| 1 |
On Sun, May 01, 2011 at 10:08:31PM +0100, Markos Chandras wrote: |
| 2 |
> Since most ( if not all ) of us use the same message on the Changelog |
| 3 |
> and on the commit log, it probably worth the effort of having the rsync |
| 4 |
> servers create the Changelogs before populate the portage tree. Having |
| 5 |
> the servers do that, will also allow us to provide cut down Changelogs |
| 6 |
> ( lets say keep that last 10 entries ) so we can provide a more minimal |
| 7 |
> portage tree, size wise. A huge portage tree might not be a problem for |
| 8 |
> most of us but it sure is for embedded and all kind of similar systems. |
| 9 |
|
| 10 |
This opens up a bit of nastyness; either the service would have to |
| 11 |
resign all manifests (which defeats a fair bit of the signing intent), |
| 12 |
or ChangeLog's would have to pulled in full from cvs, generated |
| 13 |
strictly server side (else manifest will have stale chksums for it), |
| 14 |
and ChangeLog will have to exist outside of all validation. |
| 15 |
|
| 16 |
So... either resigning everywhere for regen, or having no validation |
| 17 |
asserted on the ChangeLog- meaning certain men in the middle have a |
| 18 |
nice area to inject some unfriendly things for anyone who happens to |
| 19 |
read it. |
| 20 |
|
| 21 |
~harring |
Archives