| 1 |
Hi, everyone. |
| 2 |
|
| 3 |
Last night Infra has started deploying the initial version of full-tree |
| 4 |
Manifest coverage (MetaManifest) on rsync mirrors. While things are not |
| 5 |
yet fully settled down, we think it is ready for the initial public |
| 6 |
testing. |
| 7 |
|
| 8 |
The Manifest format is based on GLEP 74 [1] draft. Its earlier version |
| 9 |
has been pre-approved by Council for testing on 20171112 [2] meeting. |
| 10 |
Please note that the format may still be subject to changes, and you |
| 11 |
should not rely on it or a fully defined behavior of the tooling. |
| 12 |
|
| 13 |
Along with the change, we have also made some changes to the git->rsync |
| 14 |
pipeline and switched the local Manifest hashes to BLAKE2B + SHA512. |
| 15 |
Users will experience a one-time resync of all package Manifests. |
| 16 |
Afterwards, only relevant package Manifests and their parent Manifests |
| 17 |
should be updating. |
| 18 |
|
| 19 |
The package Manifests remain compatible with the existing format |
| 20 |
and are still verified using the existing tooling. However, performing |
| 21 |
a full-tree verification at the moment requires using the external |
| 22 |
app-portage/gemato [3] tool. The work on Portage integration is planned |
| 23 |
to start after some initial testing. |
| 24 |
|
| 25 |
To verify the repository after updating from rsync: |
| 26 |
|
| 27 |
$ gemato verify "$(portageq get_repo_path / gentoo)" |
| 28 |
|
| 29 |
If you experience any problems with rsync or the verification process, |
| 30 |
please let us know. |
| 31 |
|
| 32 |
Git mirror users are not affected. The git repository is still verified |
| 33 |
against the git commit signatures. |
| 34 |
|
| 35 |
|
| 36 |
[1]:https://www.gentoo.org/glep/glep-0074.html |
| 37 |
[2]:https://projects.gentoo.org/council/meeting-logs/20171112-summary.txt |
| 38 |
[3]:https://github.com/mgorny/gemato |
| 39 |
|
| 40 |
-- |
| 41 |
Best regards, |
| 42 |
Michał Górny |
Archives