Repository navigation
Commit 1d6c812
Restore DBX binary paths that were removed
* The recent reorganisation of the signed DBX binaries in 92b433e had
the unfortunate effect of breaking downstream workflows, that relied on the presence of the
DXBUpdate.bin binaries in their previous location/names.
* To give some time for these workflow to be updated, the KEK 2011 signed objects that existed
at the time of the removal are restored, while being being flagged as obsolete and planned
for deletion at a later date as it will not be updated further. In the depreciation notice
we also point to using the new .auth2 binaries from either SignedByKEK2011 or SignedByKEK2023.
* Note that it was not possible to use symlinks, as the GitHub API does not resolve symlinks
URLs (the download URL it provides is the one of the symlink text), and also, because some
workflows depend on being able to read the date from the commit that modifies the target of
the symlink, whereas the GitHub API only ever returns the date the symlink was created.
* However, we also additionally create a SignedByKEKLatest symlink, that currently points to
SignedByKEK2023, so that workflows that want to anticipate KEK 2023 expiration in 11 years
years can start using that symlinked reference as a semi-immutable means of accessing the
latest DBX binaries.1 parent 255f318 commit 1d6c812
6 files changed
Lines changed: 10 additions & 0 deletions
File tree
- PostSignedObjects
- DBX
- amd64
- arm64
- arm
- x86
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
0 commit comments