rpmfusion
| Version | 2026.227.0830 |
| Repo | box/github.com/opencharly/layer-rpmfusion:v2026.239.1634 |
Enables the RPM Fusion free and nonfree Fedora repositories. Installs the rpmfusion-free-release and rpmfusion-nonfree-release packages from download.rpmfusion.org with their OpenPGP signatures VERIFIED, by importing the RPM Fusion keys from Fedora’s own signed distribution-gpg-keys package first. Each release package registers its RPM Fusion repo definitions under /etc/yum.repos.d/ and drops the repo signing-key FILES under /etc/pki/rpm-gpg/ — it does NOT import them into the rpm database, which is why the key-import step in the plan below is a separate step rather than a side effect. Verifiable because both release packages land in the rpm database, their .repo files appear on disk, and the imported keys are queryable via rpm -q gpg-pubkey.
Acceptance plan
Section titled “Acceptance plan”This candy’s plan: — the runnable spec charly check executes against a live deployment. check: steps are idempotent probes; run: steps change state.
| Intent | Step |
|---|---|
run |
import the RPM Fusion keys from Fedora’s signed distribution-gpg-keys, then install both release packages with their signatures verified |
check |
the RPM Fusion free signing key is in the rpm database, proving the release packages were verified rather than trusted blind |
check |
the RPM Fusion free repo definition file is present on disk |
check |
the rpmfusion-free-release package is recorded in the rpm database |
check |
the RPM Fusion nonfree repo definition file is present on disk |
check |
the rpmfusion-nonfree-release package is recorded in the rpm database |
check |
the free repo file declares the rpmfusion-free repository section header |