On 06/29/2014 04:36 AM, Florian Weimer wrote:
On 06/29/2014 12:32 PM, drago01 wrote:
On Sun, Jun 29, 2014 at 1:55 AM, Jonathan Dieter <jdieter@xxxxxxxxx>
wrote:
2. RPM would also need to support signatures across the uncompressed
payload
as well as the compressed payload.
Well Florian said that only the header is actually signed not the
payload. So this shouldn't be necessary.
I missed that the information that the payload is XZ-compressed is
likely signed (hard to tell because the current RPM format isn't
documented). So we'd need a fake XZ implementation that produces an
essentially uncompressed data stream (xz -0 still compresses).
In the meantime, we could try to reduce the compression level to 0
unconditionally in applydeltarpm.
We can do this, but createrepo would need to store the checksum of 0
level compressed xz rpms in primary, which involve making createrepo
decompress each rpm and then recompress at level 0. Not sure what the
infra folks think about this.
I may run some tests over the next few weeks to see what implementing
this would actually take. I am on a two-month vacation, so no promises
on how quick I'll be.
Jonathan
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
