On Mon, Dec 14, 2020 at 03:32:57PM -0800, Brian C. Lane wrote: > The problem I see with dropping it is that without it you do not know if > there are errors in the packages you are installing. With non-live > installs you can depend on rpm to detect that, but not with live since > we're just copying the files over. With the live media, though, it's a squashfs that gets uncompressed, right? I just did a very rudimentary test of copying the Fedora Workstation 33 squashfs.img and injecting a single random bit flip 1000 times, then running unsquashfs. Of these 1000 tests, the result was a failure to unpack (with an error code) every single time. I'm sure this isn't a cryptographically-secure verification, but it seems like a decent enough practical one. Am I missing something? It seems like the case of the live cd booting successfully but then installing a corrupted system is astronomically unlikely. -- Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> Fedora Project Leader _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
