Re: [gentoo-soc] About improved binary package support

[Arne Babenhauserheide]

Am Montag 30 März 2009 13:38:23 schrieb Philipp Riegger:
> There is no p2p stuff in here since I don't believe in it. I see 1 way
> to make this work: Create a p2p network of only gentoo developers (ok,
> maybe arch testers), make them sign the packages using gpg. Other
> people can only mirror packages, not add new ones.

Or add another group of trusted builders, who sign their packages with GnuPG. 

You need trustworthy people, but the level of required ability is far lower 
than for testers or developers, since people just need to be trustworthy not 
to tamper with their binpackages - and those get built automatically by 
portage. 

For convenience it would be great, if people could tellportage their builder-
ID and have portage upload generated packages automatically. 

That way we'd avoid building any package with teh same configuration twice. 

For this it's unimportant how people get the packages - they can be in a 
central server, served via BitTorrent or distributed via a really distributed 
network. 

With USE Hash and Host SLOT (and a way to identify binary compatible versions) 
all requirements for possible p2p distribution would be fulfilled. 

Besides: One advantage of the Hash over all active USE flags as opposed to a 
bitvector of all USE flags is that this Hash will be the same for all packages 
with the same active USE flags, so there will be a lower number of distinct 
USE hashes. That way they can more easily be used to query for packages 
(that's a possible optimization for p2p: search by package name + version + 
USE hash + Host SLOT). 

Best wishes, 
Arne
-- 
-- Ein Würfel System: http://1w6.org - einfach saubere (Rollenspiel-) Regeln.
-- Infinite Hands: http://infinite-hands.draketo.de - singing a part of the 
history of free software.
-- My stuff: http://draketo.de - stories, songs, poems, programs and stuff :)

-- PGP/GnuPG: http://draketo.de/inhalt/ich/pubkey.txt