FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > ArchLinux > ArchLinux Pacman Development

 
 
LinkBack Thread Tools
 
Old 04-08-2011, 10:53 AM
Pierre Schmitz
 
Default Sign packages and databases using dedicated scripts

Hi,

in their current state makepkg and repo-add have built-in functions to
sign packages or the repo database. Unfortunately we wont be able to use
neither of these in Arch Linux. That also means that this functionality
needs to be reimplemented in devtools and dbscripts.

We cannot let makepkg sing the packages because we built packages in a
chroot environment that may even be on a different host than the
packages key. The situation with repo-add is even more complicated as
we'll need to sign a file with a key which are on different hosts. (I
was told this might be doable using ssh-/gpg-agent)

However, my point is that it would be nice to have separate scripts to
sign a package and database file. This way we could use it like this:

chroot makepkg
signpkg

Greetings,

Pierre

--
Pierre Schmitz, https://users.archlinux.de/~pierre
 

Thread Tools




All times are GMT. The time now is 08:47 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org