-
Notifications
You must be signed in to change notification settings - Fork 34
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update fixture generation and add a zstd metadata fixture #244
Conversation
959cb28
to
c506f40
Compare
9681bb5
to
a2395b1
Compare
[noissue]
[noissue]
78e42b7
to
7458607
Compare
Never mind, figured it out |
9cbc1ca
to
8f472d8
Compare
47980d5
to
6b57117
Compare
[noissue]
6b57117
to
1ac40f3
Compare
@@ -5,13 +5,11 @@ jobs: | |||
test: | |||
runs-on: ubuntu-latest | |||
steps: | |||
- uses: actions/checkout@v2 | |||
- uses: actions/checkout@v4 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
common/GPG-KEY-pulp-qe
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What called for this change?
I believe some CI is using the key directly from here. So changing it's name is probably a bad idea.
As is changing the key user-id.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The key is ancient and uses algorithms that recent OS' consider legacy, and refuse to do anything with.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
# the default createrepo_c provided by Fedora has legacy hashes disabled, the one | ||
# on PyPI does not (because we need it) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What happens if that package would be upgraded also? Want to add a version constraint?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nah. It's actually good for something like that to make a bit of noise early on.
But also, the Python package is basically our responsibility in the first place, so it's unlikely to change out from under us.
[noissue]
createrepo_c 1.0 switched it to zstd [noissue]
Seems like it only supports .pem format? [noissue]
The Fedora-packaged one no longer includes support for "legacy" hashes like md5, sha1 whereas the version we've gotten packaged for ourselves does. [noissue]
We haven't gotten around to using it yet (and may never), RHEL doesn't use zchunk and Fedora is on Zstd now, and the Python createrepo_c version has it disabled for now. [noissue]
[noissue]
1ac40f3
to
a648dfd
Compare
Closes #245
Closes #242