Mailinglist Archive: opensuse-factory (422 mails)

[Steffen Winterfeldt <snwint@xxxxxxx>]

On Tue, 16 Dec 2008, Peter Czanik wrote:

> Martin Schlander írta:
> > > I provide a driver update for EFIKA PPC users. Recently a new feature
> > > was introduced to the installer, which now checks for an .asc file for
> > > the dud. How can I create one? Using 'insecure=1' is a bit annoying
> > > workaround, just as getting questioned about it during installation...
> > > The file I'd like to sign is http://genesi.hu/dud.11.1.squash
> > >     
> > I think this is what you need:
> > http://en.opensuse.org/Secure_Installation_Sources
> >   
> Does it mean, that if I want to sign my DUD, then I also need to provide
> a modified initrd?

Basically, yes. You have to add your key to '/installkey.gpg' in the initrd.
It was a requirement from our security guys that all files need to be
checked (bug 435685). As a consequence either your key is known in the
initrd or you explicitly turn off checking with 'insecure=1'.


Steffen

-- 
Der frühe Wirt holt sich den Wurm.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx