TECH Signal 393
RPM 6.1 released with faster package installs and PKCS#11 signing
↗
RPM 6.1 cuts installation time by about 26% on recent kernels, adds PKCS#11 token signing, and separates the keystore lock from the transaction lock.
The install-time reduction speeds up deployment pipelines on systems running kernel 5.11+ and glibc 2.34+, shaving minutes off large updates. PKCS#11 support lets administrators use hardware-backed keys for package signing, improving supply-chain security. The new lock design prevents RPM database queries from being blocked during a transaction, reducing the chance of deadlocks in automated scripts.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
File-descriptor handling on kernel 5.11+ with glibc 2.34+ can reduce install time by roughly 26%.
The keystore now uses its own lock, fixing a regression that previously blocked all RPM database queries during a transaction.
rpmsign can now use PKCS#11 tokens, enabling hardware-backed or external cryptographic devices for package signing.
THE CLUSTER