ceph / ceph/merfi

RFE: support "Signed-by" field

Open
#52 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
3
Forks
3
PR merge metrics
No merged PRs in 30d

Description

`Signed-By: ` is a new addition to the Debian `Release` file spec.
https://wiki.debian.org/DebianRepository/Format#Signed-By . From what I can tell, it tells clients to only accept future updates from this particular key, increasing security.

After verifying that the non-EOL Ubuntu/Debian distros can handle this field, let's support in merfi. We should be able to dynamically insert this value into the `Release` file when given a public key with `--keyfile`.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.