Re: [gentoo-dev] .gitignore

2015-08-10 Thread Mike Gilbert
On Mon, Aug 10, 2015 at 2:42 AM, Mike Frysinger vap...@gentoo.org wrote: On 10 Aug 2015 08:28, Justin (jlec) wrote: how do we maintain this file? like any other file. git add git commit. I like to propose to add the md5-cache into it. Which other files are of interest? /distfiles/

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Rich Freeman
On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master creates the following files/directories under metatdata. On my own system, I like to symlink them to locations outside my repo so that related portage features continue to work. I

Re: [gentoo-dev] golang-build.eclass: add EGO_BUILD_FLAGS variable

2015-08-10 Thread William Hubbs
This is now committed. William signature.asc Description: Digital signature

Re: [gentoo-dev] Referencing bug reports in git

2015-08-10 Thread hasufell
On 08/10/2015 03:19 PM, Michał Górny wrote: Thanks, this is exactly what I wanted. Fixes, References, Bug are all good. Bugzilla goes against your proposal diverging keyword depending on bug tracker software. Afaik Fixes: is for referencing commits, not bug reports. And now I am

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Daniel Campbell (zlg)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/10/2015 08:09 AM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master creates the following files/directories under metatdata. On my own system, I like to

Re: [gentoo-dev] Referencing bug reports in git

2015-08-10 Thread Chí-Thanh Christopher Nguyễn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michał Górny schrieb: I prefer the Bugzilla: https://bugs.gentoo.org/show_bug.cgi?id=333531 format even though not all bug trackers are running Bugzilla. Bug: works fine with me too, and we could make

Re: [gentoo-portage-dev] [PATCH] repoman commit: Prefix commit message template with cat/PN

2015-08-10 Thread Michał Górny
Dnia 2015-08-10, o godz. 16:06:31 Michał Górny mgo...@gentoo.org napisał(a): --- bin/repoman | 9 +++-- pym/repoman/utilities.py | 7 +-- 2 files changed, 12 insertions(+), 4 deletions(-) Pushed now after IRC review. -- Best regards, Michał Górny

Re: [gentoo-dev] Referencing bug reports in git (WAS: Re: [gentoo-commits] repo/gentoo:master commit in: sci-libs/opencascade/)

2015-08-10 Thread Andrew Savchenko
On Mon, 10 Aug 2015 15:11:02 +0200 Michał Górny wrote: 2. Bug number can be easily typed, URL has to be copied or generated by some tool. So, please remind me, how many times the 'easy typing' got the bug number wrong? This is not a real argument, just another of Gentoo's 'I'm

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Mike Gilbert
On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: On Mon, Aug 10, 2015 at 2:42 AM, Mike Frysinger vap...@gentoo.org wrote: On 10 Aug 2015 08:28, Justin (jlec) wrote: how do we maintain this file? like any other file. git add git commit. I like to propose to add the

Re: [gentoo-dev] git commit / push signing error

2015-08-10 Thread Patrice Clement
Monday 10 Aug 2015 12:02:25, Daniel Campbell (zlg) wrote : On 08/10/2015 06:15 AM, Doug Goldstein wrote: On Mon, Aug 10, 2015 at 3:36 AM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Doug Goldstein schrieb: gpg: cancelled by user gpg: skipped 0xA2BC03DC87ED1BD4: Operation

Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread Andrew Savchenko
On Mon, 10 Aug 2015 22:13:23 +0200 hasufell wrote: On 08/10/2015 05:09 PM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master creates the following files/directories under metatdata. On my own system, I like to

Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread hasufell
On 08/10/2015 10:47 PM, Andrew Savchenko wrote: On Mon, 10 Aug 2015 22:13:23 +0200 hasufell wrote: On 08/10/2015 05:09 PM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master creates the following files/directories

Re: [gentoo-dev] git commit / push signing error

2015-08-10 Thread Daniel Campbell (zlg)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/10/2015 06:15 AM, Doug Goldstein wrote: On Mon, Aug 10, 2015 at 3:36 AM, Chí-Thanh Christopher Nguyễn chith...@gentoo.org wrote: Doug Goldstein schrieb: gpg: cancelled by user gpg: skipped 0xA2BC03DC87ED1BD4: Operation cancelled gpg:

Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread Michał Górny
Dnia 2015-08-10, o godz. 23:49:55 Andrew Savchenko birc...@gentoo.org napisał(a): On Mon, 10 Aug 2015 23:47:21 +0300 Andrew Savchenko wrote: On Mon, 10 Aug 2015 22:13:23 +0200 hasufell wrote: On 08/10/2015 05:09 PM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert

[gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Matthias Maier
Users can fetch/pull from Github. We could also provide automatic signed tags every 30min/1h/2h/whatever (signed with a suitable infrastructure key). With that, the integrity of a tagged git checkout can be easily verified on client side. Best, Matthias signature.asc Description: PGP

Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread Michał Górny
Dnia 2015-08-10, o godz. 23:47:21 Andrew Savchenko birc...@gentoo.org napisał(a): On Mon, 10 Aug 2015 22:13:23 +0200 hasufell wrote: On 08/10/2015 05:09 PM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master

Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread Aaron W. Swenson
On 2015-08-10 23:49, Andrew Savchenko wrote: Another issue: we will have to setup git mirrors as well (probably reusing hosts providing rsync mirrors). I really doubt current infrastructure will survive if all users will sync from its git. Users can fetch/pull from Github.

Re: [gentoo-dev] Re: Referencing bug reports in git

2015-08-10 Thread Gordon Pettey
On Mon, Aug 10, 2015 at 7:25 AM, Duncan 1i5t5.dun...@cox.net wrote: ** summary bug number standardized to GB#xx or #xx or similar, short enough for summary, easily identified. GB# would be distinctly gentoo and could be expanded to KDEB#, GNB# (gnome), FDOB#, etc, for If you're going

[gentoo-dev] Re: Referencing bug reports in git

2015-08-10 Thread Ryan Hill
On Mon, 10 Aug 2015 12:25:58 + (UTC) Duncan 1i5t5.dun...@cox.net wrote: What about: * bug number in summary strongly recommended ** summary bug number standardized to GB#xx or #xx or similar, short enough for summary, easily identified. GB# would be distinctly gentoo and could

rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread hasufell
On 08/10/2015 05:09 PM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master creates the following files/directories under metatdata. On my own system, I like to symlink them to locations outside my repo so that

Re: rsync mirror security (WAS: Re: [gentoo-dev] .gitignore)

2015-08-10 Thread Andrew Savchenko
On Mon, 10 Aug 2015 23:47:21 +0300 Andrew Savchenko wrote: On Mon, 10 Aug 2015 22:13:23 +0200 hasufell wrote: On 08/10/2015 05:09 PM, Rich Freeman wrote: On Mon, Aug 10, 2015 at 11:04 AM, Mike Gilbert flop...@gentoo.org wrote: Expanding on this: the rsync master creates the following

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Mike Frysinger
On 10 Aug 2015 16:05, Matthias Maier wrote: Users can fetch/pull from Github. We could also provide automatic signed tags every 30min/1h/2h/whatever (signed with a suitable infrastructure key). With that, the integrity of a tagged git checkout can be easily verified on client side. it

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Kent Fredric
On 11 August 2015 at 09:05, Matthias Maier tam...@gentoo.org wrote: We could also provide automatic signed tags every 30min/1h/2h/whatever (signed with a suitable infrastructure key). With that, the integrity of a tagged git checkout can be easily verified on client side. I'm distinctly under

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Kent Fredric
On 11 August 2015 at 15:06, Mike Frysinger vap...@gentoo.org wrote: it would have to re-use the same tag name every time otherwise we end up with 17.5k/8.7k/4.3k/whatever new tags per year ... a really bad idea I was very much under the impression git is not designed with repeated tag

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Matthias Maier
That is, I was under the impression signing a tag only signs the references themselves, and then relies on SHA1 referential integrity beyond that. No, a signed tag verifies that the whole integrirty of the entire repository, whereas a signed commit only authenticates the differences introduced

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Matthias Maier
it would have to re-use the same tag name every time otherwise we end up with 17.5k/8.7k/4.3k/whatever new tags per year ... a really bad idea Or we supply a signature of the sha1-sum of the tag in question by some external procedure... Best, Matthias signature.asc Description: PGP

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Kent Fredric
On 11 August 2015 at 15:44, Matthias Maier tam...@gentoo.org wrote: No, a signed tag verifies that the whole integrirty of the entire repository, whereas a signed commit only authenticates the differences introduced by a single commit. git tag -s test cat ./.git/refs/tags/test

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Matthias Maier
On Mon, Aug 10, 2015, at 22:56 CDT, Kent Fredric kentfred...@gmail.com wrote: So how is GPG verifying The whole repository ? You can verify the state of the repository via $ git fsck after that you can verify that the current HEAD is tagged with a valid and singed tag with something like

