[Yum] centralized metadata for security

Muayyad AlSadi alsadi at gmail.com
Fri Nov 7 18:50:23 UTC 2008


>If you have out of sync. mirrors frequently enough that this is
>a problem, you should also turn on --unique-md-filenames.
the file I'm talking about (repomd.xml) is not affected by
--unique-md-filenames.

> Better yet, provide a cryptographic signature of the repomd.xml - which yum now supports.

> Or, alternatively, provide all the mirror info in a file like repomd.xml - but in the metalinks format, which yum also now supports.

does fedora uses those two feature yet


More information about the Yum mailing list