Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michał Górny
Dnia 2015-05-16, o godz. 20:38:36
Michael Orlitzky  napisał(a):

> On 05/16/2015 06:01 PM, Michał Górny wrote:
> >>
> >> We have gentoo-announce@g.o and gentoo-user@g.o too!
> > 
> > That's gentoo-dev-announce. 'dev' is the key part. And gentoo-user@ is
> > doubtedly used by sysadmins.
> > 
> 
> This one:
> 
> https://archives.gentoo.org/gentoo-announce/

First time I hear about it. Looks to be used primarily for GLSAs.
I wonder if anyone actually uses it.

-- 
Best regards,
Michał Górny


pgpSWhadLDH5Y.pgp
Description: OpenPGP digital signature


Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michael Orlitzky
On 05/16/2015 06:00 PM, Michał Górny wrote:
>>
>> Do we need a news item for this at all? Everything is backward
>> compatible and most people don't need to do anything at all in response
>> to the news.
> 
> No, we don't. But news items are good way to tell people that something
> is happening. Look at Funtoo. Their users are happy because developers
> announce stuff rather than expecting them to watch for random things
> happening.
> 

Ok, just keep in mind that you force thousands of people to type
`eselect news read new` on all of their machines when you post a feature
announcement.




Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michael Orlitzky
On 05/16/2015 06:01 PM, Michał Górny wrote:
>>
>> We have gentoo-announce@g.o and gentoo-user@g.o too!
> 
> That's gentoo-dev-announce. 'dev' is the key part. And gentoo-user@ is
> doubtedly used by sysadmins.
> 

This one:

https://archives.gentoo.org/gentoo-announce/




Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michał Górny
Dnia 2015-05-16, o godz. 23:48:01
Alon Bar-Lev  napisał(a):

> On 15 May 2015 at 17:51, Michał Górny  wrote:
> > Please note that the current syncing code does not verify the OpenPGP
> > signature to confirm the authenticity of fetched snapshots and deltas.
> > This feature will be added as soon as gentoo-keys support in Portage is
> > available.
> 
> These are great news!
> We can retire the webrsync.
> Why not sign it similar to the portage snapshot are signed for now?
> The webrsync signature validation is quite simple.

All signing is in place already for a long time. Just the verification
code is missing, and it wasn't added because I was told to wait for
gentoo-keys.

> Just a reminder: please note the rollback prevention mechanism in
> webrsync, it is not enough to check signature, but also prevent older
> snapshot to be used.

Truth be told, the squashdelta syncing wasn't really made with rollback
prevention in mind. I can't think immediately of any solution that
would prevent accidental rollback while preserving the intended
flexibility.

-- 
Best regards,
Michał Górny


pgptMxdy9Z1rN.pgp
Description: OpenPGP digital signature


Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michał Górny
Dnia 2015-05-16, o godz. 10:59:20
Michael Orlitzky  napisał(a):

> On 05/15/2015 10:51 AM, Michał Górny wrote:
> > Title: SquashDelta syncing support
> 
> Do we need a news item for this at all? Everything is backward
> compatible and most people don't need to do anything at all in response
> to the news.

No, we don't. But news items are good way to tell people that something
is happening. Look at Funtoo. Their users are happy because developers
announce stuff rather than expecting them to watch for random things
happening.

-- 
Best regards,
Michał Górny


pgpIFr_u7xIS3.pgp
Description: OpenPGP digital signature


Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michał Górny
Dnia 2015-05-15, o godz. 08:23:27
Dirkjan Ochtman  napisał(a):

> On Fri, May 15, 2015 at 7:51 AM, Michał Górny  wrote:
> > Starting with Portage 2.2.19, a new SquashDelta syncing method has been
> > introduced. It is meant to provide lightweight and efficient solution
> > for stable systems. The whole repository is contained within a single
> > pre-generated SquashFS image file. The daily snapshot of the repository
> > is first fetched from the mirrors, and afterwards updated in-place using
> > deltas (without repacking).
> 
> This sounds nice, but the news item currently leaves me wondering what
> sort of improvements I should expect. It says the new method is
> "lightweight and efficient", but it would be nice to quantify this a
> little bit, or add a link to a page with more details. I think the
> default sync method in the handbook up to now has always been rsync? A
> comparison (both in terms of upside and in terms of downside) would be
> nice. Also, whether we want to make this the new default at some
> point, and if so, when.

I'll rewrite the beginning to be more clear on advantages when I have
some time for it.

-- 
Best regards,
Michał Górny


pgpL0KRIMcGUv.pgp
Description: OpenPGP digital signature


Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michał Górny
Dnia 2015-05-16, o godz. 15:23:24
Michael Orlitzky  napisał(a):

> On 05/16/2015 03:18 PM, Pacho Ramos wrote:
> > 
> > Maybe this could be announced in planet.gentoo.org or even main
> > gentoo.org news ;)
> > 
> > 
> 
> We have gentoo-announce@g.o and gentoo-user@g.o too!

