On 19-02-20 08:35:10, Michał Górny wrote: > On Tue, 2019-02-19 at 21:23 -0600, Matthew Thode wrote: > > As the title says, I think this should be done. > > > > First sync is impossible to verify without keys (webrsync) > > app-crypt/gentoo-keys has no dependencies, which help avoid some bloat > > in the base install. > > > > This is the wrong place to add it, and the wrong package. > > If Portage (still) needs it for whatever, then it should be a dependency > of Portage. > > However, app-crypt/openpgp-keys-gentoo-release should be entirely > sufficient, and it works without all the voodoo dependencies and 'run > programs as root' logic of gkeys. If there's anything in Portage left > not using it, it should be ported. >
FEATURES="webrsync-gpg" emerge-webrsync fails to work with just the file. PORTAGE_GPG_DIR="/var/lib/gentoo/gkeys/keyrings/gentoo/release" FEATURES="webrsync-gpg" emerge-webrsync works PORTAGE_GPG_DIR="/usr/share/openpgp-keys/" FEATURES="webrsync-gpg" emerge-webrsync emerge-webrsync: error: signature verification failed (same for the file). Maybe some of the interior portage stuff should be fixed then? -- Matthew Thode (prometheanfire)
signature.asc
Description: PGP signature