Gentoo Archives: gentoo-dev-announce

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev-announce <gentoo-dev-announce@l.g.o>
Cc: gentoo-dev <gentoo-dev@l.g.o>
Subject: [gentoo-dev-announce] Initial tests for full-tree Manifest verification (MetaManifest)
Date: Sat, 25 Nov 2017 21:08:48
1 Hi, everyone.
3 Last night Infra has started deploying the initial version of full-tree
4 Manifest coverage (MetaManifest) on rsync mirrors. While things are not
5 yet fully settled down, we think it is ready for the initial public
6 testing.
8 The Manifest format is based on GLEP 74 [1] draft. Its earlier version
9 has been pre-approved by Council for testing on 20171112 [2] meeting.
10 Please note that the format may still be subject to changes, and you
11 should not rely on it or a fully defined behavior of the tooling.
13 Along with the change, we have also made some changes to the git->rsync
14 pipeline and switched the local Manifest hashes to BLAKE2B + SHA512.
15 Users will experience a one-time resync of all package Manifests.
16 Afterwards, only relevant package Manifests and their parent Manifests
17 should be updating.
19 The package Manifests remain compatible with the existing format
20 and are still verified using the existing tooling. However, performing
21 a full-tree verification at the moment requires using the external
22 app-portage/gemato [3] tool. The work on Portage integration is planned
23 to start after some initial testing.
25 To verify the repository after updating from rsync:
27 $ gemato verify "$(portageq get_repo_path / gentoo)"
29 If you experience any problems with rsync or the verification process,
30 please let us know.
32 Git mirror users are not affected. The git repository is still verified
33 against the git commit signatures.
36 [1]:
37 [2]:
38 [3]:
40 --
41 Best regards,
42 Michał Górny