Re: [gentoo-dev] integrity of stage files

[Robin H. Johnson]

On Sat, Oct 08, 2011 at 05:44:01PM -0700, Alec Warner wrote:
> On Sat, Oct 8, 2011 at 5:41 PM, "Paweł Hajdan, Jr."
> <phajdan.jr@g.o> wrote:
> > On 10/8/11 5:01 PM, Robin H. Johnson wrote:
> >>> Ah, I just forgot about that page. Okay, so can we also update the
> >>> Handbook to include GPG signature checking?
> >> It DOES already mention checking the signature:
> >> http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=1&chap=2#doc_chap3
> >
> > That's good, but it only mentions GPG for checking downloaded .iso
> > images. GPG is not mentioned at all for stage files.
> >
> > For example, I don't re-download the installation .iso very often (old
> > ones are still good, or one can use sysresccd), but I always re-download
> > the most recent stages (less rebuilding).
> Why not ship something in /usr/portage/scripts, or write some scripts
> to do this?
+1 on having scripts, but they need to be in the media, not the scripts
dir.

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@g.o
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85