Re: [gentoo-portage-dev] [PATCH v2] misc: Distribute a repo.postsync.d hook to run gemato verification

[Zac Medico]

On 01/16/2018 10:39 AM, Michał Górny wrote:
> W dniu wto, 16.01.2018 o godzinie 12∶44 -0500, użytkownik Alec Warner
> napisał:
>> On Tue, Jan 16, 2018 at 11:43 AM, Michał Górny <mgorny@g.o> wrote:
>>
>>> Include a repo.postsync.d hook to verify the rsync checkout using
>>> gemato. Given that not all people will want to have it enabled
>>> unconditionally, no setup.py rules are included -- instead, the file
>>> would be installed conditionally by the ebuild.
>>>
>>> [v2: included link to the wiki page]
>>> ---
>>>  MANIFEST.in                   |  2 +-
>>>  misc/repo.postsync.d/00gemato | 18 ++++++++++++++++++
>>>  2 files changed, 19 insertions(+), 1 deletion(-)
>>>  create mode 100644 misc/repo.postsync.d/00gemato
>>>
>>> diff --git a/MANIFEST.in b/MANIFEST.in
>>> index 4f6cac162..edc6704e7 100644
>>> --- a/MANIFEST.in
>>> +++ b/MANIFEST.in
>>> @@ -14,4 +14,4 @@ include cnf/make.conf.example.*
>>>  include .portage_not_installed
>>>
>>>  # extra scripts
>>> -include misc/*
>>> +graft misc
>>> diff --git a/misc/repo.postsync.d/00gemato b/misc/repo.postsync.d/00gemato
>>> new file mode 100644
>>> index 000000000..f2af50925
>>> --- /dev/null
>>> +++ b/misc/repo.postsync.d/00gemato
>>> @@ -0,0 +1,18 @@
>>> +#!/bin/bash
>>> +# repo.postsync.d hook to verify ::gentoo checkout using gemato
>>> +
>>> +name=${1}
>>> +url=${2}
>>> +path=${3}
>>> +
>>> +# keyring installed by gentoo-keys
>>> +openpgp_key=/var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
>>>
>>
>> This seems a bit leaky to me.
>>
>> Possible to get gentoo-keys to print it?
>>
>> e.g:
>>
>> openpgp_key=$(gentoo-keys --print-key-path)
>
> But app-crypt/gentoo-keys doesn't include that executable, and it has
> no dependency on app-crypt/gkeys. I'd rather not introduce an artificial
> dependency here.

I suppose we could using a separate ebuild to install this hook, so that
we can update it separately from portage if necessary. The hook can
still live in the portage repository (like emerge-delta-webrsync which
is also installed by a separate ebuild).
-- 
Thanks,
Zac