| 1 |
On 07/08/2018 01:08 PM, Michał Górny wrote: |
| 2 |
> W dniu nie, 08.07.2018 o godzinie 11∶57 -0700, użytkownik Zac Medico |
| 3 |
> napisał: |
| 4 |
>> On 07/08/2018 11:42 AM, Michał Górny wrote: |
| 5 |
>>> W dniu nie, 08.07.2018 o godzinie 11∶04 -0700, użytkownik Zac Medico |
| 6 |
>>> napisał: |
| 7 |
>>>> On 07/08/2018 06:56 AM, Michał Górny wrote: |
| 8 |
>>>>> W dniu nie, 08.07.2018 o godzinie 15∶02 +0200, użytkownik Kristian |
| 9 |
>>>>> Fiskerstrand napisał: |
| 10 |
>>>>>> On 07/08/2018 08:53 AM, Michał Górny wrote: |
| 11 |
>>>>>>> Is safe git syncing implemented already? If not, maybe finish it first and cover both with a single news item. Git is going to be more efficient here, so people may want to learn they have an alternative. |
| 12 |
>>>>>> |
| 13 |
>>>>>> Why complicate things, and increase wait for something that benefits |
| 14 |
>>>>>> most users, just to give alternatives to a few using non-default sync |
| 15 |
>>>>>> mechanism. Securing git distribution is a whole different ballpark. |
| 16 |
>>>>>> |
| 17 |
>>>>> |
| 18 |
>>>>> Let me rephrase. Let's say I'm using rsync. This new feature is |
| 19 |
>>>>> something positive but it breaks my use case (for one of the listed |
| 20 |
>>>>> reasons -- overlayfs, inode use, small fs cache). After reading this |
| 21 |
>>>>> news item, I learn that my only option is to disable the new feature. |
| 22 |
>>>>> |
| 23 |
>>>>> Now, I would appreciate being told that there's an alternate sync method |
| 24 |
>>>>> that handles secure updates without having all those drawbacks. |
| 25 |
>>>> |
| 26 |
>>>> The thing is, the normal git tree doesn't even provide pre-generated |
| 27 |
>>>> metadata, and I see then gentoo-mirror repo that provides metadata does |
| 28 |
>>>> not have commits signed with an release key: |
| 29 |
>>>> |
| 30 |
>>>> https://github.com/gentoo-mirror/gentoo/commits/stable |
| 31 |
>>>> |
| 32 |
>>>> So I'm really not comfortable recommending git to anyone at this point. |
| 33 |
>>> |
| 34 |
>>> Wrong twice. |
| 35 |
>>> |
| 36 |
>>> Firstly, the canonical URL is: |
| 37 |
>>> |
| 38 |
>>> https://anongit.gentoo.org/git/repo/sync/gentoo.git |
| 39 |
>>> (https://gitweb.gentoo.org/repo/sync/gentoo.git) |
| 40 |
>>> |
| 41 |
>>> Secondly, the merge commits (i.e. top commits that are verified |
| 42 |
>>> by Portage) are signed by dedicated key that is part of the infra key |
| 43 |
>>> set. In other words, it works out of the box. |
| 44 |
>> |
| 45 |
>> Is there any documentation that shows users how to migrate to git, and |
| 46 |
>> what the pros and cons might be? Maybe its worthy of its own news item. |
| 47 |
> |
| 48 |
> Maybe. I don't really know, and don't think it's a good idea to show 30 |
| 49 |
> news item of things users might like on every new Gentoo install. |
| 50 |
|
| 51 |
Well if instructions for setting up git sync and associated pros/cons |
| 52 |
are not documented anywhere then I won't advise anyone to use it. |
| 53 |
-- |
| 54 |
Thanks, |
| 55 |
Zac |
Archives