From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id CC63D1396D9 for ; Mon, 6 Nov 2017 19:13:59 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 0DAA6E0C9A; Mon, 6 Nov 2017 19:13:53 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id AFEC2E0809 for ; Mon, 6 Nov 2017 19:13:51 +0000 (UTC) Received: from grubbs.orbis-terrarum.net (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 585F033DDA5 for ; Mon, 6 Nov 2017 19:13:50 +0000 (UTC) Received: (qmail 8315 invoked by uid 10000); 6 Nov 2017 19:13:48 -0000 Date: Mon, 6 Nov 2017 19:13:48 +0000 From: "Robin H. Johnson" To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Manifest2 hashes, take n+1-th Message-ID: References: <1508440120.19870.14.camel@gentoo.org> <1509987501.1382.11.camel@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="5AM/va+D8n3NJ4K5" Content-Disposition: inline In-Reply-To: <1509987501.1382.11.camel@gentoo.org> User-Agent: Mutt/1.8.2 (2017-04-18) X-Archives-Salt: 52ce2240-80c5-452e-be87-6e451ba6aa7b X-Archives-Hash: e1ea20b5e03a88941ac0060869003f5b --5AM/va+D8n3NJ4K5 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable +1 overall, just one timeline clarification. On Mon, Nov 06, 2017 at 05:58:21PM +0100, Micha=C5=82 G=C3=B3rny wrote: > T + 7 days > ---------- > Set: > manifest-hashes =3D BLAKE2B SHA512 > manifest-required-hashes =3D SHA512 >=20 > New Manifest entries will use the new hashes but Portage will keep the > old hash set whenever it would need to refetch old distfiles. Query: Do we need to wait for it to be stable before making this change? Shouldn't old stable versions of Portage continue to verify SHA512 fine? Mostly I think devs need to be using a new enough Portage that can generate the BLAKE2B entries, but it shouldn't impact user Portage versions. --=20 Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Asst. Treasurer E-Mail : robbat2@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 --5AM/va+D8n3NJ4K5 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Robbat2 @ Orbis-Terrarum Networks - The text below is a digital signature. If it doesn't make any sense to you, ignore it. iQKTBAEBCgB9FiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAloAtGtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEJE RUJCNkE1MkYxNTZGREYzMTY4RDkxMTE5Mzk1RjIzQzU4ODI2QzQACgkQGTlfI8WI JsRCBRAAsAPK7XSkwTcWyKsrjd3pECBfMfbwE9bO/CTxZUxlAoy9n5SseGEa6B76 RSlofsdfe250YGCJpFx5rY20l1RWKP17DwizOFZzP9jZVVIjY/iwOR4Qw72bgWEV QsOkkkn7Xfbe2n7TuqvphDITKZ5IVncoEpAlOai8Zm2jeX7+glCijokKCa+Q07QG OxpvEZCzQg3BvcHYenyws3d2skiTxlUQxloZEBzG0KrDfifuqWzKNPipfnV0fhTz otCTGRFIKnlLJA9XC1lBu7iFN4zQpPtY5P60C/GDVAz5U324e2hu02i8T8Hpj+V+ hzSeN/Zbb+F/yljWz8pui0KK+XTpBDwZH/aa1KJ3RbQGumHMd5WshNusszEitoQP a3igAB/FQEt8Z8++tEC6qI72JgLFFkcQEwasN/5UpaSdv1Ann/vAUkJ4jpzMo0jF L3DCHqE8zsv6zy3sim+hKEkpqX6ULgGk6r6biEsdg8vlKJpj+pz0vCxAxRDcTU0q YyckG5rVmz/1oU2b6f5bw51fsazU+EWzFDwAJh/a6jhTAGIx0FVN/wR23SYblEZH kOfuJnBwgLFKfbVvqMS38SgpwE1XEvTe7uWSooZlomQPW3cCsHAXBVGhM/OnGfJA RBQsUElDx7KEqe7sWkHkXhD/fPwmkiUKftEWt3peSPTW8IDsnGY= =bbrV -----END PGP SIGNATURE----- --5AM/va+D8n3NJ4K5--