Re: [gentoo-dev] Re: rsync mirror security

2015-08-10 Thread Mike Frysinger
On 11 Aug 2015 15:23, Kent Fredric wrote: On 11 August 2015 at 15:06, Mike Frysinger wrote: it would have to re-use the same tag name every time otherwise we end up with 17.5k/8.7k/4.3k/whatever new tags per year ... a really bad idea I was very much under the impression git is not

[gentoo-dev] Re: Referencing bug reports in git

2015-08-10 Thread Duncan
Ryan Hill posted on Mon, 10 Aug 2015 18:17:30 -0600 as excerpted: On Mon, 10 Aug 2015 12:25:58 + (UTC) Duncan 1i5t5.dun...@cox.net wrote: What about: * bug number in summary strongly recommended Making the bug number in the summary manditory or strongly encouraged leads to wonderful

[gentoo-dev] Re: Referencing bug reports in git (WAS: Re: [gentoo-commits] repo/gentoo:master commit in: sci-libs/opencascade/)

2015-08-10 Thread Ryan Hill
On Mon, 10 Aug 2015 23:43:29 +0300 Andrew Savchenko birc...@gentoo.org wrote: On Mon, 10 Aug 2015 15:11:02 +0200 Michał Górny wrote: 2. Bug number can be easily typed, URL has to be copied or generated by some tool. So, please remind me, how many times the 'easy typing' got

[gentoo-dev] Re: Referencing bug reports in git

2015-08-10 Thread Duncan
Gordon Pettey posted on Mon, 10 Aug 2015 17:57:56 -0500 as excerpted: On Mon, Aug 10, 2015 at 7:25 AM, Duncan 1i5t5.dun...@cox.net wrote: ** summary bug number standardized to GB#xx or #xx or similar, short enough for summary, easily identified. GB# would be distinctly gentoo and

Re: [gentoo-dev] Referencing bug reports in git

2015-08-10 Thread Chí-Thanh Christopher Nguyễn
Ulrich Mueller schrieb: This is not a matter of going l33t, this is a matter of getting rid of redundant and pretty much useless data all the same through almost all commit messages. +1 Gentoo-Bug: 123456 or even Bug: 123456 is enough to uniquely identify a bug. Also it is easier to

Re: [gentoo-dev] git commit / push signing error

2015-08-10 Thread Chí-Thanh Christopher Nguyễn
Doug Goldstein schrieb: gpg: cancelled by user gpg: skipped 0xA2BC03DC87ED1BD4: Operation cancelled gpg: signing failed: Operation cancelled error: gpg failed to sign the data There was an IRC discussion yesterday about this. Probably your pinentry tries to talk to a GUI and fails. Try:

[gentoo-dev] .gitignore

2015-08-10 Thread Justin (jlec)
Hi, how do we maintain this file? I like to propose to add the md5-cache into it. Which other files are of interest? Justin signature.asc Description: OpenPGP digital signature

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Mike Frysinger
On 10 Aug 2015 08:28, Justin (jlec) wrote: how do we maintain this file? like any other file. git add git commit. I like to propose to add the md5-cache into it. Which other files are of interest? /distfiles/ /local/ /packages/ /metadata/md5-cache/ -mike signature.asc Description:

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Michał Górny
Dnia 2015-08-10, o godz. 02:42:21 Mike Frysinger vap...@gentoo.org napisał(a): On 10 Aug 2015 08:28, Justin (jlec) wrote: how do we maintain this file? like any other file. git add git commit. I like to propose to add the md5-cache into it. Which other files are of interest?

Re: [gentoo-dev] Referencing bug reports in git (WAS: Re: [gentoo-commits] repo/gentoo:master commit in: sci-libs/opencascade/)

2015-08-10 Thread Andrew Savchenko
On Sun, 9 Aug 2015 17:02:27 -0700 Daniel Campbell (zlg) wrote: I don't know about you guys, but I have a smart bookmark in Firefox where I type bgo xx and it'll take me to the relevant bug. It'd be trivial to set that up as a bash alias, too. There are tons of ways to get to a bug; the

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Justin (jlec)
On 10/08/15 08:42, Mike Frysinger wrote: On 10 Aug 2015 08:28, Justin (jlec) wrote: how do we maintain this file? like any other file. git add git commit. I rather meant, if this file should only be modified after a discussion in a bug or on a ml. Or if only QA is modifying this file. Or

Re: [gentoo-portage-dev] [PATCH] Switch to new git '# $Id$' header format

2015-08-10 Thread Alexander Berntsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Looks OK to me. Brian -- merge if it's an OK time to include this patch, with the whole refactor thing going on. - -- Alexander berna...@gentoo.org https://secure.plaimi.net/~alexander -BEGIN PGP SIGNATURE- Version: GnuPG v2

