mirror of
https://github.com/flatpak/flatpak.git
synced 2026-01-26 14:13:26 +00:00
d4751443f5
Extra-data usually is downloaded on the user side into an ostree repo. For system installs, a temporary ostree repo is used on the user side and then imported on the system side. This doesn't work for OCI images because importing the image into an ostree repo makes it impossible for the system side to verify the data. So instead, the OCI image is first mirrored into a local OCI repo and then gets imported on the system side, which can verify the image from the index by the digest. Closes: https://github.com/flatpak/flatpak/issues/3790