free repo definition file is present on disk
check the rpmfusion-free-release package is recorded in the rpm database
check the RPM Fusion nonfree repo definition file is present on disk
check the rpmfusion-nonfree-release package is recorded in the rpm database
check the free repo file declares the rpmfusion-free repository section header