Bug 501814

Summary:	The "Pulling Validated Portage Tree Snapshots" section can be improved
Product:	[OLD] Docs on www.gentoo.org	Reporter:	Francisco Blas Izquierdo Riera (RETIRED) <klondike>
Component:	Installation Handbook	Assignee:	Docs Team <docs-team>
Status:	RESOLVED OBSOLETE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Patch to the docs

Description Francisco Blas Izquierdo Riera (RETIRED) gentoo-dev

2014-02-19 19:04:35 UTC

Hi guys, the gpgish in the section can be improved a little bit.

To download the key is better to use the fingerprint (that way the fingerprint is checked too)
gpg --homedir /etc/portage/gpg --keyserver subkeys.pgp.net --recv-keys "DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D"

Then the key should be checked:
gpg --homedir /etc/portage/gpg --fingerprint

This should list only a pub key (to verify for possible conflicts).

Finally to mark the trust as ultimate it's easier to just do this:
gpg --homedir /etc/portage/gpg --trusted-key 0xDB6B8C1F96D8BF6D --check-trustdb

Or this:
echo "DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D:6:" | gpg --homedir /etc/portage/gpg --import-ownertrust

I prefer the second as it uses the whole fingerprint too.

I'll try to write a patch for the handbook later today,

Comment 1 Francisco Blas Izquierdo Riera (RETIRED) gentoo-dev

2014-04-08 21:04:06 UTC

Created attachment 374558 [details, diff]
Patch to the docs

Comment 2 Sven Vermeulen (RETIRED) gentoo-dev

2014-04-09 18:37:19 UTC

I'm not sure I'm happy with such a change.

Many users still follow the handbook read from another system, print-out or from the same system but without copy/paste possibility. Such fingerprints make it damn hard to do this correctly.

The longer keys are already a nuisance (as #gentoo has told me a few months back).

Comment 3 Francisco Blas Izquierdo Riera (RETIRED) gentoo-dev

2014-04-10 20:27:58 UTC

(In reply to Sven Vermeulen from comment #2)
> I'm not sure I'm happy with such a change.
> 
> Many users still follow the handbook read from another system, print-out or
> from the same system but without copy/paste possibility. Such fingerprints
> make it damn hard to do this correctly.
> 
> The longer keys are already a nuisance (as #gentoo has told me a few months
> back).

Can then we put the other option as an alternative then?

Comment 4 nm (RETIRED) gentoo-dev

2016-01-30 01:40:32 UTC

the XML handbook ain't around anymore, and there's the "discussion" tab on the wiki for suggestions. closing.