feat(i/lxd): simple streams download inspector for lxd
Metadata
Current evaluation
Merged #427 as c3d099d, adding LXD Simple Streams download inspection to validate downloaded rootfs image digests against product listings.
Resolution: closed resolved
Reason: PR #427 was approved with all CI checks passing and merged as commit c3d099d, adding integrity validation for rootfs images downloaded through Simple Streams.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Add support for Simple Streams Download inspection to verify the integrity of
rootfs images downloaded through the SimpleStreams protocol. The
implementation validates image digests against values from SimpleStreams
product listings.
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged #427 as c3d099d, adding LXD Simple Streams download inspection to validate downloaded rootfs image digests against product listings. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #427, adding Simple Streams Download inspection for LXD to verify downloaded rootfs image digests against product listings; all CI checks passed. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged implementation adding Simple Streams Download inspection to verify rootfs image integrity by validating digests against product listings. Approved by two reviewers, passed all CI checks, and modified 12 files with 2133 additions. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Related To:
canonical/fetch-service#434
(confidence 95%)
Follow-up PR #434, merged as a7ebcd5, tightened validation in the LXD download inspector.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #423 feat: Simple Streams Index inspector for LXD | fetch-service | merged | Merged PR #423 (commit da8ca8f) added a Simple Streams Index inspector for LXD. The six-file change passed CI, and LXD inspector tests reported 100% statement coverage. | |
| #456 lxd downloads inspector does not recognize request | fetch-service | closed | Fixed by merged PR #462 (commit 34fa1ae), "fix(inspectors/lxd): detect releases image request": the LXD rootfs/simple-streams URL regex now matches /buildd/releases/<series>/<datestamp>/<image>.tar.gz as well as /buildd/daily. Tracked internally as FETCH-28. | |
| #434 fix(i/lxd): make lxd download inspector more strict | fetch-service | merged | Merged PR #434 as commit a7ebcd5, tightening LXD download format verification so Snap assertion downloads are not rejected. | |
| #621 feat(i/lxd): add support to stonking image download | fetch-service | merged | Merged PR #621 added Stonking LXD image download support in commit c65a83a, resolving FETCH-74. |