If you prefer a signed format, couldn't you use the RPM, or the MSI, or the
deb format files?

I prefer the deb format files for Debian and Ubuntu because they also
install and configure log rotation, and they make the upgrade process match
the rest of the operating system.  I think the same applies for the RPM
files when used with the "yum" package manager.

Mark Waite


On Sun, Feb 23, 2014 at 7:16 PM, Yaniv Kaul <[email protected]> wrote:

>
>
> On Monday, February 17, 2014 1:43:55 PM UTC+2, maciej wrote:
>>
>>  Yaniv Kaul (2014-02-16 08:31):
>>
>> Is it possible to publish hash of the new JARs, so at least I can somehow
>> try and verify their integrity? Since it's not packaged in any signed
>> format (RPM, MSI, etc.), it's the least we can do to verify the package
>> authenticity.
>>
>>
>> Execute hash creation in shell job step and just echo it to log. That's
>> probably the simpliest solution. You could use plugins to push this
>> information to e.g. build description.
>>
>> Nux.
>>
>>
> My fault - I wasn't clear - I meant when new *Jenkins* JARs are released
> (from jenkins-ci.org ).
> Y.
>
> On Monday, February 17, 2014 1:43:55 PM UTC+2, maciej wrote:
>>
>>  Yaniv Kaul (2014-02-16 08:31):
>>
>> Is it possible to publish hash of the new JARs, so at least I can somehow
>> try and verify their integrity? Since it's not packaged in any signed
>> format (RPM, MSI, etc.), it's the least we can do to verify the package
>> authenticity.
>>
>>
>> Execute hash creation in shell job step and just echo it to log. That's
>> probably the simpliest solution. You could use plugins to push this
>> information to e.g. build description.
>>
>> Nux.
>>
>>   --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/groups/opt_out.
>



-- 
Thanks!
Mark Waite

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to