Ignore packages signatures when using resolvo for now

Signed-off-by: Julien Jerphanion <git@jjerphan.xyz>
This commit is contained in:
Julien Jerphanion 2025-05-22 11:27:00 +02:00
parent 71e83ac748
commit 0a2a79d9aa
No known key found for this signature in database
GPG Key ID: 56B690A97C2E35B8
2 changed files with 28 additions and 26 deletions

View File

@ -113,19 +113,20 @@ namespace mamba::solver::resolvo
.or_else([](specs::ParseError&& err) { throw std::move(err); })
.value();
auto signatures = [&]
{
auto maybe_sigs = repodata_doc["signatures"];
if (!maybe_sigs.error() && verify_artifacts)
{
return std::make_optional(maybe_sigs);
}
else
{
LOG_DEBUG << "No signatures available or requested. Downloading without verifying artifacts.";
return decltype(std::make_optional(maybe_sigs)){};
}
}();
// TODO: it does not seems resolvo can handle setting signatures on solvables for now
// auto signatures = [&]
// {
// auto maybe_sigs = repodata_doc["signatures"];
// if (!maybe_sigs.error() && verify_artifacts)
// {
// return std::make_optional(maybe_sigs);
// }
// else
// {
// LOG_DEBUG << "No signatures available or requested. Downloading without verifying
// artifacts."; return decltype(std::make_optional(maybe_sigs)){};
// }
// }();
// Process packages.conda first
if (auto pkgs = repodata_doc["packages.conda"]; !pkgs.error())

View File

@ -767,19 +767,20 @@ parse_repodata_json(
.or_else([](specs::ParseError&& err) { throw std::move(err); })
.value();
auto signatures = [&]
{
auto maybe_sigs = repodata["signatures"];
if (!maybe_sigs.error() && verify_artifacts)
{
return std::make_optional(maybe_sigs);
}
else
{
LOG_DEBUG << "No signatures available or requested. Downloading without verifying artifacts.";
return decltype(std::make_optional(maybe_sigs)){};
}
}();
// TODO: it does not seems resolvo can handle setting signatures on solvables for now
// auto signatures = [&]
// {
// auto maybe_sigs = repodata["signatures"];
// if (!maybe_sigs.error() && verify_artifacts)
// {
// return std::make_optional(maybe_sigs);
// }
// else
// {
// LOG_DEBUG << "No signatures available or requested. Downloading without verifying
// artifacts."; return decltype(std::make_optional(maybe_sigs)){};
// }
// }();
// Process packages.conda first
if (auto pkgs = repodata["packages.conda"]; !pkgs.error())