On Tue, 16 Dec 2008, Peter Czanik wrote:
Martin Schlander írta:
I provide a driver update for EFIKA PPC users. Recently a new feature was introduced to the installer, which now checks for an .asc file for the dud. How can I create one? Using 'insecure=1' is a bit annoying workaround, just as getting questioned about it during installation... The file I'd like to sign is http://genesi.hu/dud.11.1.squash
I think this is what you need: http://en.opensuse.org/Secure_Installation_Sources
Does it mean, that if I want to sign my DUD, then I also need to provide a modified initrd?
Basically, yes. You have to add your key to '/installkey.gpg' in the initrd. It was a requirement from our security guys that all files need to be checked (bug 435685). As a consequence either your key is known in the initrd or you explicitly turn off checking with 'insecure=1'. Steffen -- Der frühe Wirt holt sich den Wurm. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org