Verification of netboot installer and firmware files

From	Daniel Reichelt <debian@nachtgeist.net>
Newsgroups	linux.debian.security
Subject	Verification of netboot installer and firmware files
Date	2015-09-06 10:50 +0200
Message-ID	<q5DO9-27H-21@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hey there

I'm wondering if there's a practical way to verify the netboot installer files
and firmware archives provided via [1]-[3]. I couldn't find anything similar to
the signed (md5|shaX)sum files provided for the ISOs, nor any lines in the
official installation guide about verification.

Am I missing s.th.? Looking forward to suggestions!


If I'm really the first one to bring this up: IMHO the simplest solution would
be to gpg-sign the hash lists under [1]/[2] and provide signed hash lists for
[3] as well.



Thanks

Daniel


[1] http://ftp.nl.debian.org/debian/dists/stretch/main/installer-amd64/current/images/
[2] http://d-i.debian.org/daily-images/amd64/daily/
[3] http://cdimage.debian.org/cdimage/unofficial/non-free/firmware/

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Verification of netboot installer and firmware files Daniel Reichelt <debian@nachtgeist.net> - 2015-09-06 10:50 +0200
  Re: Verification of netboot installer and firmware files "Andrew M.A. Cater" <amacater@galactic.demon.co.uk> - 2015-09-06 13:00 +0200
  Re: Verification of netboot installer and firmware files Paul Wise <pabs@debian.org> - 2015-09-06 19:20 +0200
    Re: Verification of netboot installer and firmware files Daniel Reichelt <debian@nachtgeist.net> - 2015-09-07 03:50 +0200

csiph-web