[Yum-devel] [PATCH 2/2] Add new urlgrabber option 'csum_type'.

seth vidal skvidal at fedoraproject.org
Wed Jul 6 15:41:50 UTC 2011


On Wed, 2011-07-06 at 11:27 -0400, James Antill wrote:
>  The other problem is that when you start the parallel part of the
> downloading changes, the IO will be happening in another process ... but
> I doubt that we can do the checksum there (due to desired security
> boundries).
>  If we _can_ put the checksumming in the helpers, then it might be worth
> the changes due to the fact we can parallelize the checksumming then
> too.
> 

If you can shove the expected checksum across to the downloader then you
can get away with it over there - it just means MORE config info to
stuff to shove to the downloader.

checksumming at the downloader then gpg checking inside yum seems
reasonable as a separation, esp considering the security goals.

-sv




More information about the Yum-devel mailing list