Skip to content

v2022dev0 → v2022dev1 forward port: ostree-image: accept only signed updates

Forward port of !321 (merged)

Starting version v2020.7 libostree upstream provides deltas with signed metadata allowing to validate the creator of the delta file itself, not only the commit inside.

The new repository option core.sign-verify-deltas=true forces both libostree and AUM to accept deltas with signed metadata only.

This change affect only to systems using libostree v2020.7+. Apertis Update Manager must be updated to accept deltas with signed metadata.

Merge request reports