docs/release-notes
20
0
Fork 7
Code Issues 23 Pull requests Projects Activity Actions

219 - Debuginfod IMA verification

Browse source
This commit is contained in:
Petr Bokoč 2025-10-28 09:05:43 +01:00
commit 7d79fa7594
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/release-notes/pages/developers.adoc
View file

@ -182,3 +182,9 @@ The `async-std` Rust crate is no longer maintained and is now considered depreca
=== gtk3-rs, gtk-rs-core v0.18, and gtk4-rs v0.7 are now removed
The Rust bindings for GTK3 (and related libraries) were marked as deprecated in Fedora 43 due to lack of upstream maintenance.
In Fedora 43, they are completely removed.
[[debuginfod-ima-verification]]
== Debuginfod IMA verification
The `debuginfod` client tools used to auto-download debuginfo & source code into tools like `gdb` now cryptographically verify the integrity of the downloaded files from the Fedora debuginfod server.
This setting is appropriate for normal Fedora koji-signed release/update RPMs.
However if your workflow also involves unsigned flatpak RPMs (`++%dist ".fc#app#"++`), then you may need to manually remove `ima:enforcing` from your `$DEBUGINFOD_URLS`.