Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Alon Bar-Lev
On 26 January 2018 at 00:21, Robin H. Johnson wrote: > On Thu, Jan 25, 2018 at 11:55:58PM +0200, Alon Bar-Lev wrote: >> I did not looked into the detailed implementation, however, please >> make sure integrity check handles the same cases we have applied to >> emerge-webrsync in the past, includin

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Robin H. Johnson
On Thu, Jan 25, 2018 at 11:55:58PM +0200, Alon Bar-Lev wrote: > I did not looked into the detailed implementation, however, please > make sure integrity check handles the same cases we have applied to > emerge-webrsync in the past, including: Gemato is the implementation of GLEP74/MetaManifest, whi

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Alon Bar-Lev
Hi, On 25 January 2018 at 14:35, Michał Górny wrote: > > Starting with sys-apps/portage-2.3.22, Portage enables cryptographic > verification of the Gentoo rsync repository distributed over rsync > by default. This aims to prevent malicious third parties from altering > the contents of the ebuild

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread R0b0t1
On Thu, Jan 25, 2018 at 3:45 PM, Michał Górny wrote: > W dniu czw, 25.01.2018 o godzinie 21∶37 +, użytkownik Robin H. > Johnson napisał: >> On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał Górny wrote: >> > Title: Portage rsync tree verification >> > Author: Michał Górny >> > Posted: 2018-01-

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Michał Górny
W dniu czw, 25.01.2018 o godzinie 21∶37 +, użytkownik Robin H. Johnson napisał: > On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał Górny wrote: > > Title: Portage rsync tree verification > > Author: Michał Górny > > Posted: 2018-01-xx > > Revision: 1 > > News-Item-Format: 2.0 > > Display-If-In

Re: [gentoo-dev] [News item review] Portage rsync tree verification

2018-01-25 Thread M. J. Everitt
On 25/01/18 11:01, Kristian Fiskerstrand wrote: > On 01/25/2018 11:04 AM, Michał Górny wrote: > >> The verification is implemented using app-portage/gemato. Currently, > ... "implemented in", as opposed to "using"? its implemented using > various cryptographic primitives, but gemato is the imple

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Robin H. Johnson
On Thu, Jan 25, 2018 at 01:35:17PM +0100, Michał Górny wrote: > Title: Portage rsync tree verification > Author: Michał Górny > Posted: 2018-01-xx > Revision: 1 > News-Item-Format: 2.0 > Display-If-Installed: Starting with sys-apps/portage-2.3.22, Portage enables cryptographic > verification of t

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Ulrich Mueller
> On Thu, 25 Jan 2018, Michał Górny wrote: > Here's the updated version: > --- > Starting with sys-apps/portage-2.3.22, Portage enables cryptographic > verification of the Gentoo rsync repository distributed over rsync > by default. Looks like there's one "rsync" too much in that sentence.

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Aaron W. Swenson
On 2018-01-25 13:35, Michał Górny wrote: > Display-If-Installed: =2.3.22 this same information? I know we don’t have expires, yet. How about making it signature.asc Description: Digital signature

Re: [gentoo-dev] [News item review] Portage rsync tree verification (v2)

2018-01-25 Thread Michał Górny
Here's the updated version: --- Title: Portage rsync tree verification Author: Michał Górny Posted: 2018-01-xx Revision: 1 News-Item-Format: 2.0 Display-If-Installed: https://www.gentoo.org/downloads/signatures/ --- -- Best regards, Michał Górny

Re: [gentoo-dev] [News item review] Portage rsync tree verification

2018-01-25 Thread Michał Górny
W dniu czw, 25.01.2018 o godzinie 12∶01 +0100, użytkownik Kristian Fiskerstrand napisał: > On 01/25/2018 11:04 AM, Michał Górny wrote: > > Hi, > > > > Thanks for your work on this! > > > This one would be committed once new sys-apps/portage release is > > wrapped up and hits ~arch. > > > > ---

[gentoo-dev] Last rites: media-video/qx11grab

2018-01-25 Thread Michael Palimaka
# Michael Palimaka (25 Jan 2018) # Requires dead Qt 4. Dead upstream. # Masked for removal in 30 days. Bug #644532. media-video/qx11grab

Re: [gentoo-dev] [News item review] Portage rsync tree verification

2018-01-25 Thread Kristian Fiskerstrand
On 01/25/2018 11:04 AM, Michał Górny wrote: > Hi, > Thanks for your work on this! > This one would be committed once new sys-apps/portage release is > wrapped up and hits ~arch. > > --- Title: Portage rsync tree verification Author: Michał Górny > Posted: 2018-01-xx Revision: 1 News-Item-Forma

[gentoo-dev] Re: [News item review] Portage rsync tree verification

2018-01-25 Thread Duncan
Michał Górny posted on Thu, 25 Jan 2018 11:04:27 +0100 as excerpted: > Hi, > > This one would be committed once new sys-apps/portage release is wrapped > up and hits ~arch. > > --- > Title: Portage rsync tree verification Might want to put a paragraph in there saying git sync users can ignore,

[gentoo-dev] [News item review] Portage rsync tree verification

2018-01-25 Thread Michał Górny
Hi, This one would be committed once new sys-apps/portage release is wrapped up and hits ~arch. --- Title: Portage rsync tree verification Author: Michał Górny Posted: 2018-01-xx Revision: 1 News-Item-Format: 2.0 Display-If-Installed: https://www.gentoo.org/downloads/signatures/ --- -- Best re