[Rpm-metadata] metadata filenames and other issue for keying the data

[Joe Shaw]

On Mon, 2003-10-27 at 00:41, Jeff Licquia wrote:
> > One other issue:
> >  It occurred to me that it might be possible for a single repository to
> > have two packages that are identical n,e,v,r,a and yet different actual
> > packages. On this basis it might be wiser to make the key the pkgid
> > checksum. It's harder to traceback by sight but it might be easier and
> > more reliable from a programming perspective.
> 
> It's possible.  For what it's worth, apt doesn't allow this condition -
> not in a single repository, anyway.

Ditto for Red Carpet.  Actually, it just assumes that a package with
equal NEVRA is the same package.  Perhaps not good behavior, but that's
the hole we've dug for ourselves. :/

Joe