[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Alternative plan for DDP

On Fri, Feb 06, 2004 at 10:58:03PM +0100, Osamu Aoki wrote:
> > Proposal:
> > 
> > A nice script could be written to checksum scripts and create a
> > signable list of trustable scripts on alioth. 
> I thought about this route.  But where and what permission to use to
> store them.  And where you keep these scripts.  If these script are to
> be kept in the CVS archive, this should be a group/project with 
> fewer member.

Ownership of the list is not essential. Proper signing is a requirement to
consider the list trustable. And the two scripts will be subject
to changes rarely.

> > Then, another script on gluck could import only  files in that list
> > after proper checking.  One of the PMs could so sign the list when all
> > its files had been checked.  This could ensure that only coherent and
> > trustable scripts are used on gluck, and could avoid error-prone
> > human-based copies.
> If you can make simple and clean script to all these without any
> compication, that will be nice.  But until then, 2 CVSROOT is the only
> simple and sure solution.  I am open for this fancy scheme if I see the
> working solution.

I'll see what I can do about that. 

Francesco P. Lovergine

Reply to: