On Sat, 2024-03-02 at 10:53 +0100, Andreas Metzler wrote:
>
>
> cd / && find /var/lib/dpkg/info -name '*.md5sums' -exec md5sum --
> check --quiet {} +
>
➜ sudo rm /usr/share/doc/zsh/changelog.gz
➜ debsums -c zsh
debsums: missing file /usr/share/doc/zsh/changelog.gz (from zsh
package)
(By default it scans all packages...)
If md5sums are really something the Debian project should trust on and
if the way we ship them without an easy way to verify them.... its a
different issue.
--
Bernd Zeimetz Debian GNU/Linux Developer
http://bzed.de http://www.debian.org
GPG Fingerprint: ECA1 E3F2 8E11 2432 D485 DD95 EB36 171A 6FF9 435F