Re: [gentoo-dev] Re: useflag policies

2015-08-10 Thread Alexander Berntsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 09/08/15 21:38, Sergey Popov wrote: qa team lead hat In short - apropriate REQUIRED_USE with setting recommended USE-flag(e.g. USE=+qt4 qt5 or USE=qt4 +qt5) /qa team lead hat Strong -1. - -- Alexander berna...@gentoo.org

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Mike Frysinger
On 10 Aug 2015 09:17, Michał Górny wrote: Dnia 2015-08-10, o godz. 02:42:21 Mike Frysinger napisał(a): On 10 Aug 2015 08:28, Justin (jlec) wrote: I like to propose to add the md5-cache into it. Which other files are of interest? /distfiles/ /local/ /packages/ Those

Re: [gentoo-dev] Referencing bug reports in git

2015-08-10 Thread Ulrich Mueller
On Mon, 10 Aug 2015, Chí-Thanh Christopher Nguyễn wrote: I prefer the Bugzilla: https://bugs.gentoo.org/show_bug.cgi?id=333531 format even though not all bug trackers are running Bugzilla. Bug: works fine with me too, There are bug trackers other than bugzilla, for example

[gentoo-dev] Re: [gentoo-commits] repo/gentoo:master commit in: sys-process/anacron/

2015-08-10 Thread hasufell
On 08/10/2015 10:00 AM, Mike Frysinger wrote: commit: 2f168392284fec294f9bfbb06d1c0a8a46f5a7d5 Author: Mike Frysinger vapier AT gentoo DOT org AuthorDate: Mon Aug 10 07:39:36 2015 + Commit: Mike Frysinger vapier AT gentoo DOT org CommitDate: Mon Aug 10 07:59:50 2015 +

Re: [gentoo-dev] Referencing bug reports in git (WAS: Re: [gentoo-commits] repo/gentoo:master commit in: sci-libs/opencascade/)

2015-08-10 Thread Michał Górny
Dnia 2015-08-10, o godz. 02:16:01 Andrew Savchenko birc...@gentoo.org napisał(a): On Mon, 10 Aug 2015 00:40:44 +0200 Michał Górny wrote: Which is terribly redundant. Just put the whole bug URL. Advantages: - keeps the bug namespaced to bugs.gentoo.org, - has the bug no inside,

Re: [gentoo-dev] git commit / push signing error

2015-08-10 Thread Doug Goldstein
On Sun, Aug 9, 2015 at 9:00 PM, Kent Fredric kentfred...@gmail.com wrote: On 10 August 2015 at 13:40, Doug Goldstein car...@gentoo.org wrote: $ git push --signed origin master You need a passphrase to unlock the secret key for user: Doug Goldstein car...@cardoe.com 4096-bit RSA key, ID

Re: [gentoo-dev] Referencing bug reports in git

2015-08-10 Thread Michał Górny
Dnia 2015-08-10, o godz. 11:45:33 Chí-Thanh Christopher Nguyễn chith...@gentoo.org napisał(a): Ulrich Mueller schrieb: This is not a matter of going l33t, this is a matter of getting rid of redundant and pretty much useless data all the same through almost all commit messages. +1

Re: [gentoo-dev] .gitignore

2015-08-10 Thread Anthony G. Basile
On 8/10/15 3:35 AM, Justin (jlec) wrote: On 10/08/15 08:42, Mike Frysinger wrote: On 10 Aug 2015 08:28, Justin (jlec) wrote: how do we maintain this file? like any other file. git add git commit. I rather meant, if this file should only be modified after a discussion in a bug or on a ml.

[gentoo-dev] Re: Referencing bug reports in git

2015-08-10 Thread Duncan
hasufell posted on Mon, 10 Aug 2015 03:02:43 +0200 as excerpted: On 08/10/2015 02:51 AM, Ulrich Mueller wrote: On Mon, 10 Aug 2015, Andrew Savchenko wrote: This is not a matter of going l33t, this is a matter of getting rid of redundant and pretty much useless data all the same through

[gentoo-portage-dev] [PATCH] repoman commit: Prefix commit message template with cat/PN

2015-08-10 Thread Michał Górny
--- bin/repoman | 9 +++-- pym/repoman/utilities.py | 7 +-- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/bin/repoman b/bin/repoman index 7cb32ce..1ba7841 100755 --- a/bin/repoman +++ b/bin/repoman @@ -2696,16 +2696,21 @@ else: # We've read