Many packages in Rawhide are not signed (528/1461). Normal ?
Le mer 13/08/2003 à 15:49, Bill Nottingham a écrit :
Féliciano Matias (feliciano.matias@free.fr) said:
Many packages in Rawhide are not signed (528/1461). Normal ?
Yes, it's normal. Signing is a manual process, it's not done all the time.
OK, it's too much work.
But what can i do if my favourite rawhide mirror is cracked ? Nothing.
At least give a signed md5sum file of all packages. Perhaps a none signed md5sum in a redhat https site is enough if you don't want to sign it manually.
If i can't confirm the source of rawhide packages, i will not use any more mirrors :-)
If RHLP and Rawhide is a success, i think it's important to find a solution.
Don't wait an accident to be forced to do something : http://lwn.net/Articles/44402/
Bill
Féliciano Matias said:
Le mer 13/08/2003 à 15:49, Bill Nottingham a écrit :
Féliciano Matias (feliciano.matias@free.fr) said:
Many packages in Rawhide are not signed (528/1461). Normal ?
Yes, it's normal. Signing is a manual process, it's not done all the time.
OK, it's too much work.
I see that as saying it's a priority thing. Signing testing packages isn't high on the priority list.
But what can i do if my favourite rawhide mirror is cracked ? Nothing.
Don't install Rawhide on an important system. Heck, I thought the definition of Rawhide was not to see if something broke, but into how many pieces.
Le jeu 14/08/2003 à 17:56, William Hooper a écrit :
Féliciano Matias said:
Le mer 13/08/2003 à 15:49, Bill Nottingham a écrit :
Féliciano Matias (feliciano.matias@free.fr) said:
Many packages in Rawhide are not signed (528/1461). Normal ?
Yes, it's normal. Signing is a manual process, it's not done all the time.
OK, it's too much work.
I see that as saying it's a priority thing. Signing testing packages isn't high on the priority list.
But what can i do if my favourite rawhide mirror is cracked ? Nothing.
Don't install Rawhide on an important system. Heck, I thought the definition of Rawhide was not to see if something broke, but into how many pieces.
I am talking about piracy, not bugs.
Féliciano Matias said:
But what can i do if my favourite rawhide mirror is cracked ? Nothing.
Don't install Rawhide on an important system. Heck, I thought the definition of Rawhide was not to see if something broke, but into how many pieces.
I am talking about piracy, not bugs.
Piracy? Now that's a term I didn't expect to see here. Maybe you mean "bad people can put code in to steal my passwords", to which I reply "Don't install Rawhide on an important system".
William Hooper (whooperhsd3@earthlink.net) said:
OK, it's too much work.
I see that as saying it's a priority thing. Signing testing packages isn't high on the priority list.
It's more of a matter of integrating a manual process (signing) with an automated process (rawhide tree composition).
There's some ideas on how to do this, but we haven't implemented any yet.
Bill