[pkg-discuss] Re: Updated sha-2 webrev
- From: Danek Duvall <
- Subject: [pkg-discuss] Re: Updated sha-2 webrev
- Date: Thu, 3 Oct 2013 15:52:27 -0700
Tim Foster wrote:
> if we can get the publication API to optionally not add attributes when
> called via pkgrecv (I admit to not knowing how to do this yet, because it
> has to work for HTTP publication too) then the omission of pkg.filetype
> would be short-lived. We'll still need to keep the addition of 'elfbits'
> and 'elfarch' around though, to allow older versions of pkg(5) to pkgrecv
> signed packages without action modification.
I think what we want here is full manifest publication. That will mean
that it'll be up to the client to do any annotation it deems necessary.
The server (when not in-process) can check (or not, as it sees fit) to make
sure everything's correctly annotated, but shouldn't actually add anything.
It's a damned shame we didn't go in this direction to start.
> >Anyway, it looks okay to me.
> Great stuff thanks - I'll start my landing.