On Mon, Dec 14, 2020 at 03:32:57PM -0800, Brian C. Lane wrote:
> The problem I see with dropping it is that without it you do not know if
> there are errors in the packages you are installing. With non-live
> installs you can depend on rpm to detect that, but not with live since
> we're just copying the files over.

With the live media, though, it's a squashfs that gets uncompressed, right?

I just did a very rudimentary test of copying the Fedora Workstation 33
squashfs.img and injecting a single random bit flip 1000 times, then running
unsquashfs. Of these 1000 tests, the result was a failure to unpack (with an
error code) every single time.

I'm sure this isn't a cryptographically-secure verification, but it seems
like a decent enough practical one. Am I missing something? It seems like
the case of the live cd booting successfully but then installing a corrupted
system is astronomically unlikely.


-- 
Matthew Miller
<mat...@fedoraproject.org>
Fedora Project Leader
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

Reply via email to