They need to match the archive to some extent, but only in that they need to have the same kernel ABI. This is a relatively weak criterion and it's often fine for it to be out by several publisher cycles. I'm reticent to invent new file formats for the archive that may differ from future work in Debian; detached GPG signatures on a few files are at least simple.
Julian, this is apparently needed for mobile team projects such as rootstock, so perhaps it needs a higher priority? Loïc should elaborate ... -- debian-installer images aren't signed in the archive https://bugs.launchpad.net/bugs/431790 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
