Red Hat has released the second beta release of RPM 6.0, which will be included in the fall release of the Fedora distribution. Linux 43. The project is used in such distributions as RHEL, Fedora, SUSE, openSUSE, ALT Linux, Pink Linux, OpenMandriva, Mageia, PCLinuxOS and Tizen. RPM code is distributed under the GPLv2 and LGPLv2 licenses. RPM version 5 was omitted to avoid conflicts with the RPM5 project, which is unrelated to Red Hat's RPM and was developed by independent developers.
Improvements in the second beta version include support for OpenPGP v6 digital signatures. The update also offers fixes related to package verification using digital signatures. General changes in the RPM 6.0 branch:
- Support for the new RPM 6 package format, which allows packages larger than 4 GB. RPM 6 uses 64-bit size fields, modernizes cryptographic structures, and adds MIME file information.
- Support for the RPM 3 format has been discontinued. Support for the RPM 4 format, which uses cpio, will be retained in full - distributions will be able to remain on the RPM 4 format at their discretion.
- By default, digital signature-based packet authentication is enabled.
- The rpmbuild utility has been updated to support automatic generation of local signatures during build, and the rpm utility has been updated to include the "--nosignature" option to force installation of a package without signature verification.
- The ability to use the Sequoia-sq toolchain, written in Rust, instead of GnuPG has been introduced.
- The development is allowed to use the C++ (C++20) language, and not only the C language.
- Implemented the ability to use multiple OpenPGP signatures for each packet.
- Support for MD5, SHA1 and DSA hashes has been discontinued.
- The rpmkeys utility has expanded its capabilities for working with keys; for example, you can use the "rpmkeys --import" command to update OpenPGP keys.
- Only full OpenPGP key identifiers and fingerprints are used.
- Added the ability to update already imported keys.
- The Python language bindings now support isolating the state of Python modules to allow them to run in multiple sub-interpreters.
Source: opennet.ru
