RPM-SETUP-AUTOSIGN(1) General Commands Manual RPM-SETUP-AUTOSIGN(1)

# [NAME](#NAME)

**rpm-setup-autosign** - Set up automatic signing for rpmbuild

# [SYNOPSIS](#SYNOPSIS)

**rpm-setup-autosign** \[options]

# [DESCRIPTION](#DESCRIPTION)

**rpm-setup-autosign** is used to set up automatic signing from [**rpmbuild**(1)](/man/os/rpm/rpmbuild.1). It generates a user- and host-specific, passwordless OpenPGP key, configures [**rpmbuild**(1)](/man/os/rpm/rpmbuild.1) to use that key and exports the public key (aka certificate) for importing to the persistent [**rpm**(8)](/man/os/rpm/rpm.8) keyring.

The purpose of automatic signing is to make testing local builds painless. For distributing packages, it's recommended to use a separate signing account that cannot be compromised by a build.

# [OPTIONS](#OPTIONS)

**-p** <**gpg**|**sq**>, **--prog** <**gpg**|**sq**>

Specify the signing program to use: GnuPG or Sequoia PGP's sq.

# [CONFIGURATION](#CONFIGURATION)

On successful completion, one or more of the following macros will be configured in the user's macro configuration file. See [**rpm-config**(5)](/man/os/rpm/rpm-config.5) for details:

- **%\_openpgp\_autosign\_id**
- **%\_openpgp\_sign**

# [EXIT STATUS](#EXIT_STATUS)

On success, 0 is returned, a nonzero failure code otherwise.

# [FILES](#FILES)

*~/.config/rpm/rpmbuild-\*.asc*  
*~/.config/rpm/macros*

# [EXAMPLES](#EXAMPLES)

**rpm-setup-autosign -p sq**

Set up [**rpmbuild**(1)](/man/os/rpm/rpmbuild.1) autosigning using Sequoia-sq.

# [SEE ALSO](#SEE_ALSO)

[**rpm**(8)](/man/os/rpm/rpm.8) [**rpmsign**(1)](/man/os/rpm/rpmsign.1) [**rpmbuild**(1)](/man/os/rpm/rpmbuild.1)

**http://www.rpm.org/**

2026-10-04 RPM 6.1.0

---

Document: rpm-setup-autosign(1) from rpm 6.1.0-r2 (Chainguard OS)
Source: https://github.com/rpm-software-management/rpm