On 19-02-19 23:04:26, Michael Orlitzky wrote: > On 2/19/19 10:23 PM, Matthew Thode wrote: > > As the title says, I think this should be done. > > > > First sync is impossible to verify without keys (webrsync) > > app-crypt/gentoo-keys has no dependencies, which help avoid some bloat > > in the base install. > > > > Let the bikeshedding begin. > > > > I don't have app-crypt/gentoo-keys installed. I seem to be doing okay > without it. > > In any case, on principle, we shouldn't add anything else to @system. No > one agrees on how we should treat @system packages as far as > dependencies go, and the whole idea is a stinky pile of dirty laundry > that we should work to make explicit instead. > > What problem would this solve? (Is adding gentoo-keys to @system the > least bad way to solve it?) >
It'd allow the stage tarballs (3,4) to use webrsync-gpg to verify portage tarballs. This is useful for the initial sync (as called out in our manual). Otherwise using emerge-webrsync could be mitm'd or otherwise messed with. As far how we treat deps of @system packages, since this does not have any deps that should help check that box for anyone worried. -- Matthew Thode (prometheanfire)
signature.asc
Description: PGP signature
