| 1 |
On 07/08/2018 01:18 PM, Zac Medico wrote: |
| 2 |
> On 07/08/2018 01:08 PM, Michał Górny wrote: |
| 3 |
>> W dniu nie, 08.07.2018 o godzinie 11∶57 -0700, użytkownik Zac Medico |
| 4 |
>> napisał: |
| 5 |
>>> On 07/08/2018 11:42 AM, Michał Górny wrote: |
| 6 |
>>>> W dniu nie, 08.07.2018 o godzinie 11∶04 -0700, użytkownik Zac Medico |
| 7 |
>>>> napisał: |
| 8 |
>>>>> On 07/08/2018 06:56 AM, Michał Górny wrote: |
| 9 |
>>>>>> W dniu nie, 08.07.2018 o godzinie 15∶02 +0200, użytkownik Kristian |
| 10 |
>>>>>> Fiskerstrand napisał: |
| 11 |
>>>>>>> On 07/08/2018 08:53 AM, Michał Górny wrote: |
| 12 |
>>>>>>>> Is safe git syncing implemented already? If not, maybe finish it first and cover both with a single news item. Git is going to be more efficient here, so people may want to learn they have an alternative. |
| 13 |
>>>>>>> |
| 14 |
>>>>>>> Why complicate things, and increase wait for something that benefits |
| 15 |
>>>>>>> most users, just to give alternatives to a few using non-default sync |
| 16 |
>>>>>>> mechanism. Securing git distribution is a whole different ballpark. |
| 17 |
>>>>>>> |
| 18 |
>>>>>> |
| 19 |
>>>>>> Let me rephrase. Let's say I'm using rsync. This new feature is |
| 20 |
>>>>>> something positive but it breaks my use case (for one of the listed |
| 21 |
>>>>>> reasons -- overlayfs, inode use, small fs cache). After reading this |
| 22 |
>>>>>> news item, I learn that my only option is to disable the new feature. |
| 23 |
>>>>>> |
| 24 |
>>>>>> Now, I would appreciate being told that there's an alternate sync method |
| 25 |
>>>>>> that handles secure updates without having all those drawbacks. |
| 26 |
>>>>> |
| 27 |
>>>>> The thing is, the normal git tree doesn't even provide pre-generated |
| 28 |
>>>>> metadata, and I see then gentoo-mirror repo that provides metadata does |
| 29 |
>>>>> not have commits signed with an release key: |
| 30 |
>>>>> |
| 31 |
>>>>> https://github.com/gentoo-mirror/gentoo/commits/stable |
| 32 |
>>>>> |
| 33 |
>>>>> So I'm really not comfortable recommending git to anyone at this point. |
| 34 |
>>>> |
| 35 |
>>>> Wrong twice. |
| 36 |
>>>> |
| 37 |
>>>> Firstly, the canonical URL is: |
| 38 |
>>>> |
| 39 |
>>>> https://anongit.gentoo.org/git/repo/sync/gentoo.git |
| 40 |
>>>> (https://gitweb.gentoo.org/repo/sync/gentoo.git) |
| 41 |
>>>> |
| 42 |
>>>> Secondly, the merge commits (i.e. top commits that are verified |
| 43 |
>>>> by Portage) are signed by dedicated key that is part of the infra key |
| 44 |
>>>> set. In other words, it works out of the box. |
| 45 |
>>> |
| 46 |
>>> Is there any documentation that shows users how to migrate to git, and |
| 47 |
>>> what the pros and cons might be? Maybe its worthy of its own news item. |
| 48 |
>> |
| 49 |
>> Maybe. I don't really know, and don't think it's a good idea to show 30 |
| 50 |
>> news item of things users might like on every new Gentoo install. |
| 51 |
> |
| 52 |
> Well if instructions for setting up git sync and associated pros/cons |
| 53 |
> are not documented anywhere then I won't advise anyone to use it. |
| 54 |
|
| 55 |
I've attempted to configure it for myself, and this is what it does: |
| 56 |
|
| 57 |
* Using keys from /usr/share/openpgp-keys/gentoo-release.asc |
| 58 |
* Refreshing keys from keyserver ... |
| 59 |
[ ok ] |
| 60 |
* No valid signature found: unable to verify signature (missing key?) |
| 61 |
|
| 62 |
|
| 63 |
-- |
| 64 |
Thanks, |
| 65 |
Zac |
Archives