That's gentoo-dev-announce. 'dev' is the key part. And gentoo-user@ is
doubtedly used by sysadmins.

-- 
Best regards,
Michał Górny


pgpRr2oid3rbr.pgp
Description: OpenPGP digital signature


Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Alon Bar-Lev
On 15 May 2015 at 17:51, Michał Górny  wrote:
> Please note that the current syncing code does not verify the OpenPGP
> signature to confirm the authenticity of fetched snapshots and deltas.
> This feature will be added as soon as gentoo-keys support in Portage is
> available.

These are great news!
We can retire the webrsync.
Why not sign it similar to the portage snapshot are signed for now?
The webrsync signature validation is quite simple.

Just a reminder: please note the rollback prevention mechanism in
webrsync, it is not enough to check signature, but also prevent older
snapshot to be used.

Regards,
Alon



Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Brian Dolbec
On Sat, 16 May 2015 15:23:24 -0400
Michael Orlitzky  wrote:

> On 05/16/2015 03:18 PM, Pacho Ramos wrote:
> > 
> > Maybe this could be announced in planet.gentoo.org or even main
> > gentoo.org news ;)
> > 
> > 
> 
> We have gentoo-announce@g.o and gentoo-user@g.o too!
> 
> 

But it will have to wait.  There is a few bugs in the commit made to
portage for the release.  It doesn't run.  It is fixed in portage-
though.

We'll see if we can get it gpg verifying with gkeys for another release.

-- 
Brian Dolbec 




[gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in eclass: ChangeLog kde5.eclass

2015-05-16 Thread Michael Palimaka
On 17/05/15 06:04, Jeroen Roovers wrote:
> On Sun, 10 May 2015 06:44:30 +0200
> Michał Górny  wrote:
> 
>>> +  09 May 2015; Manuel Rüger  kde5.eclass:
>>> +  Sync with overlay.
>>
>> This isn't a really useful ChangeLog note (commit message), you know?
>> Describe *what* you change, do not expect users to go try to figure
>> out where the overlay is and which changes you merged.
> 
> Nothing positive happened yet to the ChangeLog entry. Instead we got
> more.
> 
>   15 May 2015; Michael Palimaka 
>   kde4-base.eclass: Sync with KDE overlay - update SRC_URI.
> 

This is a complete description of the changes made.





Re: [gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in eclass: ChangeLog kde5.eclass

2015-05-16 Thread Jeroen Roovers
On Sun, 10 May 2015 06:44:30 +0200
Michał Górny  wrote:

> > +  09 May 2015; Manuel Rüger  kde5.eclass:
> > +  Sync with overlay.
> 
> This isn't a really useful ChangeLog note (commit message), you know?
> Describe *what* you change, do not expect users to go try to figure
> out where the overlay is and which changes you merged.

Nothing positive happened yet to the ChangeLog entry. Instead we got
more.

  15 May 2015; Michael Palimaka 
  kde4-base.eclass: Sync with KDE overlay - update SRC_URI.

Hi KDE people, you can fix ChangeLog entries. So now you know.


 jer



Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michael Orlitzky
On 05/16/2015 03:18 PM, Pacho Ramos wrote:
> 
> Maybe this could be announced in planet.gentoo.org or even main
> gentoo.org news ;)
> 
> 

We have gentoo-announce@g.o and gentoo-user@g.o too!




Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Pacho Ramos
El sáb, 16-05-2015 a las 20:38 +0200, Alexis Ballier escribió:
> On Sat, 16 May 2015 10:59:20 -0400
> Michael Orlitzky  wrote:
> 
> > On 05/15/2015 10:51 AM, Michał Górny wrote:
> > > Title: SquashDelta syncing support
> > 
> > Do we need a news item for this at all? Everything is backward
> > compatible and most people don't need to do anything at all in
> > response to the news.
> 
> I tend to agree here; while the feature looks cool, I'm not sure news
> items purpose is to announce new features.
> 

Maybe this could be announced in planet.gentoo.org or even main
gentoo.org news ;)




Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Alexis Ballier
On Sat, 16 May 2015 10:59:20 -0400
Michael Orlitzky  wrote:

> On 05/15/2015 10:51 AM, Michał Górny wrote:
> > Title: SquashDelta syncing support
> 
> Do we need a news item for this at all? Everything is backward
> compatible and most people don't need to do anything at all in
> response to the news.

I tend to agree here; while the feature looks cool, I'm not sure news
items purpose is to announce new features.



Re: [gentoo-dev] News item review: SquashDelta syncing support

2015-05-16 Thread Michael Orlitzky
On 05/15/2015 10:51 AM, Michał Górny wrote:
> Title: SquashDelta syncing support

Do we need a news item for this at all? Everything is backward
compatible and most people don't need to do anything at all in response
to the news.