Comment 12 for bug 1485511

Revision history for this message
Steve Langasek (vorlon) wrote :

This bug should only happen due to a buggy proxy on the user's side, or infrequently if the download check happens to take place right as the ports.ubuntu.com site is being updated.

Ubuntu now supports the 'InRelease' signature format on its mirrors, which ensures the signature and signed data are downloaded atomically and are therefore always in sync. debian-installer should use this file in place of the Release{,.gpg} resource pair for verifying mirror integrity. Assigning this bug to the debootstrap package, as it looks like this verification happens in debootstrap-udeb.