[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: FSVS and versioning /etc



Philipp Marek wrote:
> * Some files have a commit-pipe defined, so that eg. the passwords get
>   stripped out of the shadow files.
>   In case of a restore all passwords have to be set afresh.
> * For a few files that include passwords (like ddclient) there are
>   already filters.

Is there some insecurity in how the data is stored that makes stripping
passwords on an ad-hoc basis like thia a good idea?

> * Currently I use the apt option Dpkg::Post-Invoke to commit, although
>   some anacron-job once a day or week might be good.

If it has to manually commit, I don't see the point -- already wrote
etckeeper. :-) I'd think that the benefit of a versioned filesystem
would be that you don't have to manually commit changes.

>   Another idea might be to commit a new version only once per apt-get run.

That's what etckeeper does.

> * Needed space for the repository is on my system (with 1853 installed 
>   packages) about 12MB for the initial import; the few changes up to now
>   take no space (10 to 30kB).

git takes about 2.5 mb to version my 16 mb /etc (161 revisions so far).

-- 
see shy jo

Attachment: signature.asc
Description: Digital signature


Reply to: