On Tue, Mar 11, 2008 at 11:31:25AM +0000, Benji Weber wrote:
Greetings All,
I recently noticed that an Ubuntu specification ThirdPartyApt[0] very similar to YMP[1].
I have since contacted the specification authors - Jerome Haltom and Scott Ritchie to enquire about the possibility of cooperating and using the same file format. Both were been interested in this possibility. Hopefully they will be subscribed to this list now.
That is great!
[... OK ...]
There is also the question of how to distribute the public key for a debian repository. As I understand it debian repositories do not normally contain the public key as in most openSUSE repositories[5]. The .apt format proposal has the public key included in the file. This is one possibility, although in my opinion it would be better to have it available in the repositories like openSUSE, this would allow other mechanisms for adding the repository to locate the key as well. Bear in mind that one of the requirements is to keep the file format as simple as possible, the less information that is mandatory in the file the better.
<repository> ... <pubkey href="http://example.com/p.key"/> or <pubkey> -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.2.2 (GNU/Linux) mQGiBD/G9AgRBACZ519LX9cdoyJA+7gmWC+mUsiyPhnmMWu4uOg0M+vb/JPtDdfc ... </pubkey> or, if not specified, it defaults to the usual suse location, for backwards compatibility. </repository> Well, reagrding signing the YMPs themselves, we may have a clash between GPG and XML, I don't know how to resolve that. -- Martin Vidner, YaST developer http://en.opensuse.org/User:Mvidner Kuracke oddeleni v restauraci je jako fekalni oddeleni v bazenu -- To unsubscribe, e-mail: opensuse-softwaremgmt+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-softwaremgmt+help@opensuse.org