The secret maze of Debian images
blog.fai-project.org

Delve into the wondrous labyrinth of sparkling images that is the Debian build output.

  • ReallyZen@lemmy.ml
    101·
    2 months ago

    “You can ignore the SHA... files if you do not know what they are needed for. They are not important for you.”

    …That’s where I stopped reading this.

    • gomp@lemmy.ml
      7·
      2 months ago

      I stopped at “secret” (yes, the occurrence in the title) :)

      TBH the checksums are pretty useless for humans who download an .iso and install it… they are mainly for mirrors and similar that download files without using them

      • 𝘋𝘪𝘳𝘬@lemmy.ml
        6·
        2 months ago

        Also: If someone manages to tamper with the downloadable ISO … they likely will be able to tamper with the signature files, too.

    • butter@midwest.socialEnglish
      41·
      2 months ago

      I’m fully aware of what a SHA file is, and it’s entirely unimportant to me.

      Admittedly, I did check the arch image I use at work.