epel-release does not install because GPG check FAILED about meza HOT 3 CLOSED

thanks. I will add this to the CMTE and schedule this for a fix

CMTE at https://www.mediawiki.org/wiki/Meza/Common_Meza_Test_Environment_(CMTE)

from meza.

The getmeza.sh script could easily support installing the (appropriate, based on distribution) GPG key and Meza in general could be configured to run with localpkg_gpgcheck=1 in /etc/yum.conf

Right now, the key is installed in the base role

The current process appears to be "later" than desired since it is done on a deploy rather than on Meza installation. Since it is currently not done on Meza installation, that means the key can be skipped entirely on a controller host. So, it seems the proper way to meet the standard is to do what @cowen23 says:

getmeza.ssh should import the RPM-GPG-KEY-EPEL-8 before attempting to install.
NASA-SPEC-2601OS.RHEL8_v1.7.pdf

Aside: it would be nice to import all the vocabulary terms in that standard into a wiki glossary

from meza.

this has been fixed in the 39.x branch. Not sure what exact commit fixed it, but it is fixed.

from meza.