| *** chinarulezzz has quit IRC | 01:05 | |
| *** chinarulezzz has joined #crux-devel | 01:07 | |
| *** frinnst has quit IRC | 02:19 | |
| *** frinnst has joined #crux-devel | 02:51 | |
| *** frinnst has quit IRC | 02:51 | |
| *** frinnst has joined #crux-devel | 02:51 | |
| *** _________mavric6 has joined #crux-devel | 03:44 | |
| *** chinarulezzz has quit IRC | 03:48 | |
| *** chinarulezzz has joined #crux-devel | 03:50 | |
| *** chinarulezzz has quit IRC | 06:29 | |
| *** chinarulezzz has joined #crux-devel | 06:32 | |
| *** chinarulezzz has quit IRC | 08:13 | |
| *** chinarulezzz has joined #crux-devel | 08:14 | |
| *** tnut has joined #crux-devel | 08:49 | |
| tnut | Morning | 08:50 |
|---|---|---|
| Romster | now that we are using .signatures can we kill off .md5sum ? | 09:12 |
| tnut | Hello, I introduce myself (for peoples who don't know me) I've start a fork of pkgutils 3 and half years ago (https://github.com/NuTyX/cards). I've been asking myself how do you handle signature. | 09:23 |
| Romster | hi tnut should be able to figure it out from our pkgutils git tree | 09:26 |
| tnut | Reading | 09:26 |
| Romster | https://crux.nu/gitweb/?p=tools/pkgutils.git;a=summary | 09:27 |
| tnut | in fact I don't have a picture the way it works | 09:28 |
| Romster | https://crux.nu/ports/crux-3.3/core/signify/Pkgfile | 09:29 |
| Romster | we use that to make foo.pub and foo.sec | 09:29 |
| Romster | pkgmk has code in it to read from /etc/ports/ | 09:29 |
| tnut | Has it something to do with a key pair generation ? | 09:29 |
| Romster | to read the .signature out of each directory and compare that to the foo.pub file | 09:30 |
| tnut | a public one available somewhere and your own one | 09:30 |
| Romster | when you do pkgmk -us it uses foo.sec the secret key to make the .signature | 09:30 |
| tnut | I see | 09:30 |
| Romster | yes signify makes a key pair | 09:30 |
| Romster | we have keys for a REPO name. | 09:30 |
| Romster | or well collection so a opt.sec and opt.pub | 09:31 |
| tnut | REPO = Collection ? | 09:31 |
| Romster | and so on. | 09:31 |
| Romster | correct | 09:31 |
| tnut | ok | 09:31 |
| Romster | i keep looking at my empty coffee cup need a refill | 09:32 |
| tnut | means when a user do ports -u, the public key comes over as well otherwise I don't see how this can works | 09:32 |
| Romster | i have added romster.pub to the base of my ports collection in /usr/ports/romster/romster.pub | 09:33 |
| tnut | let's say ports -u xorg for ex | 09:33 |
| Romster | so users can cp that to /etc/ports | 09:33 |
| Romster | the main ones are already in there. | 09:34 |
| tnut | voilà | 09:34 |
| tnut | ACTION start to get the picture | 09:34 |
| Romster | prt-get fsearch opt.pub | 09:34 |
| Romster | Found in /usr/ports/core/ports: | 09:34 |
| Romster | /etc/ports/opt.pub | 09:34 |
| Romster | core/ports/ has the rsync and pub files. | 09:35 |
| Romster | for core opt xorg contrib compat-32 | 09:35 |
| tnut | checked yep | 09:35 |
| Romster | man signify | 09:36 |
| Romster | that should be all you need to get started. | 09:36 |
| Romster | been meaning to look at nuttyx sometime to see what's different. | 09:37 |
| tnut | so idea behind that is to ensure that the pkgfile XX and all it's relevant files have been produce by Person YY and has not been change by anybody | 09:38 |
| Romster | correct | 09:38 |
| tnut | Romster: yes It's quite a bit of differences | 09:39 |
| Romster | it makes a sha256sum of Pkgfile patches ... and source files and then that is signed | 09:39 |
| tnut | pkgmk.man.in can be a good starting point to have an idea | 09:39 |
| tnut | I see | 09:39 |
| tnut | that's the bigest issue with cards | 09:40 |
| Romster | i'm a opt about 50% of contrib and 1 of mostly 2 packagers in compat-32 as well as my own ports. | 09:40 |
| Romster | so i do quite a bit here. | 09:40 |
| Romster | there is like i think 5 of us maintaining the official ports | 09:40 |
| tnut | that's already a lot | 09:41 |
| Romster | well md5 is broken and so is sha1 now. | 09:41 |
| tnut | you no need to many people for that anyway | 09:41 |
| tnut | you need trust peoples | 09:41 |
| Romster | correct | 09:41 |
| tnut | we are two people, and honestly that ok | 09:42 |
| Romster | i test my stuff in docker to make sure it all works and dependencies are correct | 09:42 |
| Romster | it would be ok if i wasn't busy with work and sleep and other things. | 09:42 |
| Romster | i work in IT | 09:43 |
| tnut | :) | 09:43 |
| Romster | i get burned out i need to take a rest | 09:43 |
| tnut | a bit like me | 09:43 |
| tnut | a great help (if I may talk about it otherwise just say it) with cards is: | 09:44 |
| Romster | i work on photocopiers iphones computers networking and sometimes even electronics. | 09:44 |
| tnut | A port will always be compile from base system | 09:44 |
| Romster | i can't see why you can't talk about it | 09:44 |
| tnut | and if the user choose the binarie scemario (which is the default one) ports have to be done in a chroot | 09:45 |
| tnut | cards will also shows the level of dependencies, a great use when dealing with deps | 09:46 |
| tnut | You are now having professionnal break Romster ? | 09:50 |
| Romster | i just made a coffee | 09:54 |
| Romster | so you made cards do binary | 09:54 |
| tnut | yes | 09:55 |
| tnut | add some variables as well in pkgmk script | 09:55 |
| tnut | ACTION will need to consider the key story | 09:57 |
| Romster | i'll take a look at it one day | 09:57 |
| tnut | :) as you wish | 09:58 |
| Romster | and if i go quiet it's because i got busy with dogs or kitchen or bathroom or something else on the computer etc. replies can be late but i do read. | 09:58 |
| tnut | :) I know same here | 09:59 |
| Romster | so how goes things? | 10:06 |
| tnut | fine fine :D | 10:08 |
| tnut | ACTION is at work | 10:08 |
| Romster | ah i am at home in my evening 9:10pm | 10:10 |
| tnut | Ok you are in US | 10:20 |
| tnut | no sorry | 10:20 |
| Romster | AUS | 10:21 |
| tnut | Australia may be | 10:21 |
| tnut | right | 10:21 |
| Romster | one of a few | 10:22 |
| tnut | I drop the md5sum story | 10:23 |
| tnut | even if still there (in the code) | 10:23 |
| tnut | Now it's a chance to switch | 10:24 |
| *** tnut has quit IRC | 10:32 | |
| *** tnut has joined #crux-devel | 11:29 | |
| tnut | re :) | 12:21 |
| *** chinarulezzz has quit IRC | 13:33 | |
| *** chinarulezzz has joined #crux-devel | 13:35 | |
| *** tnut has left #crux-devel () | 14:08 | |
| *** erdic has joined #crux-devel | 14:54 | |
| *** erdic has quit IRC | 15:10 | |
| *** erdic has joined #crux-devel | 15:14 | |
| frinnst | jaeger: I switched the source URL for core/dash to use your mirror, hope you don't mind | 15:58 |
| frinnst | the upstream site is still down | 15:58 |
| frinnst | also switched all gnu sources to use ftpmirror.gnu.org instead | 15:59 |
| jaeger | ok | 15:59 |
| frinnst | asdf. the motherboard i chose is blocking my ryzen order. according to newegg it will be released next week | 16:02 |
| frinnst | https://www.newegg.com/Product/Product.aspx?Item=N82E16813132964 | 16:02 |
| jaeger | doh | 16:03 |
| frinnst | gives me another week to change my mind and cancel the order :> | 16:04 |
| jaeger | hehe, I suppose so | 16:04 |
| frinnst | phoronix had some benchmarks. the performance looks mighty nice | 16:05 |
| crash_ | ryzen seems to perform very nice | 18:07 |
| *** tnut has joined #crux-devel | 19:22 | |
| *** jaeger has quit IRC | 20:36 | |
| *** jaeger has joined #crux-devel | 20:41 | |
| jaeger | crux.ninja is updated to 3.3 now, it should start updating the distfiles to 3.3 sources | 20:56 |
| Romster | AMD Ryzen Processors support DDR4 2666/ 2400/ 2133 <- really i read 3200Mhz and some places say they support 3600Mhz ram | 21:03 |
| Romster | that board says 2400MHz others say 3200Mhz OC so i guess the over clocking is what can go up to 3600MHz | 21:17 |
| *** tnut has quit IRC | 21:55 | |
| jaeger | Anything over 2133 is technically overclocked | 22:06 |
| *** s4nni has quit IRC | 22:19 | |
| *** chinarulezzz has quit IRC | 22:37 | |
| *** chinarulezzz has joined #crux-devel | 22:41 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!