-
Notifications
You must be signed in to change notification settings - Fork 124
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Removed the ability to select md5, sha1, or sha224 as the checksum type #3306
Conversation
82a0778
to
e0eb410
Compare
I can split these into separate PRs if desired. The commits can be viewed separately and none of them will be backported though. |
2b26393
to
b9c7d9a
Compare
Also, I can merge the migrations |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
see comments
pulp_rpm/app/constants.py
Outdated
@@ -13,11 +13,6 @@ | |||
|
|||
# The same as above, but in a format that choice fields can use | |||
CHECKSUM_CHOICES = ( | |||
(CHECKSUM_TYPES.UNKNOWN, CHECKSUM_TYPES.UNKNOWN), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
what was the uknown for?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pretty sure it shouldn't have been there in the first place.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
apparently it's even used https://github.com/pulp/pulp_rpm/blob/main/pulp_rpm/app/tasks/synchronizing.py#L159
pulp_rpm/app/migrations/0056_rpmpublication_checksum_type_and_more.py
Outdated
Show resolved
Hide resolved
f6800c4
to
2451498
Compare
2451498
to
2c1eca6
Compare
3ca911e
to
31e7bad
Compare
9f18e8c
to
e215755
Compare
9ec1ce0
to
4b0a44b
Compare
@ipanova Now using a different approach: instead of changing the values allowed in the database (which as you pointed out is effectively unrestricted due to metadata mirroring and syncing), I just disallowed it in the serializer. |
4b0a44b
to
fe66883
Compare
fe66883
to
f48ca86
Compare
Sha256 has been supported since at least RHEL 6. We obviously still have to support syncing repos with md5, sha1, and sha224 checksums as they can theoretically exist in the wild (though less and less common over time) but there's really no reason to allow publishing with any weaker checksums. Especially since Katello has never exposed it.