Summary: | sys-apps/portage-2.3.4 disabling manifests in overlays no longer works | ||
---|---|---|---|
Product: | Portage Development | Reporter: | Mikael Magnusson <mikachu> |
Component: | Core - Ebuild Support | Assignee: | Portage team <dev-portage> |
Status: | UNCONFIRMED --- | ||
Severity: | minor | ||
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Attachments: | hack hack |
Description
Mikael Magnusson
2017-03-14 09:15:31 UTC
I feel like "use-manifests = false" is intended for transition from thick to thin manifests, and that DIST entries containing digests for distfiles should always be required (otherwise we've got a security problem due to execution of unverified code fetched over a network). The use-manifests attribute was implemented in this commit: https://gitweb.gentoo.org/proj/portage.git/commit/?id=f3101b3adce6731790f80f83fafece54b7bd8a63 That commit refers to this issue, which discusses a transition from thick to thin manifests: https://code.google.com/archive/p/chromium-os/issues/11308 You probably just want to set "thin-manifests = true" in metadata/layout.conf. Using a google search for "use-manifests = false", I found some expanded documentation from the author of the patch: use-manifests = [ false | true | strict ] Defaults to strict if unspecified. This provides per repository control as to whether manifests should be used/generated; if set to false, manifest usage and generation is disabled for that repository. If set to true, this directs the package manager to use manifest data if available, but to not consider it a failure if a manifest file is missing. Additionally, if set to true, the package manager will generate manifests by default. This mode is primarily of use for migrating a repository that lacked manifests, to using/requiring manifests. Finally, if set to strict, manifests are generated/required and it’s considered a failure if the data isn’t available. Generally speaking, there rarely is any reason to set this option to anything other than strict. |