Fedora.next spins will be exclusively on http://spins.fedoraproject.org. This means we need to have also checksums and verify instructions there. I don't have a clear opinion about it, but we could link to a new checksum and verify page in every download tab. Any other thoughts?
Hi robyduck!
Here are my ideas: - Add a line below "How do I use this file?" on the Download tab for each Spin that says "Verify this file.". - Below the "What is this Spin?" section add a new section called "How do I verify my download? Once you have downloaded an ISO, verify it for security and integrity. To verify your ISO, start by downloading the proper CHECKSUM file into the same directory as the ISO. Learn more >".
What do you think?
Regards!
Yes, that could work, but there are already two lines there, so probably it would be too much stuff in every download image. Can we make it easier? :)
Also my one is only an idea, but I would add a section to the sidebar, so we don't need to modifiy every spins download tab. This could be:
'''VERIFY YOUR IMAGE''' [[br]] Once you have downloaded an ISO, verify it for security and integrity. [[br]] Learn more >
I think that would be enough. Then you need to make a new verify.html page with a checksum table (would be the best IMHO) and the instructions how to verify the downloaded image.
Remember we won't have only ISO images there, but also ARM images, which are raw.xz. If you need some help join us on #fedora-websites to talk.
Abdel, any news here? We should have it up before the end of the week, let me know if you need any help.
Sorry for my late response. I added the section and created the verify.html but I got problems referencing the verify.html page to the "Learn more >" link.
No worries, we can fix that later. Can you file a patch?
Some comments: 0001-verify-page-for-spins.patch
Some comments about the patch: * I'm very confused about the proper links for the checksums, can anybody give me a hand with this? * The GPG key for curr_id is hardcoded. Could we get it by code?
Simpler verify page 0002-verify-page-for-spins.patch
That's great, patch applied.
Thanks.