On Fri, Nov 21, 2008 at 03:17:26PM +0000, acondit wrote:
> Why are the hardy dists not also under 
>         http://linuxcnc.org/emc2/dists/hardy/
> like the dapper and breezy dists rather than
>         http://linuxcnc.org/hardy/dists/hardy/
> 
> Then you would only have to bookmark <http://linuxcnc.org/emc2/dists/> in 
> order
> to find the offline distribution for emc2.

Because of some technical details of debian package archive signing,
coupled with decisions we made back when we created the dapper
repository that were incompatible with what we wanted to do in the hardy
repository.

Everything under /emc2 is signed by Chris Radek's GPG key.  By the time
we did Hardy we realized this was not the best approach.  For Hardy
we sign with a key that is shared by the EMC board members.  However,
you can't do both of those things within the same directory structure.

We can't change the old packages to be signed by the new shared key,
because that would create "unverified package" type warnings for every
user performing updates on the old systems.

Jeff

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Emc-users mailing list
Emc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/emc-users

Reply via email to