Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH 1/5] verify-sig.eclass: New eclass to verify OpenPGP sigs
Date: Tue, 06 Oct 2020 11:46:33
Message-Id: 5f8518a3afdd6bbd114b70d1bbb6c2450c9f6024.camel@gentoo.org
In Reply to: Re: [gentoo-dev] [PATCH 1/5] verify-sig.eclass: New eclass to verify OpenPGP sigs by Ulrich Mueller
1 On Tue, 2020-10-06 at 13:34 +0200, Ulrich Mueller wrote:
2 > > > > > > On Tue, 06 Oct 2020, Michał Górny wrote:
3 > > On Tue, 2020-10-06 at 13:18 +0200, Ulrich Mueller wrote:
4 > > > > > > > > On Tue, 06 Oct 2020, Michał Górny wrote:
5 > > > > +IUSE="+verify-sig"
6 > > >
7 > > > At least don't enable this by default. The feature increases build time
8 > > > and has little (if any) benefits.
9 > > Do you have any numbers to back this claim?
10 >
11 > That's a strange question. Obviously build time can only increase if you
12 > install an additional dependency and download an additional distfile.
13 >
14
15 But how significant is the increase? Can you actually measure it
16 without trying hard to make things slow? If you are going to claim that
17 it outweighs the 'little' benefit, you need to try harder than that.
18
19 --
20 Best regards,
21 Michał Górny

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies