You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by "Aias00 (via GitHub)" <gi...@apache.org> on 2026/10/18 17:19:38 UTC
[PR] docs(rmqctl): propose signed release and installer trust requirements [rocketmq-dashboard]
Aias00 opened a new pull request, #6960:
URL: https://github.com/apache/rocketmq-dashboard/pull/6960
### Which Issue(s) This PR Fixes
- Design proposal for #6026
### Brief Description
Define the producer-first requirements for signed rmqctl releases: exact signed artifacts, authorized signer fingerprints, isolated installer verification, a signed-version boundary and explicit legacy behavior. Include the installer's own distribution trust and offline packaging/install failure tests.
This is a design-only draft. It does not introduce signing keys, change releases or make the current checksum-only installer reject existing assets. Runtime implementation waits for the project trust-root and rollout decisions in #6026.
### How Did You Test This Change?
Checked `package-release.sh` archive/checksum production against `install.sh` download/check/extract order on `c34535db0`. Confirmed that no verifier or signed assets are implied to exist. Links use ASF signing/verification references; `git diff --check` passed. No runtime code changed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] docs(rmqctl): propose signed release and installer trust requirements [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub) via commits" <co...@rocketmq.apache.org>.
github-actions[bot] commented on PR #6960:
URL: https://github.com/apache/rocketmq-dashboard/pull/6960#issuecomment-6536304679
This pull request has been automatically closed because there has been no activity for 7 days. If you would like to continue working on this, please reopen the PR with updated changes.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] docs(rmqctl): propose signed release and installer trust requirements [rocketmq-dashboard]
Posted by "github-actions[bot] (via GitHub) via commits" <co...@rocketmq.apache.org>.
github-actions[bot] closed pull request #6960: docs(rmqctl): propose signed release and installer trust requirements
URL: https://github.com/apache/rocketmq-dashboard/pull/6960
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org