Details

      Description

      Presently the universe frameworks and packages aren't PGP signed. They really should be in order for the system to verify that they are authentic.

      This should also pass through to any artifacts being used by those frameworks.

      This fits in nicely with authenticated/signed docker image repositories and the present efforts to make off-line use of the packages more seamless.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              jzampieron@zproject.net Jeffrey Zampieron
              Team:
              Mesosphere
              Watchers:
              Jeffrey Zampieron, juliusczar
            • Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: