Gentoo Archives: gentoo-scm

From: Nirbheek Chauhan <nirbheek.chauhan@×××××.com>
To: "Robin H. Johnson" <robbat2@g.o>
Cc: gentoo-scm@l.g.o
Subject: Re: [gentoo-scm] gentoo-x86 on git - Manifests
Date: Mon, 23 Feb 2009 06:56:48
In Reply to: Re: [gentoo-scm] gentoo-x86 on git - Manifests by "Robin H. Johnson"
On Mon, Feb 23, 2009 at 1:27 AM, Robin H. Johnson <robbat2@g.o> wrote:
> New Design: > 1) slim Manifest: > DIST - digest of distfiles located in DISTDIR > _AND_ > 2) VCS index: > SHA1/* digest of files located in the tree > > BOTH sources must be present. A slim Manifest would not be valid without the > VCS containing digests of the files not contained in the Manifest.
Another point worth mentioning is that any manifest system which uses DVCS manifests or stores it's manifests in DVCSes is *far more secure* than a Cathedral VCS. Currently, there is a single point of failure for mangling of indexes -- And no one outside of Infra will be able to notice. If we have a distributed system, any fiddling on will be noticed by *everyone*. -- ~Nirbheek Chauhan