Bug 567508

Summary:	signatures for musl hardened stages
Product:	Gentoo Release Media	Reporter:	simplicity
Component:	Stages	Assignee:	Gentoo Release Team <releng>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description simplicity 2015-12-04 00:52:59 UTC

musl hardened stages are not currently signed.

Presumably this is because all relevant developers assure authenticity and integrity through other means - presumably bootstrapping from glibc, which is undocumented(?)

I would therefore like to request that musl hardened stage3 DIGESTS files be signed.

(More generally, signatures for all experimental stages would encourage better security hygiene among mere users.)

Comment 1 Andreas K. Hüttel archtester

2021-11-14 15:10:13 UTC

Signed now.