Re: [gentoo-scm] gentoo-x86 on git - Manifests

[Nirbheek Chauhan]

On Mon, Feb 23, 2009 at 1:27 AM, Robin H. Johnson <robbat2@g.o> wrote:
> New Design:
> 1) slim Manifest:
>   DIST - digest of distfiles located in DISTDIR
> _AND_
> 2) VCS index:
>   SHA1/* digest of files located in the tree
>
> BOTH sources must be present. A slim Manifest would not be valid without the
> VCS containing digests of the files not contained in the Manifest.

Another point worth mentioning is that any manifest system which uses
DVCS manifests or stores it's manifests in DVCSes is *far more secure*
than a Cathedral VCS. Currently, there is a single point of failure
for mangling of indexes -- cvs.gentoo.org. And no one outside of Infra
will be able to notice. If we have a distributed system, any fiddling
on git.gentoo.org will be noticed by *everyone*.


-- 
~Nirbheek Chauhan