[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1012552: Text on cloud.d.o incorrectly says all checksums are signed



Hey Ross!

On Wed, Jun 08, 2022 at 09:57:44PM -0700, Ross Vandegrift wrote:
>Package: cloud.debian.org
>Severity: normal
>
>Hi Olaf,
>
>On Fri, Jun 03, 2022 at 10:03:35AM +0200, Olaf Seibert wrote:
>> The PGP signature files, such as SHA512SUMS.sign, are missing from the pages https://cdimage.debian.org/images/cloud/bullseye/latest/ and https://cloud.debian.org/images/cloud/bullseye/latest/. They are promised at https://cdimage.debian.org/images/cloud/ and https://cloud.debian.org/images/cloud/.
>
>The promises here are misleading - they only apply to the images from the older
>OpenStack process, in the OpenStack/ directory.  The other images in the
>per-release directories are built by a pipeline on salsa, and we do not
>currently have signing infrastructure in place.
>
>I'm filing this bug to clarify the text on https://cdimage.debian.org/cdimage/cloud/

I've just given you developer access to the repo at
https://salsa.debian.org/images-team/setup. Feel free to make changes
to the file you want - it's in

  publish-docs/images-cloud-HEADER.html

-- 
Steve McIntyre, Cambridge, UK.                                steve@einval.com
“Rarely is anyone thanked for the work they did to prevent the
 disaster that didn’t happen.”
   -- Mikko Hypponen (https://twitter.com/mikko/)


Reply to: