What about inconsistency between repo metadata and in RPMDB  with package 
checksums. Metadata contains file checksum (only one type), but RPMDB contains 
a header checksum (multiple types). We have some users who wants to align 
available packages with installed one and there is not enough information 
stored in DNF, RPM, or repo metadata to do it. NEVRA, repoid is not enough.

Repository metadata must contain file checksum for verification as well as the 
size of file. Adding additional checksum would be possible, but expensive for 
distribution (compatibility could be also affected).

There is possible solution on DNF side - store both checksum types in DNF5 
system state, but that information will be not available for packages installed 
directly by RPM or by Zypper.

What kind of option do we have from RPM side?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2374#discussioncomment-5613074
You are receiving this because you are subscribed to this thread.

Message ID: 
<rpm-software-management/rpm/repo-discussions/2374/comments/5613...@github.com>
_______________________________________________
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint

Reply via email to