如何在python中使用签名来自动化rpmbuild？

import subprocess
import gnupg
import shutil

# 生成密钥对
gpg = gnupg.GPG()
key = gpg.gen_key(gpg.gen_key_input(key_type="RSA", key_length=2048, passphrase="your_passphrase"))

# 构建.spec文件
spec_content = """
Name: your_package
Version: 1.0
Release: 1
Summary: Your package summary
License: Your package license
BuildArch: noarch

%description
Your package description

%prep
# 执行预处理操作

%build
# 执行构建操作

%install
# 执行安装操作

%files
# 列出需要打包的文件

%changelog
# 记录变更历史
"""

with open("your_package.spec", "w") as spec_file:
    spec_file.write(spec_content)

# 执行rpmbuild命令
subprocess.run(["rpmbuild", "-ba", "your_package.spec"])

# 对软件包进行签名
subprocess.run(["rpmsign", "--addsign", "your_package.rpm"])

# 移动生成的软件包
shutil.move("your_package.rpm", "/path/to/destination/your_package.rpm")