* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2012-11-06 18:48 José María Alonso
0 siblings, 0 replies; 7+ messages in thread
From: José María Alonso @ 2012-11-06 18:48 UTC (permalink / raw
To: gentoo-commits
commit: 1e9504ce65613ed6f534afb14429a54d00f9bc90
Author: Chema Alonso <nimiux <AT> gentoo <DOT> org>
AuthorDate: Tue Nov 6 18:47:18 2012 +0000
Commit: José María Alonso <nimiux <AT> gentoo <DOT> org>
CommitDate: Tue Nov 6 18:47:18 2012 +0000
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/devmanual.git;a=commit;h=1e9504ce
Fix bug #390949. Manifest file no longer uses MD5 digest.
---
general-concepts/manifest/text.xml | 7 +++----
1 files changed, 3 insertions(+), 4 deletions(-)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index f5351d5..40c0253 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -7,9 +7,9 @@
<p>
In the tree, every package has a <c>Manifest</c> file. This file lives in the same
directory as the ebuilds for the package. The <c>Manifest</c> file contains digests
-(currently MD5, RMD160 and SHA256) and file size data for every file in the directory
-and any subdirectories. This is used to verify integrity. The <c>Manifest</c> may also
-be digitally signed.
+(currently RMD160, SHA1, SHA256, SHA512 and WHIRLPOOL) and file size data for every
+file in the directory and any subdirectories. This is used to verify integrity.
+The <c>Manifest</c> may also be digitally signed.
</p>
<p>
@@ -19,6 +19,5 @@ expansion changes <d/> <c>repoman</c> will do this automatically.
</p>
</body>
-
</chapter>
</guide>
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2012-11-11 19:33 Markos Chandras
0 siblings, 0 replies; 7+ messages in thread
From: Markos Chandras @ 2012-11-11 19:33 UTC (permalink / raw
To: gentoo-commits
commit: 8ad2cacf01c2a79b238cdbb0a7de8539164f3a65
Author: Markos Chandras <hwoarang <AT> gentoo <DOT> org>
AuthorDate: Sat Nov 3 21:11:58 2012 +0000
Commit: Markos Chandras <hwoarang <AT> gentoo <DOT> org>
CommitDate: Sun Nov 11 19:32:24 2012 +0000
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/devmanual.git;a=commit;h=8ad2cacf
Manifest: Merge the "signing manifest" guide from the devrel handbook
---
general-concepts/manifest/text.xml | 57 ++++++++++++++++++++++++++++++++++++
1 files changed, 57 insertions(+), 0 deletions(-)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index 40c0253..665c259 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -4,6 +4,10 @@
<title>Manifest</title>
<body>
+
+<section>
+<title>Generating the Manifest</title>
+<body>
<p>
In the tree, every package has a <c>Manifest</c> file. This file lives in the same
directory as the ebuilds for the package. The <c>Manifest</c> file contains digests
@@ -17,6 +21,59 @@ To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>. When
committing, the <c>Manifest</c> file must be regenerated to handle any CVS keyword
expansion changes <d/> <c>repoman</c> will do this automatically.
</p>
+</body>
+</section>
+
+<section>
+<title>Signing the Manifest using your GPG key</title>
+<body>
+<p>
+Requirements:
+</p>
+
+<ul>
+ <li>>=sys-apps/portage-2.0.51_pre10</li>
+ <li>>=app-crypt/gnupg-1.2.4</li>
+</ul>
+
+<p>
+Key Setup:
+</p>
+
+<ul>
+ <li>
+ <uri link="http://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap2">Create</uri>
+ a new DSA GnuPG key with at least a 1024 bit keylength, an expiration
+ period no longer than 6 months and a good passphrase.
+ </li>
+ <li>
+ <uri link="http://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap3">Upload</uri>
+ the key to a keyserver.
+ </li>
+</ul>
+
+<p>
+Portage Configuration:
+</p>
+
+<ul>
+ <li>
+ Set <path>PORTAGE_GPG_DIR</path> to your <path>~/.gnupg/</path> directory
+ (or the directory where the keyring with your new key is).
+ </li>
+ <li>Set <path>PORTAGE_GPG_KEY</path> to the key id of your new key.</li>
+ <li>Set FEATURES="sign".</li>
+</ul>
+
+<p>
+Now you should be able to sign your Manifests on repoman commit. Repoman will
+ask you for your passphrase before committing the Manifest. This step is
+<e>after</e> it has committed the other files. At the moment repoman doesn't
+check if the Manifest is already signed, so others are able to "unsign" your
+package later. This will change before signing is made mandatory.
