repo: Prevent publishing summary without matching signature
authorDan Nicholson <nicholson@endlessm.com>
Tue, 21 Jan 2020 19:43:35 +0000 (12:43 -0700)
committerDan Nicholson <dbn@endlessos.org>
Tue, 7 Feb 2023 21:50:47 +0000 (14:50 -0700)
commit6f8669331d8dffa05296135443116268d21bac54
tree69f98778460ff8d8f6e344936d568d310e440ca3
parent6cc75a6c1e2e72d536568e17a6a45ca6cd629630
repo: Prevent publishing summary without matching signature

Use a temporary directory for the summary and signature file in
`ostree_repo_regenerate_metadata` so that the summary file isn't
published if signing fails. This prevents publishing a summary without a
signature file or leaving a mismatched signature file in place.
src/libostree/ostree-repo.c