Re: [tor-dev] TBB Gentoo ebuild

2012-08-27 Thread julian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/27/2012 08:26 PM, Matthew Finkel wrote: > > Ah, I apologize, I thought having optional runtime deps were > possible. I also agree that is should be obvious but I've learned > to err on the side of caution, if possible. Optional runtime-ONLY dep

Re: [tor-dev] TBB Gentoo ebuild

2012-08-27 Thread Matthew Finkel
On Sun, Aug 26, 2012 at 5:35 PM, julian wrote: > 13 Aug 00:28 Matthew Finkel: >> 4) Given 3), is there a reason Tor is not at least an optional >> RDEPEND for torbrowser via a USE flag (or another way)? > > There are no optional runtime-only dependencies in gentoo, this could > change with GLEP 6

Re: [tor-dev] TBB Gentoo ebuild

2012-08-27 Thread Mansour Moufid
On 2012-08-26, at 5:35 PM, julian wrote: > 12 Aug 22:56 Mansour Moufid: >> Even with webrsync you still have to trust the mirror(s), and then >> the Gentoo release infrastructure... > > Forgive me my bluntness, but how is that different from trusting you? I have nothing to do with Tor. > And th

Re: [tor-dev] TBB Gentoo ebuild

2012-08-26 Thread julian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 12 Aug 22:56 Mansour Moufid: > Even with webrsync you still have to trust the mirror(s), and then > the Gentoo release infrastructure... Forgive me my bluntness, but how is that different from trusting you? The methods are reliable, being Manifests a

Re: [tor-dev] TBB Gentoo ebuild

2012-08-14 Thread Alessandro Di Federico
On Sun, 2012-08-12 at 18:28 -0400, Matthew Finkel wrote: > After thinking about this for a little bit, here's my 2 cents. =) > > 1) The ebuild is specifically for building the Tor browser, not the > bundle. The package name of the ebuild states this but the email > mentions the bundle. You're ri

Re: [tor-dev] TBB Gentoo ebuild

2012-08-12 Thread Matthew Finkel
On Sun, Aug 12, 2012 at 1:21 PM, Alessandro Di Federico wrote: > Hi, I'm trying to put up an ebuild for the Tor Browser Bundle for > Gentoo. As you may know an ebuild is a script which automates the build > of a certain application. We already have something in Portage [2] (the > official ebuild

Re: [tor-dev] TBB Gentoo ebuild

2012-08-12 Thread Mansour Moufid
On 2012-08-12, at 3:36 PM, Alessandro Di Federico wrote: > On Sun, 2012-08-12 at 15:11 -0400, Mansour Moufid wrote: >> Portage offers no authentication and no confidentiality. > > Each file has a SHA-256, SHA-512 and Whirlpool hash associated. This > hashes are in Portage, and if you're a securit

Re: [tor-dev] TBB Gentoo ebuild

2012-08-12 Thread Alessandro Di Federico
On Sun, 2012-08-12 at 15:11 -0400, Mansour Moufid wrote: > Portage offers no authentication and no confidentiality. Each file has a SHA-256, SHA-512 and Whirlpool hash associated. This hashes are in Portage, and if you're a security-aware user (as most of Gentoo users are) you can get it in a secu

Re: [tor-dev] TBB Gentoo ebuild

2012-08-12 Thread Mansour Moufid
On 2012-08-12, at 1:21 PM, Alessandro Di Federico wrote: > Hi, I'm trying to put up an ebuild for the Tor Browser Bundle for > Gentoo. As you may know an ebuild is a script which automates the build > of a certain application. We already have something in Portage [2] (the > official ebuild reposit

[tor-dev] TBB Gentoo ebuild

2012-08-12 Thread Alessandro Di Federico
Hi, I'm trying to put up an ebuild for the Tor Browser Bundle for Gentoo. As you may know an ebuild is a script which automates the build of a certain application. We already have something in Portage [2] (the official ebuild repository) but it's in an experimental state and we want to make sure th