I don't think we need to invent a new index file (the Index files you're referring to are mostly for pdiffs anyway). Why not just add an MD5SUMS.gpg alongside the existing MD5SUMS? That would be simple, sufficient, and straightforward. Alternatively, it would be OK to add the checksums of MD5SUMS itself to the Release file, although that seems a little awkward given that it's sometimes necessary for an archive admin to modify dists/*/main/installer-*/ directly and I would prefer it if those directories were self-contained rather than hooked into Release.
I've added SHA1SUMS and SHA256SUMS files for the next debian-installer upload. -- debian-installer images aren't signed in the archive https://bugs.launchpad.net/bugs/431790 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
