Philipp Marek wrote: > * Some files have a commit-pipe defined, so that eg. the passwords get > stripped out of the shadow files. > In case of a restore all passwords have to be set afresh. > * For a few files that include passwords (like ddclient) there are > already filters.
Is there some insecurity in how the data is stored that makes stripping passwords on an ad-hoc basis like thia a good idea? > * Currently I use the apt option Dpkg::Post-Invoke to commit, although > some anacron-job once a day or week might be good. If it has to manually commit, I don't see the point -- already wrote etckeeper. :-) I'd think that the benefit of a versioned filesystem would be that you don't have to manually commit changes. > Another idea might be to commit a new version only once per apt-get run. That's what etckeeper does. > * Needed space for the repository is on my system (with 1853 installed > packages) about 12MB for the initial import; the few changes up to now > take no space (10 to 30kB). git takes about 2.5 mb to version my 16 mb /etc (161 revisions so far). -- see shy jo
signature.asc
Description: Digital signature