> > > other things I cannot even think about.
> > In theory dpkg-repack should build debs with the same signature.
> dpkg-deb: building package 'blub' in './blub_1.00-1_i386.deb'.
> tar: ./gaga/dada: Not found in archive.
> 'bla' habing an additonal Replace: blub in it.
in detail by downloading the actual deb.
> > for 3-way diffs.
> starts to be to be fixes and is like to continue to be so.
method. You loose nothing but gain tamper proofness.
> > > Only if there is a reliable way to regenerate them at instalation time.
> > > place is very simple and needs far less processing power.
> > with (rightfully or not) and not just configured.
> But I do not want to know, if the packages have been tempered with.
> or almost no possibility to get later in that state.
pinpoint files. Its your choice.
> > generating the md5sums in the first place.
generate them at install time.
installation of Debian has space to waste.
> robust solution that only needs the last some packages to follow.
The reason is to have a choice and security.