Bug#1012552: Text on cloud.d.o incorrectly says all checksums are signed
Hey Ross!
On Wed, Jun 08, 2022 at 09:57:44PM -0700, Ross Vandegrift wrote:
>Package: cloud.debian.org
>Severity: normal
>
>Hi Olaf,
>
>On Fri, Jun 03, 2022 at 10:03:35AM +0200, Olaf Seibert wrote:
>> The PGP signature files, such as SHA512SUMS.sign, are missing from the pages https://cdimage.debian.org/images/cloud/bullseye/latest/ and https://cloud.debian.org/images/cloud/bullseye/latest/. They are promised at https://cdimage.debian.org/images/cloud/ and https://cloud.debian.org/images/cloud/.
>
>The promises here are misleading - they only apply to the images from the older
>OpenStack process, in the OpenStack/ directory. The other images in the
>per-release directories are built by a pipeline on salsa, and we do not
>currently have signing infrastructure in place.
>
>I'm filing this bug to clarify the text on https://cdimage.debian.org/cdimage/cloud/
I've just given you developer access to the repo at
https://salsa.debian.org/images-team/setup. Feel free to make changes
to the file you want - it's in
publish-docs/images-cloud-HEADER.html
--
Steve McIntyre, Cambridge, UK. steve@einval.com
“Rarely is anyone thanked for the work they did to prevent the
disaster that didn’t happen.”
-- Mikko Hypponen (https://twitter.com/mikko/)
Reply to: