1 |
W dniu nie, 08.07.2018 o godzinie 11∶04 -0700, użytkownik Zac Medico |
2 |
napisał: |
3 |
> On 07/08/2018 06:56 AM, Michał Górny wrote: |
4 |
> > W dniu nie, 08.07.2018 o godzinie 15∶02 +0200, użytkownik Kristian |
5 |
> > Fiskerstrand napisał: |
6 |
> > > On 07/08/2018 08:53 AM, Michał Górny wrote: |
7 |
> > > > Is safe git syncing implemented already? If not, maybe finish it first and cover both with a single news item. Git is going to be more efficient here, so people may want to learn they have an alternative. |
8 |
> > > |
9 |
> > > Why complicate things, and increase wait for something that benefits |
10 |
> > > most users, just to give alternatives to a few using non-default sync |
11 |
> > > mechanism. Securing git distribution is a whole different ballpark. |
12 |
> > > |
13 |
> > |
14 |
> > Let me rephrase. Let's say I'm using rsync. This new feature is |
15 |
> > something positive but it breaks my use case (for one of the listed |
16 |
> > reasons -- overlayfs, inode use, small fs cache). After reading this |
17 |
> > news item, I learn that my only option is to disable the new feature. |
18 |
> > |
19 |
> > Now, I would appreciate being told that there's an alternate sync method |
20 |
> > that handles secure updates without having all those drawbacks. |
21 |
> |
22 |
> The thing is, the normal git tree doesn't even provide pre-generated |
23 |
> metadata, and I see then gentoo-mirror repo that provides metadata does |
24 |
> not have commits signed with an release key: |
25 |
> |
26 |
> https://github.com/gentoo-mirror/gentoo/commits/stable |
27 |
> |
28 |
> So I'm really not comfortable recommending git to anyone at this point. |
29 |
|
30 |
Wrong twice. |
31 |
|
32 |
Firstly, the canonical URL is: |
33 |
|
34 |
https://anongit.gentoo.org/git/repo/sync/gentoo.git |
35 |
(https://gitweb.gentoo.org/repo/sync/gentoo.git) |
36 |
|
37 |
Secondly, the merge commits (i.e. top commits that are verified |
38 |
by Portage) are signed by dedicated key that is part of the infra key |
39 |
set. In other words, it works out of the box. |
40 |
|
41 |
-- |
42 |
Best regards, |
43 |
Michał Górny |