Re: centralized metadata for security
"Muayyad AlSadi" <[email protected]>
| Newsgroups | gmane.linux.rpm.yum |
|---|---|
| Message-ID | <[email protected]> |
>If you have out of sync. mirrors frequently enough that this is >a problem, you should also turn on --unique-md-filenames. the file I'm talking about (repomd.xml) is not affected by --unique-md-filenames. > Better yet, provide a cryptographic signature of the repomd.xml - which yum now supports. > Or, alternatively, provide all the mirror info in a file like repomd.xml - but in the metalinks format, which yum also now supports. does fedora uses those two feature yet