dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
There are various blogs guiding people to use a Debian Live CD for managing PGP master keys Has anybody thought of making a dedicated live CD image for this purpose, with some kind of PGP quick setup wizard and attempting to enforce a sane and secure workflow? One page I came across suggested us

Re: Extending the build profile namespace

2016-04-25 Thread Manuel A. Fernandez Montecelo
2016-04-24 20:08 Helmut Grohne: * The nocheck profile is the cousin of DEB_BUILD_OPTIONS=nocheck and must be used in conjunction with that option. Its sole purpose is to mark droppable dependencies and it seems to be used properly. I would be happy to see even wider adoption (e.g. #787044)

Re: Extending the build profile namespace

2016-04-25 Thread Ian Jackson
Helmut Grohne writes ("Extending the build profile namespace"): > * The nodoc profile is a bit strange. It is supposed to drop >documentation from packages or to drop documentation packages. The >former leads to packages whose content varies with profiles (which >generally is bad) I t

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Ian Jackson
Daniel Pocock writes ("dedicated live CD for PGP master key management"): > Some specific things that the live image could do: > - verifying there is no network connection, no DHCP daemon, > automatically shutting down if a network connection becomes active > - formatting 2 or 3 flash drives in a m

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25 April 2016 14:55:07 CEST, Ian Jackson wrote: >Daniel Pocock writes ("dedicated live CD for PGP master key >management"): >> Some specific things that the live image could do: >> - verifying there is no network connection, no DHCP daemon, >> automatically shutting down if a network connectio

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Holger Levsen
On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: > I had already made up some live CDs for ready-to-run VoIP and remote hands > purposes, so I can probably do some of what is required, but it seems like a > good idea to avoid duplicating any other efforts in this area too. shouldn

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 16:23, Holger Levsen wrote: > On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: >> I had already made up some live CDs for ready-to-run VoIP and remote hands >> purposes, so I can probably do some of what is required, but it seems like a >> good idea to avoid duplicating

Bug#822608: ITP: libdynamic-graph -- Dynamic graph C++ library development package

2016-04-25 Thread Rohan Budhiraja
Package: wnpp Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org Package name: libdynamic-graph Version: 3.0.0 Upstream Authors: Thomas Moulard François Bleibel François Keith Nicolas Mansard Oliv

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Holger Levsen
On Mon, Apr 25, 2016 at 05:24:21PM +0200, Daniel Pocock wrote: > Another interesting idea may be having an application that runs in Tails > to download other people's keys from key servers, automatically using a > different Tor connection for each download. apt show parcimonie | $magic Description

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Christian Seiler
Am 2016-04-25 17:24, schrieb Daniel Pocock: On 25/04/16 16:23, Holger Levsen wrote: On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: I had already made up some live CDs for ready-to-run VoIP and remote hands purposes, so I can probably do some of what is required, but it seems li

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 17:34, Christian Seiler wrote: > Am 2016-04-25 17:24, schrieb Daniel Pocock: >> On 25/04/16 16:23, Holger Levsen wrote: >>> On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: I had already made up some live CDs for ready-to-run VoIP and remote hands purposes, so I

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Christian Seiler
On 04/25/2016 06:38 PM, Daniel Pocock wrote: > On 25/04/16 17:34, Christian Seiler wrote: >> Am 2016-04-25 17:24, schrieb Daniel Pocock: >>> On 25/04/16 16:23, Holger Levsen wrote: On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: > I had already made up some live CDs for read

Re: Extending the build profile namespace

2016-04-25 Thread Helmut Grohne
On Mon, Apr 25, 2016 at 01:44:01PM +0100, Ian Jackson wrote: > Helmut Grohne writes ("Extending the build profile namespace"): > > * The nodoc profile is a bit strange. It is supposed to drop > >documentation from packages or to drop documentation packages. The > >former leads to packages

Re: Extending the build profile namespace

2016-04-25 Thread Helmut Grohne
On Mon, Apr 25, 2016 at 01:28:00PM +0100, Manuel A. Fernandez Montecelo wrote: > Perhaps these OPTIONS and PROFILES should be merged, in a way that if > one is enabled, the other also is. (Is this the plan already?) They serve different needs. Quite a few options do not make sense as profiles. Wh

Re: Extending the build profile namespace

2016-04-25 Thread Holger Levsen
On Mon, Apr 25, 2016 at 08:06:07PM +0200, Helmut Grohne wrote: > because the policy says that nothing must rely on /usr/share/doc/$pkg, > but when did the last archive rebuild validate that property? https://piuparts.debian.org/sid-nodoc/ at least tests that installation, upgrade and removals work

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 19:03, Christian Seiler wrote: > On 04/25/2016 06:38 PM, Daniel Pocock wrote: >> On 25/04/16 17:34, Christian Seiler wrote: >>> Am 2016-04-25 17:24, schrieb Daniel Pocock: On 25/04/16 16:23, Holger Levsen wrote: > On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock >

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Adam Borowski
On Mon, Apr 25, 2016 at 10:15:02AM +0200, Daniel Pocock wrote: > There are various blogs guiding people to use a Debian Live CD for > managing PGP master keys > > Has anybody thought of making a dedicated live CD image for this > purpose, with some kind of PGP quick setup wizard and attempting to

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 21:51, Adam Borowski wrote: > On Mon, Apr 25, 2016 at 10:15:02AM +0200, Daniel Pocock wrote: >> There are various blogs guiding people to use a Debian Live CD for >> managing PGP master keys >> >> Has anybody thought of making a dedicated live CD image for this >> purpose, with some k

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Christian Seiler
On 04/25/2016 08:54 PM, Daniel Pocock wrote: > On 25/04/16 19:03, Christian Seiler wrote: >>> Does the workflow make sense? >> >> In principle yes, however it doesn't quite fit with my the >> workflow I'd like to use something like that for: my master key is >> on a two separate SD cards, and I onl

Re: Extending the build profile namespace

2016-04-25 Thread Manuel A. Fernandez Montecelo
Hi, 2016-04-25 19:06 Helmut Grohne: On Mon, Apr 25, 2016 at 01:28:00PM +0100, Manuel A. Fernandez Montecelo wrote: Perhaps these OPTIONS and PROFILES should be merged, in a way that if one is enabled, the other also is. (Is this the plan already?) They serve different needs. Quite a few opti