Merge branch 'gpg' into 'master'

Set legacy crypto policy for old SHA1 keys

See merge request !230

reposync/Dockerfile

 FROM gitlab-registry.cern.ch/linuxsupport/alma9-base:latest
 
-RUN yum install -y yum-utils bc diffutils python3-requests \
+RUN yum install -y yum-utils bc diffutils python3-requests crypto-policies-scripts \
   && yum clean all
 
 RUN rm -rf /etc/yum.repos.d/*
 COPY gpgkeys/ /etc/pki/rpm-gpg/
-RUN find /etc/pki/rpm-gpg/ -type f -exec rpm --import {} \;
+# We still have plenty of gpg keys with SHA1 signatures, so we need the LEGACY crypto policy
+RUN update-crypto-policies --set LEGACY \
+  && find /etc/pki/rpm-gpg/ -type f -exec rpm --import {} \;
 COPY *.sh /root/
 COPY *.py /root/
 COPY prod.repos.d/ /root/prod.repos.d/