Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 923721 - provide a stage*latest
Summary: provide a stage*latest
Status: CONFIRMED
Alias: None
Product: Gentoo Release Media
Classification: Unclassified
Component: Stages (show other bugs)
Hardware: All Linux
: Normal enhancement (vote)
Assignee: Gentoo Release Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-02-03 13:07 UTC by Agostino Sarubbo
Modified: 2024-02-07 12:33 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2024-02-03 13:07:41 UTC
For portage snapshot at https://distfiles.gentoo.org/snapshots/ we have a file called portage-latest.tar.xz

That means that at a fixed URL it is always available the latest version of the tree.

Would it possible to do it also for the stages? So at the same location it is always available the latest stage, in addition obviously to what we already have.

Thanks
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2024-02-04 23:37:45 UTC
Yes, but there's a risk:
How do you make sure you get the tarball & digest for the same file always?

In the case of portage-latest.tar.xz, the signatures are INSIDE the file; so the problem doesn't happen.

The latest symlinks used to exist, but we got enough reports of digest issues, or users that downloaded it without renaming and reused old files.

Would you consider a solution that redirects to a given file, and has a content-disposition header saying what local name SHOULD be used for the output file?

so `curl -O $URL` -> would generate stage3-TIMESTAMP.tar.bz2
Comment 2 Agostino Sarubbo gentoo-dev 2024-02-07 12:33:53 UTC
(In reply to Robin Johnson from comment #1)
> The latest symlinks used to exist, but we got enough reports of digest
> issues, or users that downloaded it without renaming and reused old files.

Yes, if the digest has the same name across multiple stage downloads, there will be a risk that do not match, but that's a user's error not our fault.


> Would you consider a solution that redirects to a given file, and has a
> content-disposition header saying what local name SHOULD be used for the
> output file?
> 
> so `curl -O $URL` -> would generate stage3-TIMESTAMP.tar.bz2

That's fine.

We can also consider to put *latest stages in another directory called latest, where there are no digest and so on. The usage of these stages is only for who does not care about integrity.