From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id D7D98138334 for ; Mon, 9 Jul 2018 05:18:05 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 29198E097C; Mon, 9 Jul 2018 05:17:59 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 47998E0959 for ; Mon, 9 Jul 2018 05:17:58 +0000 (UTC) Received: from [192.168.0.30] (ip68-4-233-67.oc.oc.cox.net [68.4.233.67]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: zmedico) by smtp.gentoo.org (Postfix) with ESMTPSA id 08115335C8D; Mon, 9 Jul 2018 05:17:55 +0000 (UTC) Subject: Re: [gentoo-dev] News Item: Portage rsync hardlink support To: Zac Medico , gentoo-dev@lists.gentoo.org, "Aaron W. Swenson" References: <7594901D-54AF-4100-A1B8-7CEA2D1CC82D@gentoo.org> <1339caeb-06fc-c28b-2bd1-2186b0d25f5a@gentoo.org> <1531058219.1553.1.camel@gentoo.org> <1531075350.1553.9.camel@gentoo.org> <853058f4-5634-672a-3655-c9a2ece014e7@gentoo.org> <1531080494.10985.0.camel@gentoo.org> <9d259064-4908-0c86-b207-b695ec266bb7@gentoo.org> <1531084701.10985.1.camel@gentoo.org> <93d09e4b-a3b3-7550-49f5-4d9b134f2a35@gentoo.org> From: Zac Medico Openpgp: preference=signencrypt Autocrypt: addr=zmedico@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFs7tmwBEADTzG+IcYtRfTfKryU7sUH7LlV1M+TdaCMfIkY4x6RyHXkaaqYuQ+U9HKn0 +m5FcZsZ1Ojik+We3Tz0F6kDbam6EWzBxmsLb/IHeUEsvsuLzuBQjiD9zzqGocZiPWr+uWJs AdbueS72R7FPXJPDUEPrJ9GdhGFyYARveY9cmdisOwcDOiSFfBjk3/89t4gROn4KUhezVuO9 VS14gVSns1561CJjlB47HkSBu4+FuzrfVygg4xitWAH119Ehw0vJcgkTw4Bqhk01Iw9us80m dFyU8JbJ0CVYe30gYKFFbnXoiT6xLLogKOkv0goPFxaXcMwWM9ei3SjAGVqgN6i8VnO7kquV LwkTe6ntEK0iY+l4qTKuyIOQLpCbWNI0eVwlx5b/pY2pt5TEGWAPMCZGjlidMx0aDcVX4oji 2/xegFAcxALrfOX3kj2FZ9kNAqLZu26AfqtslIqlBEAb5sZwPr351msBIdbaWX2UNw21I478 7eQ7UfohwXQHlXdhc/wop3VDkDzLBnvlK4ozSJI/9T5F/+9yEZvc6DKUWdEfD12o2El5hHan gCUQWDBKqZb1wcekK8KY2tmH8BBQi7k52IWYLJYfJdir/XpGm5SsDpf3zvDcIFXqFHAG7w7b fhriM+6oBOeIO9ew1Xj3swbRhDwdzRUhu7Uqayq1vdvKqGkgcQARAQABzSNaYWNoYXJ5IE1l ZGljbyA8em1lZGljb0BnZW50b28ub3JnPsLBlAQTAQgAPhYhBEdYrNjamv1GpqYECtYQzzch 54rNBQJbO7cRAhsDBQkFo5qABQsJCAcDBRUKCQgLBRYDAgEAAh4BAheAAAoJENYQzzch54rN dr8P/0GA7TSMQFmrLPYdhevMmL4i+xWv4nlVqw0WRzJA+4M/Dw6mG/scqm+sQiRzyWgMUwJv EdC3KunW1deE3b2zZROgrTDL2DZiUdj3bhG3TBdnbx189G/DhTvDiW7u5DrOwWGrjFuOBBdR acjjGU5EnWJ0aihjBkkX1AeBFeq2rFD7zOnERGa+yJNWwIlX/PYTgJiixK6+qQFqPXH9xaxw iaE9nShXlbas4CM5q78PwxjLQALSjKHpA3lA0u68hCZZT623RDq2elhVNBTSS2JpAJ+NbU7z JY7129p6vmVLBTeZ52piTjekTKLngIk2TppIc9XoO9344qYdC+1RJhIQRf+QCpMoy6YaKdTV U7rX/+pK9QtngaEIHfiGch5SVGxKxGlIsjONgjWC471KhwAJjKABxNmEcfJvbUKYxEPlJspo 3oG53ki79ymrccMPs54R65CBKr6eF8zKhqjZPozjc32weMMEYwA2dY+GMx4lTn5y7FaG6RAt 2wyb678KTKJi+ITPFAOUzVJhl6S9mk1RVSoqj6nvEgJ26h4Xrrh9FsoFmxUDsakGQv93CrxG 0srAezKH1duSZ//FMq3XP7JHPgw0yGphSTTt6hyE6jRqRxJOJ+/5vlqGSg0K7KBQoWJPwTQs XRfqYOMzQ90dQFdvF2ASZ0Rs/IU3JLh5l7ankxg2zsFNBFs7tmwBEACfZb/EePObKC8tuVFl IMQaTRzm7q5THbwQvbdKdw/31cdYJaZZ7BFgnSBq2CBYDPxcm+TxvvjgNTam8kZGdEpCm3/v P1YdJSoiYbisJubV7JiAOoAmGtaDOVX5thpv28HL17wqK2d5jgqMTLFeT3hyaro5cjGAQlhT NOyfwVkdFMFLjOhGzq7aki4UZ9ieS/IedoyZvOblf79d5PV1xI0mf2w5yoHcfZRv7nwI9XMz nqlgC9/RQP7O+WfCl2pl9gyd0hc3uqUWl0ke9xHvVxlEdORH/f+OzeybYj9r80GkC6MeqiG8 qzuWO0IZZ5Gvzwkq0KgRAefr9Z/4vmyOiVhJrvk1gLp6VEdB54fUO3MG/PcnYiasRJOUwRQQ 