Re: Bug#93612: Support for new archive structure
On Sat, 14 Apr 2001, Philip Charles wrote:
> A CD (or iso image) is essentially one file and the integrity of this can
> be verified by a single signed checksum.
No, that is such an oversimplification and what you have described of the
HURD CD's prooves that.
CD's may in fact contain content from the Debian site and it should be
possible to validate that content was part of a Debian release without
having to jump through any special hopps. That is independent of anything
else on the CDs.
> only extends to Official CDs. The parallel here is some of the rather
> awful in-house Debian archives, Debian cannot take responsibility for
> these. A verification process may be available, but people may choose not
> to use it.
Debian may not be responsible, but it does support them. There is no
reason they should loose out on verification too. Look at apt-cdrom
someday, it jumps through an unbelivable number of hoops specifically to
support non-official CD's that may have not been made according to our