On Mon, Apr 15, 2013 at 11:15 AM, Ismail Doenmez wrote:

On 15-04-2013 16:14, Claudio Freire wrote:

...

On Mon, Apr 15, 2013 at 10:00 AM, Richard Biener wrote:

...

On Mon, 15 Apr 2013, Ismail Doenmez wrote:

...

State of submit-request #164046 was changed by namtrac:

new -> accepted

This should have been declined. It increases the size of the bootstrap cycle and it's dependencies. GCC depends on ppl.

Thus it will break Base:build even more.

Isn't signature verification especially desirable on such core tools then?

Not if it creates a build loop, thats why I reverted the GPG part of the commit.

But since GCC already has loops, and signature verification doesn't seem likely to alter the binary result, shouldn't it settle as fast as it did before? Was it given a chance? -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org

On 15-04-2013 16:26, Marcus Meissner wrote:

On Mon, Apr 15, 2013 at 04:15:36PM +0200, Ismail Doenmez wrote:

...

On 15-04-2013 16:14, Claudio Freire wrote:

...

On Mon, Apr 15, 2013 at 10:00 AM, Richard Biener wrote:

...

On Mon, 15 Apr 2013, Ismail Doenmez wrote:

...

State of submit-request #164046 was changed by namtrac:

new -> accepted

This should have been declined. It increases the size of the bootstrap cycle and it's dependencies. GCC depends on ppl.

Thus it will break Base:build even more.

Isn't signature verification especially desirable on such core tools then?

Not if it creates a build loop, thats why I reverted the GPG part of the commit.

If you do, please however leave the .sig and the keyring file in.

Just comment out the gpg-offline stuff.

I commented out. -- SUSE LINUX Products GmbH Maxfeldstr. 5, 90409 Nürnberg, Germany GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org

Am 15.04.2013 16:50, schrieb Richard Biener:

On Mon, 15 Apr 2013, Claudio Freire wrote:

...

On Mon, Apr 15, 2013 at 10:00 AM, Richard Biener wrote:

...

On Mon, 15 Apr 2013, Ismail Doenmez wrote:

...

State of submit-request #164046 was changed by namtrac:

new -> accepted

This should have been declined. It increases the size of the bootstrap cycle and it's dependencies. GCC depends on ppl.

Thus it will break Base:build even more.

Isn't signature verification especially desirable on such core tools then?

Well. Just don't get the tarball by downloading it again and again but verify it at the time it is downloaded and cached. Like it worked (?) with source services.

I think this should be the general goal. Don't call gpg-offline during build, but add it to the source validator based on some magic string in the spec file. The build cycle in factory is *HUGE* due to gpg calling. Greetings, Stephan -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org