1+q25w5i9ooZRk0LQ6oNnWbeVj+Pwn0mzL0/GjkdPsYclxzOLSlRAwkisepVl62L2m+XwXsZ j9DS3vIHEbbfCmKayBuGCXQEpJMmEnGqFLnOzv29cOutm3BnGXcWAg5aJjiV5PKEmr/4g9/E J8lphGnNCRQ2DvUzO1tlHpmT+JvDBwAgo5rfq5wjjeiS578kAgPoitOBzp/z5YM5FXX+shEd i5/ratErb9ysUfr3Z45YV3yM6MHgCpEg8+5k6fM6ey4tRnxXAYdJ4XzaSyML9fsnEg9aVaCP iRl+fuLSuF1QJf7LwwARAQABwsF8BBgBCAAmAhsMFiEER1is2Nqa/UampgQK1hDPNyHnis0F Als7trcFCQHhM8sACgkQ1hDPNyHnis0Wdw/9ERSLUHWjGW+oRJPC80RsSZO+9gbdo6AT8GP0 L3S1M60d/C4Pp9lT7sGvN31Q2h4/i1AGz2vsvjA4RUwuWI/M2F660ZmqbuLA4BbS/gjA+Wrf ZB8TDEoy7k0IO+ga0J6ENgxSOk0w1ZS+LYVrM8r7C73ZckAU2aknGOHvfIdRocpb464/JA+j kP8ENcXA0NVT17Te6K3OxpN3fBsHP7w9zbYaV3Ex3suXhLx0/+xxjLPTfwobEy3kTv5Qqumq Ph7TlXvc/9Ku4GwgAFUscLG5ZhsDULIWsRr0tyum0IYI3lpQnMykZiDCoiq7HETTwJeZPpJk PlVc7Qyy0eqcKyoiqd/ttr5tPwRFWk4OYmqzZFiZZ6sG7Zw68UXKHuhCV1MgXKPqS3M8Q6V+ nGL+ZwLE1GkvqwaPgn7uzJpfO+HzoWn3yxjNvh5plsZbM/kqCTMyByB0LQPZdjkO30GvV6dU wamblYkpytpZ5cmbIRITzsxPkOuWwXkLoz6y664JfH/Te3xVQ2rqZkuDCFrwy5nOqk92w7OY WGqyDOSL4tyCdcsXVoF5HXcHQLTv5WzCQ2MAQUW6zflyirYygTfJ3ds5mk5/J52UKEhIHPzJ Hc26Ubfvo38XuE0FJjb7xoZzCoSTpCVZ2H0f2cJOBLEVN9bnbelNlmp0m6mPAHfDrfsVR/s= Message-ID: <0fb7c2f9-8fc9-fae0-cba8-2558205f0203@gentoo.org> Date: Sun, 8 Jul 2018 22:17:52 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <93d09e4b-a3b3-7550-49f5-4d9b134f2a35@gentoo.org> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Opn54ZT3MQQmDyzkQiS2eJEniqMRVF0vi" X-Archives-Salt: 210b5b5c-7967-45c2-ae20-19a88a4350cb X-Archives-Hash: 4a92877f79b0fe1fef9d7dfa566c97a6 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Opn54ZT3MQQmDyzkQiS2eJEniqMRVF0vi Content-Type: multipart/mixed; boundary="fypWc301vKleIBtuIy4hh6HDzjdpUWFZ2"; protected-headers="v1" From: Zac Medico To: Zac Medico , gentoo-dev@lists.gentoo.org, "Aaron W. Swenson" Message-ID: <0fb7c2f9-8fc9-fae0-cba8-2558205f0203@gentoo.org> Subject: Re: [gentoo-dev] News Item: Portage rsync hardlink support References: <7594901D-54AF-4100-A1B8-7CEA2D1CC82D@gentoo.org> <1339caeb-06fc-c28b-2bd1-2186b0d25f5a@gentoo.org> <1531058219.1553.1.camel@gentoo.org> <1531075350.1553.9.camel@gentoo.org> <853058f4-5634-672a-3655-c9a2ece014e7@gentoo.org> <1531080494.10985.0.camel@gentoo.org> <9d259064-4908-0c86-b207-b695ec266bb7@gentoo.org> <1531084701.10985.1.camel@gentoo.org> <93d09e4b-a3b3-7550-49f5-4d9b134f2a35@gentoo.org> In-Reply-To: <93d09e4b-a3b3-7550-49f5-4d9b134f2a35@gentoo.org> --fypWc301vKleIBtuIy4hh6HDzjdpUWFZ2 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 07/08/2018 02:59 PM, Zac Medico wrote: > On 07/08/2018 02:50 PM, Aaron W. Swenson wrote: >> On July 8, 2018 5:38:48 PM EDT, Zac Medico wrote:= >> >> On 07/08/2018 02:18 PM, Micha=C5=82 G=C3=B3rny wrote: >> >> W dniu nie, 08.07.2018 o godzinie 14=E2=88=B611=E2=80=89-0700,= u=C5=BCytkownik Zac Medico >> napisa=C5=82: >> >> On 07/08/2018 01:18 PM, Zac Medico wrote: >> >> On 07/08/2018 01:08 PM, Micha=C5=82 G=C3=B3rny wrote: >> >> W dniu nie, 08.07.2018 o godzinie 11=E2=88=B657=E2= =80=89-0700, >> u=C5=BCytkownik Zac Medico >> napisa=C5=82: >> >> On 07/08/2018 11:42 AM, Micha=C5=82 G=C3=B3rny= wrote: >> >> W dniu nie, 08.07.2018 o godzinie 11=E2=88= =B604=E2=80=89 >> -0700, u=C5=BCytkownik Zac Medico >> napisa=C5=82: >> >> On 