On Wed, May 19, 2010 at 02:14:40PM +0100, Darren J Moffat wrote: > I really have only one comment and that is about integrity > protection of the on disk format. > > [...] > > Is there really a risk here ? > > Compare this to what ZFS does. It uses a Merkle tree of checksums > going all they way back to the uberblock.
Merkle trees are really cool, and nowadays very popular: ZFS, Git, CouchDB and others all use them. But just because you have a spectacularly cool hammer... Integrity protection here could best be handled by ZFS, and by using a snapshot to access the on-disk repo. Granted, that would mean that IPS on systems that don't support ZFS would lack integrity protection, just like most applications. I think that'd be acceptable for the forseeable future. Also, what is to be defended against? Here, IMO: data corruption due to bad hw -- ZFS is plenty good enough at that; there's no need to replicate ZFS' integrity protection. Nico -- _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
