{"id":141781,"date":"2025-08-28T11:11:59","date_gmt":"2025-08-28T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vtoroj-beta-vypusk-paketnogo-menedzhera-rpm-6-0"},"modified":"2025-08-28T11:11:59","modified_gmt":"2025-08-28T09:11:59","slug":"vtoroj-beta-vypusk-paketnogo-menedzhera-rpm-6-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vtoroj-beta-vypusk-paketnogo-menedzhera-rpm-6-0","title":{"rendered":"The second beta release of the RPM package manager 6.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Red Hat has released the second beta of the RPM package manager 6.0, which will be used in the fall release of the Fedora Linux 43 distribution. The project is utilized in distributions such as RHEL, Fedora, SUSE, openSUSE, ALT Linux, Rosa Linux, OpenMandriva, Mageia, PCLinuxOS, and Tizen. The RPM code is distributed under the GPLv2 and LGPLv2 licenses. Version 5 of RPM was skipped to avoid overlaps with the RPM5 project, which is unrelated to Red Hat's RPM and was developed by independent developers. <\/p>\n
Improvements in the second beta version include support for OpenPGP v6 digital signatures. The update also offers fixes related to package verification through digital signatures. General changes in the RPM 6.0 branch include: <\/p>\n
\n
Support for the new RPM 6 package format, allowing the creation of packages larger than 4 GB. The RPM 6 format employs 64-bit fields for sizes, modernized structures related to cryptography, and added MIME information about files. <\/li>\n
Support for RPM 3 format has been discontinued. Support for RPM 4 format, which uses cpio, will be fully maintained \u2014 distributions may choose to stay on RPM 4 format. <\/li>\n
By default, package authenticity checks using digital signatures are enabled. <\/li>\n
The rpmbuild utility has been enhanced to support automatic generation of local signatures during the build process, and the rpm utility has been added with the option \u00ab\u2014nosignature\u00bb to force the installation of a package without signature verification. <\/li>\n
It is now possible to use the Sequoia-sq toolkit, written in Rust, instead of GnuPG. <\/li>\n
Development is now permitted in C++ (C++20), not just in C. <\/li>\n
Support for using multiple OpenPGP signatures for each package has been implemented. <\/li>\n
Support for MD5, SHA1, and DSA hashes has been discontinued. <\/li>\n
The rpmkeys utility has expanded its capabilities for working with keys; for example, to update OpenPGP keys, you can use the command \u00abrpmkeys \u2014import\u00bb. <\/li>\n
Only complete identifiers and fingerprint hashes of OpenPGP keys are now utilized. <\/li>\n
It is now possible to update already imported keys. <\/li>\n
In the Python language bindings, support for isolating the state of Python modules to run them in multiple sub-interpreters has been implemented. <\/li>\n<\/ul>\n