*** chinarulezzz has quit IRC | 01:05 | |
*** chinarulezzz has joined #crux-devel | 01:07 | |
*** frinnst has quit IRC | 02:19 | |
*** frinnst has joined #crux-devel | 02:51 | |
*** frinnst has quit IRC | 02:51 | |
*** frinnst has joined #crux-devel | 02:51 | |
*** _________mavric6 has joined #crux-devel | 03:44 | |
*** chinarulezzz has quit IRC | 03:48 | |
*** chinarulezzz has joined #crux-devel | 03:50 | |
*** chinarulezzz has quit IRC | 06:29 | |
*** chinarulezzz has joined #crux-devel | 06:32 | |
*** chinarulezzz has quit IRC | 08:13 | |
*** chinarulezzz has joined #crux-devel | 08:14 | |
*** tnut has joined #crux-devel | 08:49 | |
tnut | Morning | 08:50 |
---|---|---|
Romster | now that we are using .signatures can we kill off .md5sum ? | 09:12 |
tnut | Hello, I introduce myself (for peoples who don't know me) I've start a fork of pkgutils 3 and half years ago (https://github.com/NuTyX/cards). I've been asking myself how do you handle signature. | 09:23 |
Romster | hi tnut should be able to figure it out from our pkgutils git tree | 09:26 |
tnut | Reading | 09:26 |
Romster | https://crux.nu/gitweb/?p=tools/pkgutils.git;a=summary | 09:27 |
tnut | in fact I don't have a picture the way it works | 09:28 |
Romster | https://crux.nu/ports/crux-3.3/core/signify/Pkgfile | 09:29 |
Romster | we use that to make foo.pub and foo.sec | 09:29 |
Romster | pkgmk has code in it to read from /etc/ports/ | 09:29 |
tnut | Has it something to do with a key pair generation ? | 09:29 |
Romster | to read the .signature out of each directory and compare that to the foo.pub file | 09:30 |
tnut | a public one available somewhere and your own one | 09:30 |
Romster | when you do pkgmk -us it uses foo.sec the secret key to make the .signature | 09:30 |
tnut | I see | 09:30 |
Romster | yes signify makes a key pair | 09:30 |
Romster | we have keys for a REPO name. | 09:30 |
Romster | or well collection so a opt.sec and opt.pub | 09:31 |
tnut | REPO = Collection ? | 09:31 |
Romster | and so on. | 09:31 |
Romster | correct | 09:31 |
tnut | ok | 09:31 |
Romster | i keep looking at my empty coffee cup need a refill | 09:32 |
tnut | means when a user do ports -u, the public key comes over as well otherwise I don't see how this can works | 09:32 |
Romster | i have added romster.pub to the base of my ports collection in /usr/ports/romster/romster.pub | 09:33 |
tnut | let's say ports -u xorg for ex | 09:33 |
Romster | so users can cp that to /etc/ports | 09:33 |
Romster | the main ones are already in there. | 09:34 |
tnut | voilĂ | 09:34 |
tnut | ACTION start to get the picture | 09:34 |
Romster | prt-get fsearch opt.pub | 09:34 |
Romster | Found in /usr/ports/core/ports: | 09:34 |
Romster | /etc/ports/opt.pub | 09:34 |
Romster | core/ports/ has the rsync and pub files. | 09:35 |
Romster | for core opt xorg contrib compat-32 | 09:35 |
tnut | checked yep | 09:35 |
Romster | man signify | 09:36 |
Romster | that should be all you need to get started. | 09:36 |
Romster | been meaning to look at nuttyx sometime to see what's different. | 09:37 |
tnut | so idea behind that is to ensure that the pkgfile XX and all it's relevant files have been produce by Person YY and has not been change by anybody | 09:38 |
Romster | correct | 09:38 |
tnut | Romster: yes It's quite a bit of differences | 09:39 |
Romster | it makes a sha256sum of Pkgfile patches ... and source files and then that is signed | 09:39 |
tnut | pkgmk.man.in can be a good starting point to have an idea | 09:39 |
tnut | I see | 09:39 |
tnut | that's the bigest issue with cards | 09:40 |
Romster | i'm a opt about 50% of contrib and 1 of mostly 2 packagers in compat-32 as well as my own ports. | 09:40 |
Romster | so i do quite a bit here. | 09:40 |
Romster | there is like i think 5 of us maintaining the official ports | 09:40 |
tnut | that's already a lot | 09:41 |
Romster | well md5 is broken and so is sha1 now. | 09:41 |
tnut | you no need to many people for that anyway | 09:41 |
