commit: 0db5f38ec742b71e13214183b2ce1178c5d4c6ad Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Sat Nov 8 14:04:07 2025 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Sat Nov 8 14:04:41 2025 +0000 URL: https://gitweb.gentoo.org/data/gentoo-news.git/commit/?id=0db5f38e
2025-11-01-portage-git-sync-verify: more scariness Hopefully this is good enough. Bug: https://bugs.gentoo.org/959831 Bug: https://bugs.gentoo.org/965474 Signed-off-by: Sam James <sam <AT> gentoo.org> .../2025-11-01-portage-git-sync-verify.en.txt | 20 +++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/2025-11-01-portage-git-sync-verify/2025-11-01-portage-git-sync-verify.en.txt b/2025-11-01-portage-git-sync-verify/2025-11-01-portage-git-sync-verify.en.txt index 2fa9bf0..8562f4c 100644 --- a/2025-11-01-portage-git-sync-verify/2025-11-01-portage-git-sync-verify.en.txt +++ b/2025-11-01-portage-git-sync-verify/2025-11-01-portage-git-sync-verify.en.txt @@ -1,7 +1,7 @@ Title: Portage to verify git-synced ::gentoo per default Author: Florian Schmaus <[email protected]> Posted: 2025-11-01 -Revision: 4 +Revision: 5 News-Item-Format: 2.0 Display-If-Installed: sys-apps/portage @@ -31,14 +31,16 @@ does not include news items, GLSAs, or generated metadata. No action is required when using one of these remotes listed above. This news item is NOT instructing users to start using the raw repo, it -is just a necessary change if you are already using it. - -However, users of the "raw" ::gentoo remote repository need to adjust -the repository configuration to verify against the "gentoo developers" -keyfile. Ensure that sec-keys/openpgp-keys-gentoo-developers is -installed, as it provides this keyfile. Furthermore, the key refresh -method should be set to 'keyserver' because WKD is not supported with -the "gentoo developers" keyfile. +is just a necessary change if you are already using it. Please do not start +using the "raw" repo as a result of this news item. Stop reading if you +aren't using it already! + +However, advanced users who already use the "raw" ::gentoo remote repository +need to adjust the repository configuration to verify against the +"gentoo developers" keyfile. Ensure that sec-keys/openpgp-keys-gentoo-developers +is installed, as it provides this keyfile. Furthermore, the key refresh +method should be set to 'keyserver' because WKD is not supported with the +"gentoo developers" keyfile. Remotes of this category include: - https://github.com/gentoo/gentoo
