Gentoo Archives: gentoo-dev

From: Francesco Riosa <vivo75@×××××.com>
To: gentoo-dev@l.g.o, "Jason A. Donenfeld" <zx2c4@g.o>
Subject: Re: [gentoo-dev] Trustless Infrastructure
Date: Mon, 02 Jul 2018 22:26:42
Message-Id: 7f33d4f0-8e3f-28d4-d4f4-6fd4b918c138@gmail.com
In Reply to: [gentoo-dev] Trustless Infrastructure by "Jason A. Donenfeld"
1 Il 02/07/2018 17:36, Jason A. Donenfeld ha scritto:
2 > Proposal:
3 > - Sign every file in the portage tree so that it has a corresponding
4 > .asc. Repoman will need support for this.
5 >
6 implementation detail:
7 Adding an .asc file for every file would bring the total files from 130k
8 to 260k.
9 Would be possible to embed the signature _inside_ ebuilds and other
10 common files to spare at least 80k from those 260k?