enot
enot copied to clipboard
Packages siginig
Packages should be signed, when loading to a remote cache. Sign should be checked, when downloading them.
Option1: use simple package's hash On client side:
- enot should be able to calculate package.ep hash
- dep can be specified by name/namespace and hash (instead of tag/branch)
- after downloading package hash should be checked
On server side:
- enot builder should calculate hashes of packages and store in the database
- enot builder should be able to find and render package by it's name/namespace and hash