07/08/2018 06:56 AM, Micha=C5=82 G=C3= =B3rny wrote: >> >> W dniu nie, 08.07.2018 o godzinie >> 15=E2=88=B602=E2=80=89+0200, u=C5=BC= ytkownik Kristian >> Fiskerstrand napisa=C5=82: >> >> On 07/08/2018 08:53 AM, Micha=C5= =82 >> G=C3=B3rny wrote: >> >> Is safe git syncing >> implemented already? If no= t, >> maybe finish it first and >> cover both with a single >> news item. Git is going to= >> be more efficient here, so= >> people may want to learn >> they have an alternative. >> >> >> Why complicate things, and >> increase wait for something th= at >> benefits >> most users, just to give >> alternatives to a few using >> non-default sync >> mechanism. Securing git >> distribution is a whole >> different ballpark. >> >> >> >> Let me rephrase. Let's say I'm usi= ng >> rsync. This new feature is >> something positive but it breaks m= y >> use case (for one of the listed >> reasons -- overlayfs, inode use, >> small fs cache). After reading thi= s >> news item, I learn that my only >> option is to disable the new featu= re. >> >> Now, I would appreciate being told= >> that there's an alternate sync met= hod >> that handles secure updates withou= t >> having all those drawbacks. >> >> >> The thing is, the normal git tree >> doesn't even provide pre-generated >> metadata, and I see then gentoo-mirror= >> repo that provides metadata does >> not have commits signed with an releas= e key: >> >> https://github.com/gentoo-mirror/gento= o/commits/stable >> >> So I'm really not comfortable >> recommending git to anyone at this poi= nt. >> >> >> Wrong twice. >> >> Firstly, the canonical URL is: >> >> https://anongit.gentoo.org/git/repo/sync/g= entoo.git >> (https://gitweb.gentoo.org/repo/sync/gento= o.git) >> >> Secondly, the merge commits (i.e. top >> commits that are verified >> by Portage) are signed by dedicated key th= at >> is part of the infra key >> set. In other words, it works out of the b= ox. >> >> >> Is there any documentation that shows users ho= w >> to migrate to git, and >> what the pros and cons might be? Maybe its >> worthy of its own news item. >> >> >> Maybe. I don't really know, and don't think it's a= >> good idea to show 30 >> news item of things users might like on every new >> Gentoo install. >> >> >> Well if instructions for setting up git sync and >> associated pros/cons >> are not documented anywhere then I won't advise anyone= >> to use it. >> >> >> I've attempted to configure it for myself, and this is wha= t >> it does: >> >> * Using keys from /usr/share/openpgp-keys/gentoo-release.a= sc >> * Refreshing keys from keyserver ... >> [ ok ] >> * No valid signature found: unable to verify signature >> (missing key?) >> >> >> >> Please report a bug and attach your configuration along with k= eyring >> version. >> >> >> It works after upgrading to openpgp-keys-gentoo-release-20180706 f= rom >> openpgp-keys-gentoo-release-20180323. >> >> >> Does Portage not call attention to critical updates? >=20 > No, but that might be a nice feature. We'd have to introduce some kind > of standard mechanism via PMS or a GLEP. Actually GLEP 42 news items can be used for this, with a header like: Display-If-Installed: