I am not very familiar with using yum to install packages. In a previous life I used apt.
Currently, I am looking at some instructions to run
# yum install http://example.com/package.rpm
which apparently will subscribe to a particular repository, from which further packages can be downloaded. Is this a safe thing to do?
For comparison, I know that apt packages have gpg signatures which means that downloads over http are not a problem. As described here. And when downloading packages outside the main repositories with apt, you can manually add a gpg key for apt to accept, to ensure that any non-standard packages have the same trusted source.
If I run the above command, will yum ask me to accept a gpg key before it starts installing things, or could it just install anything?
In case it is relevant, my
/etc/yum.conf file contains
gpgcheck=1 inside the