[Simple-cdd-devel] Bug#862746: unblock: simple-cdd/0.6.5

[Cyril Brulebois]

Vagrant Cascadian <vagrant at debian.org> (2017-05-16):
> Package: release.debian.org
> Severity: normal
> User: release.debian.org at packages.debian.org
> Usertags: unblock
> X-Debbugs-Cc: debian-boot at lists.debian.org, simple-cdd-devel at lists.alioth.debian.org
> 
> Thanks for all your work on the Release Team!
> 
> Please unblock package simple-cdd
> 
> With the recent announcement shutting down public FTP services:
> 
>   https://lists.debian.org/debian-announce/2017/msg00001.html
> 
> This requires some significant changes in simple-cdd, as simple-cdd
> relied on Debian's FTP mirrors for downloading files discovered by FTP
> directory listing.
> 
> Now simple-cdd uses http://deb.debian.org/debian/extrafiles, an
> inline-signed list of checksums for various content in the archive
> (notably, tools/*, docs/*). This also allows signature and checksum
> verification of all downloaded files, which is a huge security
> improvement.

The introduction of this file is indeed great news.

[…]

> No changes were made to the simple-cdd-profiles udeb, so should not
> have any impact on debian-installer.

ACK. TBF I was surprised to even get this mail in the first place. ;)

[Reminds me I really should try simple-cdd one day, but too many birds,
too little time.]


KiBi.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/simple-cdd-devel/attachments/20170516/84fbb14e/attachment.sig>