On Thu, 2 Dec 2021 at 14:37, Ben Cotton <bcotton@xxxxxxxxxx> wrote: > > https://fedoraproject.org/wiki/Changes/FsVerityRPM > > == Summary == > > Enable the use of fsverity for installed RPM files validation. > > == Owners == > > * Name: [[User:Dcavalca|Davide Cavalca]], [[User:Borisb|Boris > Burkov]], [[User:Filbranden|Filipe Brandenburger]], > [[User:Salimma|Michel Alexandre Salim]], [[User:Malmond|Matthew > Almond]] > * Email: dcavalca@xxxxxx, borisb@xxxxxx, filbranden@xxxxxx, > michel@xxxxxx, malmond@xxxxxx .... > ** koji integration: koji will need to add the fs-verity metadata to > packages when signing them I am going to say that this is a bigger sticking point than people are realising and this is not a F36 but a F37 change. The changes to koji, signing infrastructure and testing have to be put in place before January 19 2022 (2022-01-19) for the mass rebuild[1]. They need to have been in staging and testing before then so that bugs could be worked out and various groups could work things out. Due to various end of year holidays and 'use your PTO before its lost' schedules, many of the developers who could sign off on the changes to koji/bodhi/whatever-testing/sigul/etc depending on the changes needed are not going to be available. Even if the changes are trivial ones, this is a very short window to land things. At best for F36, I could see the changes getting put into Fedora before the beta and some packages signed. If you want this for F37, then all that work needs to be ready and done by (2022-07-20)[2]. [1] https://fedorapeople.org/groups/schedule/f-36/f-36-key-tasks.html [2] https://fedorapeople.org/groups/schedule/f-37/f-37-key-tasks.html -- Stephen J Smoogen. Let us be kind to one another, for most of us are fighting a hard battle. -- Ian MacClaren _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
