Am 15.04.2013 16:50, schrieb Richard Biener:
On Mon, 15 Apr 2013, Claudio Freire wrote:
On Mon, Apr 15, 2013 at 10:00 AM, Richard Biener
wrote: On Mon, 15 Apr 2013, Ismail Doenmez wrote:
State of submit-request #164046 was changed by namtrac:
new -> accepted
This should have been declined. It increases the size of the bootstrap cycle and it's dependencies. GCC depends on ppl.
Thus it will break Base:build even more.
Isn't signature verification especially desirable on such core tools then?
Well. Just don't get the tarball by downloading it again and again but verify it at the time it is downloaded and cached. Like it worked (?) with source services.
I think this should be the general goal. Don't call gpg-offline during build, but add it to the source validator based on some magic string in the spec file. The build cycle in factory is *HUGE* due to gpg calling. Greetings, Stephan -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org