Re: [arch-dev-public] Use detached package signatures by default

2020-08-10 Thread Anatol Pomozov via arch-dev-public
Hi Giancarlo On Tue, Jul 28, 2020 at 12:35 PM Giancarlo Razzolini wrote: > This could be maintained as a patch on the package, it doesn't necessarily > have to be > on pacman's code itself. Just so we make this transition as painless as > possible to users. Having a seamless transition to the

Re: [arch-dev-public] Use detached package signatures by default

2020-07-28 Thread Giancarlo Razzolini via arch-dev-public
Em julho 28, 2020 16:26 Anatol Pomozov via arch-dev-public escreveu: It sounds great. If we go this route for pacman 6.0 then it will take about 1 year to switch to the detached signatures. As it is quite an important change I would love to see its codepath tested as much as possible before we

Re: [arch-dev-public] Use detached package signatures by default

2020-07-28 Thread Anatol Pomozov via arch-dev-public
Hi On Wed, Jul 8, 2020 at 8:22 PM Allan McRae via arch-dev-public wrote: > > On 9/7/20 1:05 pm, Anatol Pomozov wrote: > > Given this information I would like to propose to stop using embedded > > signatures and move to detached signatures by default. This will > > require pacman 6.x or as

Re: [arch-dev-public] Use detached package signatures by default

2020-07-09 Thread Anatol Pomozov via arch-dev-public
Hi Jelle On Thu, Jul 9, 2020 at 2:00 AM Jelle van der Waa wrote: > > On 09/07/2020 05:05, Anatol Pomozov via arch-dev-public wrote: > > TLDR; let’s start using detached package signatures to make system > > updates faster. > > > > Hi folks, > > > > Some time ago there was a discussion at IRC

Re: [arch-dev-public] Use detached package signatures by default

2020-07-09 Thread Jelle van der Waa
On 09/07/2020 05:05, Anatol Pomozov via arch-dev-public wrote: > TLDR; let’s start using detached package signatures to make system > updates faster. > > Hi folks, > > Some time ago there was a discussion at IRC where someone (Allan > maybe?) proposed to stop using embedded PGP signatures in

Re: [arch-dev-public] Use detached package signatures by default

2020-07-08 Thread Allan McRae via arch-dev-public
On 9/7/20 1:05 pm, Anatol Pomozov wrote: > Given this information I would like to propose to stop using embedded > signatures and move to detached signatures by default. This will > require pacman 6.x or as alternative backport the fix(es) to 5.x > branch. It will help to make system updates even

Re: [arch-dev-public] Use detached package signatures by default

2020-07-08 Thread Eli Schwartz via arch-dev-public
On 7/8/20 11:05 PM, Anatol Pomozov via arch-dev-public wrote: > TLDR; let’s start using detached package signatures to make system > updates faster. That all sounds great, but it's really down to how repo-add does its thing. So maybe this belongs on pacman-dev? -- Eli Schwartz Bug Wrangler and

[arch-dev-public] Use detached package signatures by default

2020-07-08 Thread Anatol Pomozov via arch-dev-public
TLDR; let’s start using detached package signatures to make system updates faster. Hi folks, Some time ago there was a discussion at IRC where someone (Allan maybe?) proposed to stop using embedded PGP signatures in favor of detached signature files. I would like to bring this idea here and