[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#862746: unblock: simple-cdd/0.6.5

Vagrant Cascadian <vagrant@debian.org> (2017-05-16):
> Package: release.debian.org
> Severity: normal
> User: release.debian.org@packages.debian.org
> Usertags: unblock
> X-Debbugs-Cc: debian-boot@lists.debian.org, simple-cdd-devel@lists.alioth.debian.org
> Thanks for all your work on the Release Team!
> Please unblock package simple-cdd
> With the recent announcement shutting down public FTP services:
>   https://lists.debian.org/debian-announce/2017/msg00001.html
> This requires some significant changes in simple-cdd, as simple-cdd
> relied on Debian's FTP mirrors for downloading files discovered by FTP
> directory listing.
> Now simple-cdd uses http://deb.debian.org/debian/extrafiles, an
> inline-signed list of checksums for various content in the archive
> (notably, tools/*, docs/*). This also allows signature and checksum
> verification of all downloaded files, which is a huge security
> improvement.

The introduction of this file is indeed great news.


> No changes were made to the simple-cdd-profiles udeb, so should not
> have any impact on debian-installer.

ACK. TBF I was surprised to even get this mail in the first place. ;)

[Reminds me I really should try simple-cdd one day, but too many birds,
too little time.]


Attachment: signature.asc
Description: Digital signature

Reply to: