Bug#767253: Please provide hashes for uncompressed Translation-*

[Michael Vogt <mvo@debian.org>]

On Wed, Oct 29, 2014 at 04:28:42PM +0000, Steve McIntyre wrote:
> Hi Michael!
Hi Steve,

thanks for your quick reply!
 
> On Wed, Oct 29, 2014 at 04:31:13PM +0100, Michael Vogt wrote:
> >Package: debian-cd
> >Version: 3.1.15
> >
> >Please include the uncompressed hashes for the i18n/Translation-*
> >files in the cdrom Release file in addition to the compressed
> >ones. This is required so that apt can ensure that the hashes are
> >correct after uncompressing and will also allow us to unify the code
> >path for Packages/Translation verification in apt.
> 
> OK, no problem. Would you also like the uncompressed files too, or is
> just the hashes OK? Also: if you're revisiting this area of code, are
> we still wanting .gz files or could/should we use stronger compression
> methods?

Having the uncompressed files on the cdrom should not be needed, apt
should simply fetch the compressed ones if the uncompressed ones are
missing. It does need the hash of the uncompressed one in the Release
so that it can verify that it matches after the uncompression.

Having something stronger than gzip is certainly a good idea, apt
should deal just fine with .xz. If its easy for you then maybe we
could generate a netinst image with the above changes (plus switching
to .xz) and I can test against the current apt and fix (potential)
issue on my side. Alternatively if you could give me a quick hint how
to generate a netinst (or similar iso) I can try to generate a
testimage myself.

Thanks,
 Michael