Draft Proposal: Spin Submission and Approval Process

[Jesse Keating]

On Tue, 2008-03-04 at 12:45 -0900, Jeff Spaleta wrote:
> Correct me if I'm wrong, but any sort of checksum comparison between
> multiple locally built images wouldn't work as a baseline verifier of
> which repository a spin was built from would it?  If 4 different
> people took the kickstart and rebuilt it using the livecd tools on
> different machines at different times, using packages from the fedora
> repository..they wouldn't end up with images with the same checksums
> right?

I think we'd have to do some verification of the content within the
image, not the image itself.

-- 
Jesse Keating
Fedora -- All my bits are free, are yours?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-advisory-board/attachments/20080304/16ee50d7/attachment.sig>