Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 660344

Summary: sys-apps/portage: migrate emerge*-webrsync to app-crypt/openpgp-keys-gentoo-release
Product: Portage Development Reporter: Michał Górny <mgorny>
Component: CoreAssignee: Portage team <dev-portage>
Status: RESOLVED FIXED    
Severity: normal CC: burcheri.massimo+bugs-gentoo, nbowler, sam
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
See Also: https://bugs.gentoo.org/show_bug.cgi?id=597800
Whiteboard:
Package list:
Runtime testing required: ---

Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-07-04 08:15:37 UTC
Since we use this for rsync & git, and it has well-established propagation procedures etc., we should also use it for webrsync.

I think the best way forward would be to finally rewrite webrsync (and delta-webrsync) in Python, and turn into sync modules.  Then they could use gemato's Python API to establish the local GNUPGHOME and use it.

Alternatively, I can look into adding gemato subcommand to perform detached signature verification.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-08-19 15:33:18 UTC
(In reply to Michał Górny from comment #0)
> Since we use this for rsync & git, and it has well-established propagation
> procedures etc., we should also use it for webrsync.
> 

Done in bug 597800.

> I think the best way forward would be to finally rewrite webrsync (and
> delta-webrsync) in Python, and turn into sync modules.  Then they could use
> gemato's Python API to establish the local GNUPGHOME and use it.

Yeah, ultimately, we should do that bit.

> 
> Alternatively, I can look into adding gemato subcommand to perform detached
> signature verification.

I think this exists nowadays too.