Draft Proposal: Spin Submission and Approval Process
jkeating at redhat.com
Tue Mar 4 21:47:44 UTC 2008
On Tue, 2008-03-04 at 12:45 -0900, Jeff Spaleta wrote:
> Correct me if I'm wrong, but any sort of checksum comparison between
> multiple locally built images wouldn't work as a baseline verifier of
> which repository a spin was built from would it? If 4 different
> people took the kickstart and rebuilt it using the livecd tools on
> different machines at different times, using packages from the fedora
> repository..they wouldn't end up with images with the same checksums
I think we'd have to do some verification of the content within the
image, not the image itself.
Fedora -- All my bits are free, are yours?
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 197 bytes
Desc: This is a digitally signed message part
More information about the fedora-advisory-board