Created attachment 3636 [details]
Patch to sign one rpm file at a time.

Inheriting sign_rpm causes meta/lib/oe/gpg_sign.py to be called in do_package_write_rpm to sign all the rpms generated by each recipe.

This works fine except for certain recipes (linux-yocto and glibc-locale) that generate a huge number of packages.

The code in sign_rpms() puts all the package file names in one command line, which overflows and causes the sign command to fail.

I patched the code to sign one file at a time (attached) and the build succeeded.

As discussed on the yocto list, the ideal solution may lie in between the extremes of signing all files at once versus one at a time.