+</p>
+</body>
+</section>
</body>
</chapter>
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2016-02-05 12:59 Ulrich Müller
0 siblings, 0 replies; 7+ messages in thread
From: Ulrich Müller @ 2016-02-05 12:59 UTC (permalink / raw
To: gentoo-commits
commit: d7c28ff228707e4f0fb291c40f4b0002d6dd2b0e
Author: Gokturk Yuksek <gokturk <AT> binghamton <DOT> edu>
AuthorDate: Thu Feb 4 00:57:29 2016 +0000
Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org>
CommitDate: Fri Feb 5 12:58:00 2016 +0000
URL: https://gitweb.gentoo.org/proj/devmanual.git/commit/?id=d7c28ff2
general-concepts/manifest: drop the use of "CVS keyword expansion" #558642
With the git migration no CVS keyword expansions are happening. However,
Manifest file may still need to be regenerated.
Gentoo-Bug: https://bugs.gentoo.org/show_bug.cgi?id=558642
Signed-off-by: Gokturk Yuksek <gokturk <AT> binghamton.edu>
general-concepts/manifest/text.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index 27ebdef..12961da 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -18,8 +18,8 @@ The <c>Manifest</c> may also be digitally signed.
<p>
To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>. When
-committing, the <c>Manifest</c> file must be regenerated to handle any CVS keyword
-expansion changes <d/> <c>repoman</c> will do this automatically.
+committing, the <c>Manifest</c> file must be regenerated to handle any
+changes <d/> <c>repoman</c> will do this automatically.
</p>
</body>
</section>
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2020-01-14 8:25 Ulrich Müller
0 siblings, 0 replies; 7+ messages in thread
From: Ulrich Müller @ 2020-01-14 8:25 UTC (permalink / raw
To: gentoo-commits
commit: 85cd37e0956f4e8275032ae948042e547a54f3aa
Author: Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun Jan 5 11:39:01 2020 +0000
Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org>
CommitDate: Tue Jan 14 08:23:16 2020 +0000
URL: https://gitweb.gentoo.org/proj/devmanual.git/commit/?id=85cd37e0
general-concepts/manifest: Remove obsolete information
Remove all the obsolete text found in the Manifest section. This
includes Manifest signing (now replaced by commit signing which belongs
in the git section), obsolete hash list (refer to layout.conf instead),
and CVS-specific 'repoman commit' usage. Also reword the description
to fit thin Manifests.
Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>
Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org>
general-concepts/manifest/text.xml | 65 ++++----------------------------------
1 file changed, 6 insertions(+), 59 deletions(-)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index ace785d..fb54384 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -7,68 +7,15 @@
<title>Generating the Manifest</title>
<body>
<p>
-In the tree, every package has a <c>Manifest</c> file. This file lives in the same
-directory as the ebuilds for the package. The <c>Manifest</c> file contains digests
-(currently RMD160, SHA1, SHA256, SHA512 and WHIRLPOOL) and file size data for every
-file in the directory and any subdirectories. This is used to verify integrity.
-The <c>Manifest</c> may also be digitally signed.
+In the tree, every package has a <c>Manifest</c> file. This file lives
+in the same directory as the ebuilds for the package. The <c>Manifest</c> file
+contains digests (the current list can be found in <c>metadata/layout.conf</c>
+as <c>manifest-hashes</c>) and file size data for every distfile used
+by the package. This is used to verify integrity upon fetching them.
</p>
<p>
-To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>. When
-committing, the <c>Manifest</c> file must be regenerated to handle any
-changes <d/> <c>repoman</c> will do this automatically.
-</p>
-</body>
-</section>
-
-<section>
-<title>Signing the Manifest using your GPG key</title>
-<body>
-<p>
-Requirements:
-</p>
-
-<ul>
- <li>>=sys-apps/portage-2.0.51_pre10</li>
- <li>>=app-crypt/gnupg-1.2.4</li>
-</ul>
-
-<p>
-Key Setup:
-</p>
-
-<ul>
- <li>
- <uri link="https://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap2">Create</uri>
- a new DSA GnuPG key with at least a 1024 bit keylength, an expiration
- period no longer than 6 months and a good passphrase.
- </li>
- <li>
- <uri link="https://www.gentoo.org/doc/en/gnupg-user.xml#doc_chap3">Upload</uri>
- the key to a keyserver.
- </li>
-</ul>
-
-<p>
-Portage Configuration:
-</p>
-
-<ul>
- <li>
- Set <c>PORTAGE_GPG_DIR</c> to your <c>~/.gnupg/</c> directory
- (or the directory where the keyring with your new key is).
- </li>
- <li>Set <c>PORTAGE_GPG_KEY</c> to the key id of your new key.</li>
- <li>Set FEATURES="sign".</li>
-</ul>
-
-<p>
-Now you should be able to sign your Manifests on repoman commit. Repoman will
-ask you for your passphrase before committing the Manifest. This step is
-<e>after</e> it has committed the other files. At the moment repoman doesn't
-check if the Manifest is already signed, so others are able to "unsign" your
-package later. This will change before signing is made mandatory.
+To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>.