tnut | you need trust peoples | 09:41 |
Romster | correct | 09:41 |
tnut | we are two people, and honestly that ok | 09:42 |
Romster | i test my stuff in docker to make sure it all works and dependencies are correct | 09:42 |
Romster | it would be ok if i wasn't busy with work and sleep and other things. | 09:42 |
Romster | i work in IT | 09:43 |
tnut | :) | 09:43 |
Romster | i get burned out i need to take a rest | 09:43 |
tnut | a bit like me | 09:43 |
tnut | a great help (if I may talk about it otherwise just say it) with cards is: | 09:44 |
Romster | i work on photocopiers iphones computers networking and sometimes even electronics. | 09:44 |
tnut | A port will always be compile from base system | 09:44 |
Romster | i can't see why you can't talk about it | 09:44 |
tnut | and if the user choose the binarie scemario (which is the default one) ports have to be done in a chroot | 09:45 |
tnut | cards will also shows the level of dependencies, a great use when dealing with deps | 09:46 |
tnut | You are now having professionnal break Romster ? | 09:50 |
Romster | i just made a coffee | 09:54 |
Romster | so you made cards do binary | 09:54 |
tnut | yes | 09:55 |
tnut | add some variables as well in pkgmk script | 09:55 |
tnut | ACTION will need to consider the key story | 09:57 |
Romster | i'll take a look at it one day | 09:57 |
tnut | :) as you wish | 09:58 |
Romster | and if i go quiet it's because i got busy with dogs or kitchen or bathroom or something else on the computer etc. replies can be late but i do read. | 09:58 |
tnut | :) I know same here | 09:59 |
Romster | so how goes things? | 10:06 |
tnut | fine fine :D | 10:08 |
tnut | ACTION is at work | 10:08 |
Romster | ah i am at home in my evening 9:10pm | 10:10 |
tnut | Ok you are in US | 10:20 |
tnut | no sorry | 10:20 |
Romster | AUS | 10:21 |
tnut | Australia may be | 10:21 |
tnut | right | 10:21 |
Romster | one of a few | 10:22 |
tnut | I drop the md5sum story | 10:23 |
tnut | even if still there (in the code) | 10:23 |
tnut | Now it's a chance to switch | 10:24 |
*** tnut has quit IRC | 10:32 | |
*** tnut has joined #crux-devel | 11:29 | |
tnut | re :) | 12:21 |
*** chinarulezzz has quit IRC | 13:33 | |
*** chinarulezzz has joined #crux-devel | 13:35 | |
*** tnut has left #crux-devel () | 14:08 | |
*** erdic has joined #crux-devel | 14:54 | |
*** erdic has quit IRC | 15:10 | |
*** erdic has joined #crux-devel | 15:14 | |
frinnst | jaeger: I switched the source URL for core/dash to use your mirror, hope you don't mind | 15:58 |
frinnst | the upstream site is still down | 15:58 |
frinnst | also switched all gnu sources to use ftpmirror.gnu.org instead | 15:59 |
jaeger | ok | 15:59 |
frinnst | asdf. the motherboard i chose is blocking my ryzen order. according to newegg it will be released next week | 16:02 |
frinnst | https://www.newegg.com/Product/Product.aspx?Item=N82E16813132964 | 16:02 |
jaeger | doh | 16:03 |
frinnst | gives me another week to change my mind and cancel the order :> | 16:04 |
jaeger | hehe, I suppose so | 16:04 |
frinnst | phoronix had some benchmarks. the performance looks mighty nice | 16:05 |
crash_ | ryzen seems to perform very nice | 18:07 |
*** tnut has joined #crux-devel | 19:22 | |
*** jaeger has quit IRC | 20:36 | |
*** jaeger has joined #crux-devel | 20:41 | |
jaeger | crux.ninja is updated to 3.3 now, it should start updating the distfiles to 3.3 sources | 20:56 |
Romster | AMD Ryzen Processors support DDR4 2666/ 2400/ 2133 <- really i read 3200Mhz and some places say they support 3600Mhz ram | 21:03 |
Romster | that board says 2400MHz others say 3200Mhz OC so i guess the over clocking is what can go up to 3600MHz | 21:17 |
*** tnut has quit IRC | 21:55 | |
jaeger | Anything over 2133 is technically overclocked | 22:06 |
*** s4nni has quit IRC | 22:19 | |
*** chinarulezzz has quit IRC | 22:37 | |
*** chinarulezzz has joined #crux-devel | 22:41 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!