Launchpad itself

~xnox/launchpad:only-sha256

Git
lp:~xnox/launchpad
only-sha256

Last commit made on 2023-10-04

Get this branch:: git clone -b only-sha256 https://git.launchpad.net/~xnox/launchpad

Only Dimitri John Ledkov can upload to this branch. If you are Dimitri John Ledkov please log in for upload directions.

Branch merges

On hold for merging into launchpad:master

Steve Langasek (community): Abstain on 2023-10-14

Andy Whitcroft: Pending requested 2023-10-04

Ubuntu Package Archive Administrators: Pending requested 2023-10-04

Canonical Security Team: Pending requested 2023-10-04

Julian Andres Klode: Pending requested 2023-10-04

Launchpad code reviewers: Pending requested 2023-10-04

Branch information

Name:: only-sha256

Repository:: lp:~xnox/launchpad

Recent commits

29f772d... by Dimitri John Ledkov on 2023-10-03

archivepublisher: consistently use only sha256 for apt archives

Unused hashes are redundant, and are now cauing interop problems with
overly strict programs and humans.

Summary of changes:

* Remove md5, sha1 from Release, Packages, Sources metadata in
primary & ppa publisher.

* Change i18n Index from SHA1 to SHA256. Uncertain if actually used
by clients.

* Remove sha512 from Packages & Sources in primary publisher only, do
   not exist anywhere else. (Also see LP: #1536602). Also it is
   noticably slow even on most modern hardware for rudimentary
   repository sizes.

* Ensure and enforce consistent publishing by both primary & ppa
publisher, irrespective of host release.

Note that overall security is provided by rsa-pkcs1-v1_5 + sha512
signatures in current primary and ppa publishers, independent of the
hash changes in this commit.

Minimum required apt for Launchpad host deployment is 1.1 (Xenial) due
to `--no-sha512` option usage.

Minimum required apt for clients is 0.7.7 (Hardy), subject to
compatible signing.

This implementation is intentionally global for all suites in both
primary and ppa publishers.

Fixes LP: #1883271