From owner-freebsd-ports@FreeBSD.ORG Tue Mar 29 15:18:51 2011 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2EAA3106564A; Tue, 29 Mar 2011 15:18:51 +0000 (UTC) (envelope-from superbisquit@gmail.com) Received: from mail-vw0-f54.google.com (mail-vw0-f54.google.com [209.85.212.54]) by mx1.freebsd.org (Postfix) with ESMTP id 9B7928FC15; Tue, 29 Mar 2011 15:18:50 +0000 (UTC) Received: by vws18 with SMTP id 18so251597vws.13 for ; Tue, 29 Mar 2011 08:18:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=dkQVum91Tq7bpLumPV7ahGtZKDc310X5df2H9XeztnA=; b=iHm66xRnVZw8zH+TMhZwkOcuoDEuuU5tFkcgWXYwpGH0YN5kq4/3rNkkv4aBnoIVB4 F2UNAu3nEsCKZFFDSnhjjcjfqeXmnIirXypMhGzAwzNYo/gwvc/Mv7dlKr4zYjxDxfbt 8OMl4FmEuTM6X+NG4YE7A+eBzukFlc/HubXx4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=unmhLsr+StWGBTgN8fC+CVZACEjUCtf2b/T5oH6Y8BLcHgXi3csEAN8wPLtKGmRPi9 HzQYu+obnxzllY01++/kMbdtH+8SWeXamUlJwlbrWqrYuWXBnNfB7FIHIPT9lj04l3Io 5Di7gfJfaSrhxuUOe/DMeJ0eM/OVMqQrLnbB0= MIME-Version: 1.0 Received: by 10.220.198.200 with SMTP id ep8mr1500657vcb.132.1301410231590; Tue, 29 Mar 2011 07:50:31 -0700 (PDT) Received: by 10.220.186.138 with HTTP; Tue, 29 Mar 2011 07:50:31 -0700 (PDT) In-Reply-To: References: <20110325101111.GA36840__48943.3474642739$1301049771$gmane$org@azathoth.lan> <4D90C8EA.2000901@freebsd.org> Date: Tue, 29 Mar 2011 10:50:31 -0400 Message-ID: From: Super Bisquit To: Julien Laffaye Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: ports@freebsd.org, Baptiste Daroussin , Tim Kientzle , Benjamin Kaduk , hackers@freebsd.org Subject: Re: [ECFT] pkgng 0.1-alpha1: a replacement for pkg_install X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Mar 2011 15:18:51 -0000 I'm just going to clarify a statement I made earlier on this thread in order to remove some possible misconceptions. One can only boot 32bit PPC on a 32bit PPC machines and have it work properly. The same applies for 64bit ppc machines. On Tue, Mar 29, 2011 at 8:11 AM, Julien Laffaye wrote: > On Tue, Mar 29, 2011 at 5:15 AM, Tim Kientzle > wrote: > >>>>> II. Package signing. > >>>> > >>>> That would be really nice. > >>> > >>> Right know we only planned to sign the repo database, so we can trust > >>> the sah256 of the packages stored in the database. Then if the package > >>> has the same sha256 as the one in the repo database it is considered > >>> trusted. > >>> If we want a per-package signing, we would have a tarball in a tarball. > >> > >> I really expected this to have been mentioned already, but this approach > (tarball in a tarball) is taken by Debian packages, and I don't remember > hearing of any issues related to it. I don't think it's worth discounting > from the start without giving some considerationg, but I will defer to the > people actually doing the work. > > > > If you use libarchive-style streaming, it's even > > pretty straightforward to read and extract such > > things without having to create a bunch of > > temporary files. > > > > You just need to be careful about compression. > > Agreed, if we dont want to verify the signature, we can extract the > tarball in the tarball efficiently. > > But to verify the signature, we have to read the tarball in the > tarball twice: the first time to compute the digest and verify the > signature, the second time to do the real extraction. > So I guess that the tarball containing the real package archive and > the signature should be uncompressed. The real package archive would > be compressed, though. > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org" >