[cutting out the cross-post to avoid hell]
On Fri, May 05, 2017 at 07:17:18PM +0200, Benjamin Drung wrote:
> Currently I know no way to retrieve the release information about
> new/updated ISO and disk images in a machine parsable and secure way.
> Instead I have to visit the websites and collect the information
Ubuntu already publishes cloud image metadata in a machine parseable and
cryptographically safe, mirrorable way. The format is extremely generic
and can be used to publish metadata about any product that publishes
things of incrementing releases. Our implementation is a Python library.
It looks remarkably similar to your proposal:
The format also provides for information about our images published
elsewhere. For example,
allows you to cross-reference this metadata against Amazon AMI IDs (and
data is currently also published for Azure, Brightbox, CloudSigma, GCE,
HP Cloud, Joyent and Rackspace).
> Your thoughts? Does it make sense? Is the information already provided
> somewhere else?
Please consider what we have before creating Yet Another Standard :-)