Project

General

Profile

action #76450

get iso images signed

Added by lkocman about 1 year ago. Updated 6 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
lkocman
Category:
-
Target version:
GM
Start date:
2021-05-21
Due date:
2021-05-26
% Done:

100%

Estimated time:

Description

  • rename iso and .sha256 file to not include Build* anymore

  • fix name in .sha256 files

  • ask autobuild to sign the files

History

#1 Updated by lkocman 7 months ago

  • Start date changed from 2020-10-28 to 2021-05-21

#2 Updated by lkocman 7 months ago

  • Assignee set to lkocman

#3 Updated by lkocman 6 months ago

  • Due date set to 2021-05-26

#4 Updated by lkocman 6 months ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

Signed by Marco Strigl we took into account https://en.opensuse.org/Portal:15.2/Retrospective#non-opensuse_signing_key_on_.sha256_files
And hopefully improved the way how we sign images.

Files are signed with same key as in 15.2 (The OPENSUSE key).

mirror@pontifex2:/srv/ftp-stage/pub/opensuse/distribution/leap/15.3/iso> gpg --verify openSUSE-Leap-15.3-DVD-x86_64.iso.sha256.asc
gpg: assuming signed data in 'openSUSE-Leap-15.3-DVD-x86_64.iso.sha256'
gpg: Signature made Wed 26 May 2021 12:56:40 PM UTC
gpg: using RSA key B88B2FD43DBDC284
gpg: Can't check signature: No public key
mirror@pontifex2:/srv/ftp-stage/pub/opensuse/distribution/leap/15.3/iso> gpg --verify openSUSE-Leap-15.3-DVD-x86_64.iso.sha256.asc
gpg: assuming signed data in 'openSUSE-Leap-15.3-DVD-x86_64.iso.sha256'
gpg: Signature made Wed 26 May 2021 12:56:40 PM UTC
gpg: using RSA key B88B2FD43DBDC284
gpg: Can't check signature: No public key

mirror@pontifex2:/srv/ftp-stage/pub/opensuse/distribution/leap/15.3/iso> sha256sum -c *.sha256
openSUSE-Leap-15.3-DVD-aarch64.iso: OK
openSUSE-Leap-15.3-DVD-ppc64le.iso: OK
openSUSE-Leap-15.3-DVD-s390x.iso: OK
openSUSE-Leap-15.3-DVD-x86_64.iso: OK
openSUSE-Leap-15.3-NET-aarch64.iso: OK
openSUSE-Leap-15.3-NET-ppc64le.iso: OK
openSUSE-Leap-15.3-NET-s390x.iso: OK
openSUSE-Leap-15.3-NET-x86_64.iso: OK
mirror@pontifex2:/srv/ftp-stage/pub/opensuse/distribution/leap/15.3/iso> ls
openSUSE-Leap-15.3-DVD-aarch64.iso openSUSE-Leap-15.3-DVD-ppc64le.iso.sha256.asc openSUSE-Leap-15.3-DVD-x86_64.iso.sha256 openSUSE-Leap-15.3-NET-ppc64le.iso openSUSE-Leap-15.3-NET-s390x.iso.sha256.asc
openSUSE-Leap-15.3-DVD-aarch64.iso.sha256 openSUSE-Leap-15.3-DVD-s390x.iso openSUSE-Leap-15.3-DVD-x86_64.iso.sha256.asc openSUSE-Leap-15.3-NET-ppc64le.iso.sha256 openSUSE-Leap-15.3-NET-x86_64.iso
openSUSE-Leap-15.3-DVD-aarch64.iso.sha256.asc openSUSE-Leap-15.3-DVD-s390x.iso.sha256 openSUSE-Leap-15.3-NET-aarch64.iso openSUSE-Leap-15.3-NET-ppc64le.iso.sha256.asc openSUSE-Leap-15.3-NET-x86_64.iso.sha256
openSUSE-Leap-15.3-DVD-ppc64le.iso openSUSE-Leap-15.3-DVD-s390x.iso.sha256.asc openSUSE-Leap-15.3-NET-aarch64.iso.sha256 openSUSE-Leap-15.3-NET-s390x.iso openSUSE-Leap-15.3-NET-x86_64.iso.sha256.asc
openSUSE-Leap-15.3-DVD-ppc64le.iso.sha256 openSUSE-Leap-15.3-DVD-x86_64.iso openSUSE-Leap-15.3-NET-aarch64.iso.sha256.asc openSUSE-Leap-15.3-NET-s390x.iso.sha256
mirror@pontifex2:/srv/ftp-stage/pub/opensuse/distribution/leap/15.3/iso>

Also available in: Atom PDF