Re: [arch-dev-public] [aur-general] AUR migration

2020-07-28 Thread Baptiste Jonglez
On 27-07-20, Giancarlo Razzolini via aur-general wrote: > Em julho 27, 2020 21:03 Gaetan Bisson escreveu: > > > > It's quite unsettling that we seem to be rushing to write a news post > > while this very reasonable suggestion remains completely ignored. > > > > It wasn't ignored. They keys were

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-28 Thread Eli Schwartz via arch-dev-public
On 7/28/20 4:13 PM, Gaetan Bisson via arch-dev-public wrote: > [2020-07-28 13:46:23 +0100] Filipe Laíns: >> If one machine gets compromised the keys are also compromised. > > I never suggested to use the same keys for multiple servers. > > Only that if luna's main purpose is to provide a service

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-28 Thread Gaetan Bisson via arch-dev-public
[2020-07-28 13:46:23 +0100] Filipe Laíns: > If one machine gets compromised the keys are also compromised. I never suggested to use the same keys for multiple servers. Only that if luna's main purpose is to provide a service and this service is moved to a different host, it makes sense to move th

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-28 Thread Giancarlo Razzolini via arch-dev-public
Em julho 28, 2020 9:46 Filipe Laíns escreveu: On Mon, 2020-07-27 at 14:43 -1000, Gaetan Bisson via arch-dev-public wrote: [2020-07-27 21:10:23 -0300] Giancarlo Razzolini: > Em julho 27, 2020 21:03 Gaetan Bisson escreveu: > > It's quite unsettling that we seem to be rushing to write a news post >

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-28 Thread Filipe Laíns via arch-dev-public
On Mon, 2020-07-27 at 14:43 -1000, Gaetan Bisson via arch-dev-public wrote: > [2020-07-27 21:10:23 -0300] Giancarlo Razzolini: > > Em julho 27, 2020 21:03 Gaetan Bisson escreveu: > > > It's quite unsettling that we seem to be rushing to write a news post > > > while this very reasonable suggestion

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-27 Thread Giancarlo Razzolini via arch-dev-public
Em julho 27, 2020 21:03 Gaetan Bisson escreveu: It's quite unsettling that we seem to be rushing to write a news post while this very reasonable suggestion remains completely ignored. It wasn't ignored. They keys were deliberately changed in the process. For future migrations I would greatl

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-27 Thread Gaetan Bisson via arch-dev-public
[2020-07-27 21:10:23 -0300] Giancarlo Razzolini: > Em julho 27, 2020 21:03 Gaetan Bisson escreveu: > > > > It's quite unsettling that we seem to be rushing to write a news post > > while this very reasonable suggestion remains completely ignored. > > > > It wasn't ignored. They keys were deliber

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-27 Thread Eli Schwartz via arch-dev-public
On 7/24/20 6:18 PM, Baptiste Jonglez wrote: > Can't you just copy the SSH host keys from the old machines? > > It's the same service as before and (presumably) the host private keys > were not compromised, so there is no reason to change keys. In theory one could, but this was not simply migratin

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-27 Thread Eli Schwartz via arch-dev-public
On 7/27/20 8:03 PM, Gaetan Bisson via arch-dev-public wrote: > [2020-07-25 00:18:55 +0200] Baptiste Jonglez: >> On 24-07-20, Giancarlo Razzolini via arch-dev-public wrote: >>> The migration is almost done. Since we are moving to a new machine, it will >>> have new host keys. They are: >>> >>>Ed

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-27 Thread Gaetan Bisson via arch-dev-public
[2020-07-25 00:18:55 +0200] Baptiste Jonglez: > On 24-07-20, Giancarlo Razzolini via arch-dev-public wrote: > > The migration is almost done. Since we are moving to a new machine, it will > > have new host keys. They are: > > > >Ed25519: SHA256:RFzBCUItH9LZS0cKB5UE6ceAYhBD5C8GeOBip8Z11+4 > >

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-27 Thread Giancarlo Razzolini via arch-dev-public
Em julho 27, 2020 9:35 Henry-Joseph Audéoud escreveu: On 24/07/2020 21:24, Giancarlo Razzolini via aur-general wrote: The migration is almost done. Since we are moving to a new machine, it will have new host keys. They are:    Ed25519: SHA256:RFzBCUItH9LZS0cKB5UE6ceAYhBD5C8GeOBip8Z11+4    ECD

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-24 Thread Baptiste Jonglez
Hi, On 24-07-20, Giancarlo Razzolini via arch-dev-public wrote: > The migration is almost done. Since we are moving to a new machine, it will > have new host keys. They are: > >Ed25519: SHA256:RFzBCUItH9LZS0cKB5UE6ceAYhBD5C8GeOBip8Z11+4 >ECDSA: SHA256:5s5cIyReIfNNVGRFdDbe3hdYiI5OelHGpw2rO

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-24 Thread Sven-Hendrik Haase via arch-dev-public
On 24.07.20 23:27, Eli Schwartz via arch-dev-public wrote: > On 7/24/20 3:24 PM, Giancarlo Razzolini via arch-dev-public wrote: >> Em julho 23, 2020 17:09 Giancarlo Razzolini via aur-general escreveu: >>> Hi All, >>> >>> In continuing with the improvements being done to our infrastructure, >>> we

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-24 Thread Morten Linderud via arch-dev-public
On Fri, Jul 24, 2020 at 05:27:06PM -0400, Eli Schwartz via arch-dev-public wrote: > This seems like it could be a reasonable situation for posting to > https://www.archlinux.org/news/ so that people seeing the keys change > understands why and that it's okay. Not everyone follows a-d-p or > aur-ge

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-24 Thread Eli Schwartz via arch-dev-public
On 7/24/20 3:24 PM, Giancarlo Razzolini via arch-dev-public wrote: > Em julho 23, 2020 17:09 Giancarlo Razzolini via aur-general escreveu: >> Hi All, >> >> In continuing with the improvements being done to our infrastructure, >> we're >> planning to migrate the AUR to another machine. This means th

Re: [arch-dev-public] [aur-general] AUR migration

2020-07-24 Thread Giancarlo Razzolini via arch-dev-public
Em julho 23, 2020 17:09 Giancarlo Razzolini via aur-general escreveu: Hi All, In continuing with the improvements being done to our infrastructure, we're planning to migrate the AUR to another machine. This means that, during the migration, there *will* be downtime of the whole AUR. I expect t