 |
We use a private instance of http://openbuildservice.org/ (OBS) to build our Linux packages. As this is only a warning, we do not consider it urgent to fix this issue. However, recent releases of OBS (>= 2.7.0) have fixed this issue, by signing also with SHA256, see https://github.com/openSUSE/obs-sign/commit/688d5fa695c4756bf5c9825ed390112d23270bf0 We plan to update our build infrastructure when we find time for this. |
|
|
Would be nice you could reconsider this decission because our repos are managed by puppet which has problems running without erros when "apt-get update" is executed. |
|
|
+1 this affects pretty much every Ubuntu user who's upgraded recently also. I actively discourage my team from ignoring warnings like this as it's a bad habit to get into and paves the way for real attacks on our security. |
|
|
+1 also here having starting troubles when using the repo with Puppet |
|
|
Does this Puppet related problem still exist with the current bareos 18.2 repos? |
|
|
The modern package repositories (everything built after November 2019) contain SHA256 sums. |
- Anonymous
