Re: Verification with checksum files
On Thu, Sep 16, 2021 at 02:13:01PM +0300, Renat Nurgaliyev wrote:
> are there any updates? Will it be possible to get signature files? Otherwise all bullseye cloud images don’t make
> so much sense, since it is impossible to verify if they are authentic or not.
Sorry we don't currently provide signatures. There's a wishlist bug
with some discussion, see #932943. As far as I know, no one is
working on this.
It's not ideal, but the checksums are available via https, so it's not
quite as bad as you say. But if that's not sufficient, you can clone
https://salsa.debian.org/cloud-team/debian-cloud-images/ and run a local
build.
Ross
Reply to: