---
name: "rpm-setup-autosign"
section: "1"
platform: "linux"
package: "rpm-tools"
version: "6.0.1-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/rpm-setup-autosign"
---

# rpm-setup-autosign(1)

Set up automatic signing for rpmbuild

## NAME

**rpm-setup-autosign** - Set up automatic signing for rpmbuild

## SYNOPSIS

**rpm-setup-autosign** \[options\]

## DESCRIPTION

**rpm-setup-autosign** is used to set up automatic signing from [**rpmbuild**(1)](/rpmbuild/1.md). It generates a user- and host-specific, passwordless OpenPGP key, configures [**rpmbuild**(1)](/rpmbuild/1.md) to use that key and exports the public key (aka certificate) for importing to the persistent [**rpm**(8)](/rpm/8.md) keyring.

The purpose of automatic signing is to make testing local builds painless. For distributing packages, it's recommended to use a separate signing account that cannot be compromised by a build.

## OPTIONS

- **-p** \<**gpg**\|**sq**\>, **--prog** \<**gpg**\|**sq**\>

  Specify the signing program to use: GnuPG or Sequoia PGP's sq.

## CONFIGURATION

On successful completion, one or more of the following macros will be configured in the user's macro configuration file. See [**rpm-config**(5)](/rpm-config/5.md) for details:

- •

  **%\_openpgp\_autosign\_id**

- •

  **%\_openpgp\_sign**

## EXIT STATUS

On success, 0 is returned, a nonzero failure code otherwise.

## FILES

*~/.config/rpm/rpmbuild-\*.asc*\
 *~/.config/rpm/macros*

## EXAMPLES

**/usr/lib/rpm/rpm-setup-autosign -p sq**

Set up [**rpmbuild**(1)](/rpmbuild/1.md) autosigning using Sequoia-sq.

## SEE ALSO

[**rpm**(8)](/rpm/8.md) [**rpmsign**(1)](/rpmsign/1.md) [**rpmbuild**(1)](/rpmbuild/1.md)

**http://www.rpm.org/**