On Sun, Oct 2, 2011 at 1:39 PM, Zac Medico <zmed...@gentoo.org> wrote: > On 10/02/2011 05:46 AM, Robin H. Johnson wrote: >> On Sat, Oct 01, 2011 at 09:40:13PM -0700, Zac Medico wrote: >>> If we control these hashes via metadata/layout.conf, then we can toggle >>> it atomically for all commiters. Otherwise, we'll have an annoying >>> period of time where different committers are committing different sets >>> of hashes, depending on their portage version. >> How do you suggest doing it via layout.conf? I've kept SHA256 in both >> sets for now, but if you could enforce new signatures including both >> WHIRLPOOL and SHA256, that would be great. > > How about if we put something like this in > gentoo-x86/metadata/layout.conf now:
Reminds me, I was going to do an analysis on -commit mails to track portage versions; I'll do that now. > > manifest2-sha1 = true > manifest2-whirlpool = false > > Then we'll patch portage so that by default it will disable SHA1 and > enable WHIRLPOOL, and the above settings will override the defaults. > After the patched portage is marked stable in a month or so, we'll send > an announcement to gentoo-announce, and remove the above settings from > layout.conf. > -- > Thanks, > Zac > >
