Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 660344 - sys-apps/portage: migrate emerge*-webrsync to app-crypt/openpgp-keys-gentoo-release
Summary: sys-apps/portage: migrate emerge*-webrsync to app-crypt/openpgp-keys-gentoo-r...
Status: RESOLVED FIXED
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Core (show other bugs)
Hardware: All Linux
: Normal normal with 1 vote (vote)
Assignee: Portage team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-07-04 08:15 UTC by Michał Górny
Modified: 2023-08-19 15:33 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2018-07-04 08:15:37 UTC
Since we use this for rsync & git, and it has well-established propagation procedures etc., we should also use it for webrsync.

I think the best way forward would be to finally rewrite webrsync (and delta-webrsync) in Python, and turn into sync modules.  Then they could use gemato's Python API to establish the local GNUPGHOME and use it.

Alternatively, I can look into adding gemato subcommand to perform detached signature verification.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-08-19 15:33:18 UTC
(In reply to Michał Górny from comment #0)
> Since we use this for rsync & git, and it has well-established propagation
> procedures etc., we should also use it for webrsync.
> 

Done in bug 597800.

> I think the best way forward would be to finally rewrite webrsync (and
> delta-webrsync) in Python, and turn into sync modules.  Then they could use
> gemato's Python API to establish the local GNUPGHOME and use it.

Yeah, ultimately, we should do that bit.

> 
> Alternatively, I can look into adding gemato subcommand to perform detached
> signature verification.

I think this exists nowadays too.