Just noticed that (at least some - e.g. CentOS-5 kernel-debuginfo, kernel-debuginfo-common, aspell-debuginfo) debuginfo packages are not signed. Started to file a bug entry, but don't know if it is merited. Is the intent to have these packages signed? The Debuginfo Wiki page shows "gpgcheck=1".
http://wiki.centos.org/AdditionalResources/Repositories/DebugInfo
Phil
On Tue, 15 Jun 2010, Phil Schaffner wrote:
Just noticed that (at least some - e.g. CentOS-5 kernel-debuginfo, kernel-debuginfo-common, aspell-debuginfo) debuginfo packages are not signed. Started to file a bug entry, but don't know if it is merited. Is the intent to have these packages signed? The Debuginfo Wiki page shows "gpgcheck=1".
http://wiki.centos.org/AdditionalResources/Repositories/DebugInfo
It is intended, also see:
http://thomas.apestaart.org/log/?p=863
I answered Thomas after discussing with Karanbir and others. Obviously it's not a very good situation. I largely agree with Thomas' findings though, not with the tone of the message...
Dag Wieers wrote on 06/15/2010 10:45 AM: ...
It is intended, also see:
http://thomas.apestaart.org/log/?p=863
I answered Thomas after discussing with Karanbir and others. Obviously it's not a very good situation. I largely agree with Thomas' findings though, not with the tone of the message...
Just refreshed my faulty memory by reviewing previous debuginfo threads.
http://lists.centos.org/pipermail/centos-devel/2009-April/004296.html
I wonder if the resource limitations are still as severe with new infrastructure.
Phil
On 15/06/2010 16:22, Phil Schaffner wrote:
I wonder if the resource limitations are still as severe with new infrastructure.
You wont believe how hard it is to find machines with multi terrabyte storage, spread into multiple locations and still semi secure. Does not mean were not trying :)
Having said that - We are going to almost certainly need to change a few things about how vault and debuginfo are setup at the moment. And its pretty high on the agenda as we are presently rebuilding the masters and also working to move 5.4/ into vault.
- KB
-
Dag Wieers -
Karanbir Singh -
Phil Schaffner