</p>
</body>
</section>
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2020-01-14 8:25 Ulrich Müller
0 siblings, 0 replies; 7+ messages in thread
From: Ulrich Müller @ 2020-01-14 8:25 UTC (permalink / raw
To: gentoo-commits
commit: 4523506762ffb0a46533c7168f64b4c8a3850ef8
Author: Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Tue Jan 7 05:59:58 2020 +0000
Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org>
CommitDate: Tue Jan 14 08:23:17 2020 +0000
URL: https://gitweb.gentoo.org/proj/devmanual.git/commit/?id=45235067
general-concepts/manifest: Include info on thick Manifests
Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>
Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org>
general-concepts/manifest/text.xml | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index eb2da11..06fef9a 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -20,6 +20,25 @@ or <c>repoman manifest</c>. You may want to set <c>GENTOO_MIRRORS=</c> while
calling it to fetch distfiles from their original locations immediately.
</p>
</body>
+
+<subsection>
+<title>Thin and thick Manifests</title>
+<body>
+<p>
+There are two kinds of Manifest files in Gentoo: thin Manifests that are used
+in the development repositories, and thick Manifests that are distributed
+via rsync to end users. Thin Manifests are described above.
+</p>
+
+<p>
+Thick Manifests add checksums for all files in the repository, and an OpenPGP
+signature. This provides both for integrity and authenticity checking when
+the repository is transmitted over insecure channels. Thick Manifests
+are automatically generated on Gentoo Infrastructure, and require no specific
+action from developers.
+</p>
+</body>
+</subsection>
</section>
</chapter>
</guide>
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2020-01-14 8:25 Ulrich Müller
0 siblings, 0 replies; 7+ messages in thread
From: Ulrich Müller @ 2020-01-14 8:25 UTC (permalink / raw
To: gentoo-commits
commit: ed2af84b223d7f9014b058a70eff8f3c0fac39e3
Author: Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun Jan 5 11:42:10 2020 +0000
Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org>
CommitDate: Tue Jan 14 08:23:17 2020 +0000
URL: https://gitweb.gentoo.org/proj/devmanual.git/commit/?id=ed2af84b
general-concepts/manifest: Add 'repoman manifest', GENTOO_MIRRORS
Indicate that 'repoman manifest' can be used instead of 'ebuild ...
manifest'. Also suggest setting GENTOO_MIRRORS= to skip mirrors while
updating Manifests.
Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>
Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org>
general-concepts/manifest/text.xml | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index fb54384..eb2da11 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -15,7 +15,9 @@ by the package. This is used to verify integrity upon fetching them.
</p>
<p>
-To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>.
+To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>
+or <c>repoman manifest</c>. You may want to set <c>GENTOO_MIRRORS=</c> while
+calling it to fetch distfiles from their original locations immediately.
</p>
</body>
</section>
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/
@ 2021-03-30 16:10 Ulrich Müller
0 siblings, 0 replies; 7+ messages in thread
From: Ulrich Müller @ 2021-03-30 16:10 UTC (permalink / raw
To: gentoo-commits
commit: 00c1824be4d4bd2a72a54be9846846478d25ada1
Author: Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Sun Mar 21 04:40:21 2021 +0000
Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org>
CommitDate: Tue Mar 30 16:00:54 2021 +0000
URL: https://gitweb.gentoo.org/proj/devmanual.git/commit/?id=00c1824b
general-concepts/manifest: mention pkgdev manifest
Signed-off-by: Sam James <sam <AT> gentoo.org>
Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org>
general-concepts/manifest/text.xml | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/general-concepts/manifest/text.xml b/general-concepts/manifest/text.xml
index 06fef9a..d4c97d8 100644
--- a/general-concepts/manifest/text.xml
+++ b/general-concepts/manifest/text.xml
@@ -15,9 +15,10 @@ by the package. This is used to verify integrity upon fetching them.
</p>
<p>
-To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>
-or <c>repoman manifest</c>. You may want to set <c>GENTOO_MIRRORS=</c> while
-calling it to fetch distfiles from their original locations immediately.
+To generate the <c>Manifest</c>, use <c>ebuild foo.ebuild manifest</c>,
+<c>repoman manifest</c>, or <c>pkgdev manifest -m</c>. You may want to set
+<c>GENTOO_MIRRORS=</c> while calling it to fetch distfiles from their original
+locations immediately.
</p>
</body>
^ permalink raw reply related [flat|nested] 7+ messages in thread
end of thread, other threads:[~2021-03-30 16:10 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-01-14 8:25 [gentoo-commits] proj/devmanual:master commit in: general-concepts/manifest/ Ulrich Müller
-- strict thread matches above, loose matches on Subject: below --
2021-03-30 16:10 Ulrich Müller
2020-01-14 8:25 Ulrich Müller
2020-01-14 8:25 Ulrich Müller
2016-02-05 12:59 Ulrich Müller
2012-11-11 19:33 Markos Chandras
2012-11-06 18:48 José María Alonso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox