View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0018067 | CentOS-8 | general | public | 2021-02-14 09:32 | 2021-02-14 09:32 |
Reporter | creslinux | Assigned To | |||
Priority | normal | Severity | minor | Reproducibility | always |
Status | new | Resolution | open | ||
Product Version | 8.3.2011 | ||||
Summary | 0018067: No checksum for 8.3 x86_64 cloud images on cloud.centos.org, cannot verify image is safe/good. | ||||
Description | There is no means to verify downloads from cloud.centos.org version 8 are good for versions 8.3 and 8.1 The checksum file that is included in the download location only provides checksums for version 8.2. https://cloud.centos.org/centos/8/x86_64/images/ This breaks our trust the image is good, and thereafter our build process as we reject the image as acceptable for use. | ||||
Steps To Reproduce | Navigate to: https://cloud.centos.org/centos/8/x86_64/images/ Note there are downloads for images that are version 8.1, 8.2, and 8.3 Open checksum file: https://cloud.centos.org/centos/8/x86_64/images/CHECKSUM Note there are no checksums for images that are version 8.1 or 8.3 | ||||
Tags | 8.1, 8.3, checksum, checksums, cloud, cloud.centos.org, kvm, verification | ||||
Date Modified | Username | Field | Change |
---|---|---|---|
2021-02-14 09:32 | creslinux | New Issue | |
2021-02-14 09:32 | creslinux | Tag Attached: 8.1 | |
2021-02-14 09:32 | creslinux | Tag Attached: 8.3 | |
2021-02-14 09:32 | creslinux | Tag Attached: checksum | |
2021-02-14 09:32 | creslinux | Tag Attached: checksums | |
2021-02-14 09:32 | creslinux | Tag Attached: cloud | |
2021-02-14 09:32 | creslinux | Tag Attached: cloud.centos.org | |
2021-02-14 09:32 | creslinux | Tag Attached: kvm | |
2021-02-14 09:32 | creslinux | Tag Attached: verification |