[arch-general] Combining package deltas and signing?

Allan McRae allan at archlinux.org
Sun Dec 30 22:55:48 EST 2012

On 31/12/12 05:26, Magnus Therning wrote:
> On Fri, Dec 28, 2012 at 10:54:14PM -0500, Sébastien Leblanc wrote:
>> I believe signatures are checked after packages are rebuilt from
>> deltas. Therefore, if your delta is compromised, the resulting
>> package won't validate with the signature.
> Excellent.  I also notice you use the word "deltas", plural, which
> leads me to the next question :)
> Will deltas be combined by pacman, or will only ever a single delta be
> used?

They can be combined.  pacman does a calculation to see whether the
delta chain is worth it.

More information about the arch-general mailing list