From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 3E9F71384B4 for ; Sun, 1 Nov 2015 13:47:37 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8EB1F21C04C; Sun, 1 Nov 2015 13:47:29 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A12E221C01B for ; Sun, 1 Nov 2015 13:47:28 +0000 (UTC) Received: from localhost (AMontpellier-655-1-301-230.w81-251.abo.wanadoo.fr [81.251.161.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: aballier) by smtp.gentoo.org (Postfix) with ESMTPSA id 45CE2340AC0 for ; Sun, 1 Nov 2015 13:47:27 +0000 (UTC) Date: Sun, 1 Nov 2015 14:47:19 +0100 From: Alexis Ballier To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] ChangeLog Message-ID: <20151101144719.223ec1f9@gentoo.org> In-Reply-To: <56361493.9020606@gentoo.org> References: <5636029F.1020304@gentoo.org> <5636127B.10102@gentoo.org> <56361381.9070609@gentoo.org> <56361493.9020606@gentoo.org> Organization: Gentoo X-Mailer: Claws Mail 3.13.0 (GTK+ 2.24.28; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: ae43bb30-fbc5-4081-bda6-c70696635bde X-Archives-Hash: 9d95a41c099118c18f5b2b0b06329900 On Sun, 1 Nov 2015 14:33:07 +0100 hasufell wrote: > >> > >> git log -- app-misc/foo > >> or > >> git log -- eclass/autotools.eclass > >> > >> will give you _any_ commit that has touched that file/directory, > >> even if it was part of a huge mass commit. > > > > $ cd /usr/portage/app-admin/rex/; git log > > fatal: Not a git repository (or any of the parent directories): .git > > > > sooo ... ??? > > > > You shouldn't use rsync anymore, it is inherently insecure. The git > tree is _properly_ gpg signed so you can verify it's correctness. > > With the following portage configuration/hooks, any user can run the > tree directly from git: > https://github.com/hasufell/portage-gentoo-git-config More secure by fetching metadata cache via rsync ? Better by running egencache after each sync ? I don't think so. > At some point, rsync schould be deprecated completely. Considering the original plan was to have changelogs auto-generated from git and still serving the tree via rsync, where's the relevant discussion and decision about this? There's no technical reason for not doing this *today*, the only reason not to is the lack of decision and concrete plan on how to properly serve what is in the rsync'ed tree and not in gentoo.git. Until then, we are serving outdated and useless changelogs via rsync and Patrick's point still holds: Either remove them or serve proper ones. Alexis.