tag 420763 wontfix
thanks

Hi,

On Tue, 2007-04-24 at 16:40:54 +0200, Michelle Konzack wrote:
> Package: dpkg
> Version: 1.10.28
> Severity: wishlist

> I am Debian GNU/Linux Consultant in Strasbourg/France and building my own
> Debian-CD's for installation at my customers.  Those CD's contain beside
> the standard D-I per customer config packages.
> 
> The problem is that such Packages can contain sensible data of customers
> so my idea is, to add GnuPG cryption support for the Debian packages.

> I would suggest to add a new header like "Crypted: <gpg_key>" and then
> crypt the data.tar.gz (in the Debian package).
> 
> dpkg (also apt-get, aptitude and synaptic) should detect the additional
> header and act as required.
> 
> Since the CRYPT option is only an extension, it will not affect ANY
> existing Debian packages.
> 
> Also should "dpkg-buildpackage" support the new extension to crypt the
> data part.
> 
> Additional note:
> 
> The CRYPT extension should only affect Binary-Packages and not sources.

Hmm, this seems like a huge over-complication for something that might
have this small usage. I'll be tagging this wontfix, but would
probably be better to just close to not clutter the BTS.

You can instead encrypt yout iso image, and mount it later on, which
should be already supported by at least the Linux kernel. Also you can
use apt-https (available in experimental) for "secure" repositories
and transmission of those packages.

regards,
guillem


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to