script-generator isn't protected by a checksum

fosslinux / live-bootstrap

Use of a Linux initramfs to fully automate the bootstrapping process

291 stars 26 forks source link

script-generator isn't protected by a checksum #394

Closed Googulator closed 3 months ago

Googulator commented 6 months ago

The script-generator utility lies right on the boundary between stage0-posix and live-bootstrap proper. As a result, it's protected by neither stage0's, nor live-bootstrap's checksum mechanism. This needs to be addressed for maximum trust & reproducibility.