6 files changed, 75 insertions, 0 deletions
diff --git a/localfs/var/lib/libvirt/isos/debian/Makefile b/localfs/var/lib/libvirt/isos/debian/Makefile
new file mode 100644
index 0000000..f019f36
--- /dev/null
+++ b/localfs/var/lib/libvirt/isos/debian/Makefile
@@ -0,0 +1,12 @@
+VERSION = 3.81
+
+all: gpgverify checksum pandoc
+
+pandoc:
+	@pandoc --verbose -o README.html README.md
+
+gpgverify:
+	@for i in *.sign;do gpg --verify $$i;done
+
+checksum:
+	@sha512sum --ignore-missing -c SHA512SUMS
diff --git a/localfs/var/lib/libvirt/isos/debian/README.html b/localfs/var/lib/libvirt/isos/debian/README.html
new file mode 100644
index 0000000..e03cd53
--- /dev/null
+++ b/localfs/var/lib/libvirt/isos/debian/README.html
@@ -0,0 +1,30 @@
+<h2 id="content">Content</h2>
+<p>This folder contains the netinst ISO(s) only.</p>
+<p>Purpose: make a minimal system available to draw everything from the network. If you are sitting in some tattered shed, or in a provisionary office with an LTE hotspot with about 5% of what you need in terms of traffic per month, a full-blown ISO is NOT the image you want.</p>
+<h3 id="files">Files</h3>
+<table>
+<colgroup>
+<col width="19%" />
+<col width="80%" />
+</colgroup>
+<thead>
+<tr class="header">
+<th>Name</th>
+<th>Explanation</th>
+</tr>
+</thead>
+<tbody>
+<tr class="odd">
+<td>*.iso</td>
+<td>The actual ISO file(s)</td>
+</tr>
+<tr class="even">
+<td>SHA125SUMS</td>
+<td>SHA512 checksums to verify your download (and whatever else)</td>
+</tr>
+<tr class="odd">
+<td>SHA512SUMS.sign</td>
+<td>GPG verification of the SHA512 checksum file to mitigate download hijacks</td>
+</tr>
+</tbody>
+</table>
diff --git a/localfs/var/lib/libvirt/isos/debian/README.md b/localfs/var/lib/libvirt/isos/debian/README.md
new file mode 100644
index 0000000..00b36a5
--- /dev/null
+++ b/localfs/var/lib/libvirt/isos/debian/README.md
@@ -0,0 +1,14 @@
+## Content
+
+This folder contains the netinst ISO(s) only.
+
+Purpose: make a minimal system available to draw everything from the network. If you are sitting
+in some tattered shed, or in a provisionary office with an LTE hotspot with about 5% of what you
+need in terms of traffic per month, a full-blown ISO is NOT the image you want.
+
+### Files
+| Name              | Explanation                                                               |
+| ----------------- | ------------------------------------------------------------------------- |
+| \*.iso            | The actual ISO file(s)                                                    |
+| SHA125SUMS        | SHA512 checksums to verify your download (and whatever else)              |
+| SHA512SUMS.sign   | GPG verification of the SHA512 checksum file to mitigate download hijacks |
diff --git a/localfs/var/lib/libvirt/isos/debian/SHA512SUMS b/localfs/var/lib/libvirt/isos/debian/SHA512SUMS
new file mode 100644
index 0000000..eeafb88
--- /dev/null
+++ b/localfs/var/lib/libvirt/isos/debian/SHA512SUMS
@@ -0,0 +1,3 @@
+345c4e674dc10476e8c4f1571fbcdba4ce9788aa5584c5e2590ab3e89e7bb9acb370536f41a3ac740eb92b6aebe3cb8eb9734874dd1658c68875981b8351bc38  debian-9.4.0-amd64-netinst.iso
+a30c2becb0eafd7e71124829238d82b183f6c3c6a92e55c26780207da40203da67f2c867db2b2ef900f320d1d922d8dd5b6156d1d454f76043af0dddab477008  debian-9.4.0-amd64-xfce-CD-1.iso
+26f78f6667eee4c82862b78cbf70ff6e158339b6f8df8ef621a39178bb023fa7507b5586963e8de2464c8b180d6add1681d9f868dffb2c91848cc99a4e326cfd  debian-mac-9.4.0-amd64-netinst.iso
diff --git a/localfs/var/lib/libvirt/isos/debian/SHA512SUMS.sign b/localfs/var/lib/libvirt/isos/debian/SHA512SUMS.sign
new file mode 100644
index 0000000..d3a2cfb
--- /dev/null
+++ b/localfs/var/lib/libvirt/isos/debian/SHA512SUMS.sign
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=4cuJ
+-----END PGP SIGNATURE-----
diff --git a/localfs/var/lib/libvirt/isos/debian/debian-9.4.0-amd64-netinst.iso b/localfs/var/lib/libvirt/isos/debian/debian-9.4.0-amd64-netinst.iso
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/localfs/var/lib/libvirt/isos/debian/debian-9.4.0-amd64-netinst.iso