Dnia 2015-08-10, o godz. 22:51:59
hasufell <hasuf...@gentoo.org> napisał(a):

> On 08/10/2015 10:47 PM, Andrew Savchenko wrote:
> > On Mon, 10 Aug 2015 22:13:23 +0200 hasufell wrote:
> >> On 08/10/2015 05:09 PM, Rich Freeman wrote:
> >>> On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert <flop...@gentoo.org> wrote:
> >>>>
> >>>> Expanding on this: the rsync master creates the following
> >>>> files/directories under metatdata. On my own system, I like to symlink
> >>>> them to locations outside my repo so that related portage features
> >>>> continue to work.
> >>>>
> >>>> I would like to have these added in .gitignore.
> >>>>
> >>>> metadata/dtd/ # used by something?
> >>>> metadata/glsa/ # used by the GLSA utilities?
> >>>> matadata/herds.xml # used by equery from gentoolkit
> >>>> metadata/news/ # used by eselect news
> >>>>
> >>>
> >>> As a side note, it probably wouldn't hurt to set up a guide for
> >>> running git on /usr/portage, including setting up these symlinks,
> >>> running egencache after emerge --sync, etc.  I imagine that this is a
> >>> configuration that many developers will tend to use, and with the
> >>> advent of git we may see more users who tend to contribute doing the
> >>> same.
> >>>
> >>
> >> In fact, this should be the recommended way of running gentoo for
> >> everyone. Our rsync methods are still inherently insecure (unless I
> >> missed something), because:
> >> 1. machine key
> >> 2. profiles, eclasses and so on are not covered with a
> >> signature/Manifest anyway
> >  
> > Not unless metadata cache will be synced too from a trusted source.
> > It takes too much time to generate, especially on non-brand-new
> > hardware.
> > 
> 
> I was wondering if that could be automated in a separate branch (only
> needs to update in 24h intervals).

Please don't cruft the repo with huge metadata. And I have
metadata-applied mirrors for all repositories at [1].

[1]:https://github.com/gentoo-mirror/

-- 
Best regards,
Michał Górny
<http://dev.gentoo.org/~mgorny/>

Attachment: pgpAowOCShyhg.pgp
Description: OpenPGP digital signature

Reply via email to