Re: signed base installs

2014-01-22 Thread Ted Unangst
On Wed, Jan 22, 2014 at 15:33, Christian Weisgerber wrote: > Theo de Raadt wrote: > >> There are a few raw edges still, but we would appreciate if this is >> tried by a few people.. please give us feedback. > > Well, it works for me for installs and updates on amd64 and i386. > > The limitation

Re: signed base installs

2014-01-22 Thread Christian Weisgerber
Theo de Raadt wrote: > There are a few raw edges still, but we would appreciate if this is > tried by a few people.. please give us feedback. Well, it works for me for installs and updates on amd64 and i386. The limitation that the sets are only downloaded and verified if /home is a separate mo

Re: signed base installs

2014-01-19 Thread Ray Percival
> On Jan 19, 2014, at 8:47, Theo de Raadt wrote: > > I suspect only a few have noticed, so it probably should be mentioned > that install/upgrades are also signed now. > > The documentation isn't written yet because change is ongoing. Here > is a rough primer, for one or two usage cases. Mor

signed base installs

2014-01-19 Thread Theo de Raadt
I suspect only a few have noticed, so it probably should be mentioned that install/upgrades are also signed now. The documentation isn't written yet because change is ongoing. Here is a rough primer, for one or two usage cases. More install methods will work, but some are not perfect yet. As de