Re: Package and image signatures

On Thu, Jul 17, 2008 at 07:26:01AM +0200, Kalle Happonen wrote: > Hi, > would it be possible to add signatures for the packages and hashes for > the images? As well, the prebuilt image files should have at least one of: md5sum, sha1sum, or pgp signature files. -- Jeff My other computer is an a

Package and image signatures

Hi, would it be possible to add signatures for the packages and hashes for the images? The latter one should be easy and it could be pretty much automated in the build process. I agree that it doesn't help much, but it would stop some of possible malicious repo tampering. I'm not saying it will