Comments on: Pacman Package Signing – 3: Pacman http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/ Still no witty tagline! Sat, 25 May 2013 00:06:43 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: Tim http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-224 Tim Wed, 31 Aug 2011 21:56:45 +0000 http://allanmcrae.com/?p=1349#comment-224 Thanks to you and the other devs for the effort you put into package signing. I know not many (or any) of you were interested in this particular feature.

]]> By: masteryod http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-223 masteryod Wed, 31 Aug 2011 21:26:34 +0000 http://allanmcrae.com/?p=1349#comment-223 good to see that Arch is going forward :)

Good work people!

]]> By: Krebs http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-222 Krebs Wed, 31 Aug 2011 16:37:42 +0000 http://allanmcrae.com/?p=1349#comment-222 Goes against minimalism.

]]> By: Allan http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-221 Allan Wed, 31 Aug 2011 10:24:58 +0000 http://allanmcrae.com/?p=1349#comment-221 There is not really enough room to add more to that line and keep a decent sized progress bar on an 80 width terminal. I also do not think it is necessary…

]]> By: Tom http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-220 Tom Wed, 31 Aug 2011 10:15:54 +0000 http://allanmcrae.com/?p=1349#comment-220 How about adding “& signatures” to the “checking package integrity” line?

]]> By: Allan http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-219 Allan Wed, 31 Aug 2011 00:00:06 +0000 http://allanmcrae.com/?p=1349#comment-219 Will it be done on the exact same day? Probably not… And I guess that getting the (remaining) packages signed will be a progressive thing, but there might be a big push to get it done. These things are still in planning at an Arch Linux level.

]]> By: Arch-n00b http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-218 Arch-n00b Tue, 30 Aug 2011 19:41:26 +0000 http://allanmcrae.com/?p=1349#comment-218 Hey Allan, I am an Arch n00b and I have used linux (both Ubuntu, Suse, and Sabayon) for a year, so I am no expert at all, but I have always envied arch but could never use it since I am security Paranoid but will all official Arch repositories be “secure” on the 4.0 release? Will there be any unsigned packages in the official repos left and will all the databases be signed? I just have to know, I am very very paranoid when it comes to computer security.

]]> By: Allan http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-217 Allan Mon, 29 Aug 2011 22:07:50 +0000 http://allanmcrae.com/?p=1349#comment-217 Works is going on in preparation for this. Currently there are many packages in the repos with signatures, but the repo databases are not signed. We also have to figure out how best to distribute keys. Hopefully this all will be sorted around the time of the pacman-4.0 release.

]]> By: Henrik Hämäläinen http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-216 Henrik Hämäläinen Mon, 29 Aug 2011 19:00:59 +0000 http://allanmcrae.com/?p=1349#comment-216 Thanks to everyone who contributed to this, great work!

]]> By: solsTiCe http://allanmcrae.com/2011/08/pacman-package-signing-3-pacman/#comment-215 solsTiCe Mon, 29 Aug 2011 16:54:07 +0000 http://allanmcrae.com/?p=1349#comment-215 sorry for the stupid question, but will archlinux repos be updated at the same time pacman 4 is shipped so that database signature for [core], [extra] and [community] could be fetched by pacman 4 ?

]]>