From 5ee0faa64ec08e0d3bc8da09f8c95a9f404e583d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Tue, 17 Jun 2025 00:45:34 +0200
Subject: [PATCH] vmupdate: answer "yes" to the import key question

When fetching repository metadata for the first time, dnf will ask for
confirmation on importing metadata signing key. Since the key is
imported from the local filesystem, it's safe to do, so do it
automatically.

QubesOS/qubes-issues#9807
---
 vmupdate/agent/source/dnf/dnf_cli.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/vmupdate/agent/source/dnf/dnf_cli.py b/vmupdate/agent/source/dnf/dnf_cli.py
index 80d530e..20cb0bc 100644
--- a/vmupdate/agent/source/dnf/dnf_cli.py
+++ b/vmupdate/agent/source/dnf/dnf_cli.py
@@ -53,6 +53,7 @@ def refresh(self, hard_fail: bool) -> ProcessResult:
         cmd = [self.package_manager,
                "-q",
                "check-update",
+               "--assumeyes",
                f"--setopt=skip_if_unavailable={int(not hard_fail)}"]
         result_check = self.run_cmd(cmd)
         # ret_code == 100 is not an error