Gentoo Archives: gentoo-dev

From: "Harald van Dijk" <truedfx@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Signing everything, for fun and for profit
Date: Fri, 19 May 2006 15:48:16
Message-Id: 20060519153549.GA16524@gentoo.org
In Reply to: Re: [gentoo-dev] Signing everything, for fun and for profit by Chris Bainbridge
1 On Fri, May 19, 2006 at 04:17:38PM +0100, Chris Bainbridge wrote:
2 > On 19/05/06, Andrew Gaffney <agaffney@g.o> wrote:
3 > >Chris Bainbridge wrote:
4 > >> It is a single signature across the entire portage tree. It means that
5 > >> after rsync emerge can check the signature against the retrieved tree
6 > >> to validate the whole tree (or overlay).
7 > >
8 > >This idea has been brought up before and shot down. Signing the whole tree
9 > >does
10 > >not work, since we allow users to only sync parts of the tree.
11 >
12 > We do? What option to emerge enables this behaviour?
13
14 The PORTAGE_RSYNC_EXTRA_OPTS variable does. (Or RSYNC_EXCLUDEFROM with
15 older versions of portage.)
16 --
17 gentoo-dev@g.o mailing list