Here is a more detailed update on the design of the fsverity support I have
been working on for rpm.
I now have code which I believe works correctly, and I'd love some feedback on
it. I am sure I got some things wrong. The code can be found in my cloned repo
here[1]
fsverity itself provides bl
This pull request **introduces 1 alert** when merging
90e68fa8f27a594067763476e69c723ab8beb971 into
022b48d21092f8a79103fa9318376fb26911e571 - [view on
LGTM.com](https://lgtm.com/projects/g/rpm-software-management/rpm/rev/pr-6f63a05ddcb5d681a51a46456602e60a7916851b)
**new alerts:**
* 1 for Mod
I've merged the first fixup. Leaving the second one pending depending on
whether we decide to merge pythondistdeps here or split off to a new package.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-so
Note that this is incomplete: there needs to be another commit to define which
tag to use for ed25519 signatures.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1202#issue
You can view, comment on, or merge this pull request online at:
https://github.com/rpm-software-management/rpm/pull/1202
-- Commit Summary --
* Support the EdDSA public key algorithm
* Support ed25519 signatures in digest_openssl.c
* Support ed25519 signatures in digest_libgcrypt.c
--
While the [discussion about possibly moving pythondistdeps to a different
repo](https://github.com/rpm-software-management/rpm/issues/1199) goes on:
Any technical issues or concerns with the PR?
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or
> Perhaps separate git repos and a unified release are not mutually exclusive,
> though.
That's what I'm been mulling over here. Pulling stuff from multiple places does
complicate release-cutting considerably though (which tends to be hard enough
as it is), and will mean that bugs will get repo
