From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6740510031426355200 X-Received: by 2002:a05:600c:2059:: with SMTP id p25mr7136728wmg.50.1569407169994; Wed, 25 Sep 2019 03:26:09 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a5d:6889:: with SMTP id h9ls1986433wru.13.gmail; Wed, 25 Sep 2019 03:26:09 -0700 (PDT) X-Google-Smtp-Source: APXvYqzfMsfYRHloHhPWVHxBspfRtiY5JBA9RuYhCwws38V6aH7jAfb83syX4YZZ3zEpWGIz2hMr X-Received: by 2002:adf:cc87:: with SMTP id p7mr8522911wrj.43.1569407169570; Wed, 25 Sep 2019 03:26:09 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1569407169; cv=none; d=google.com; s=arc-20160816; b=u/WAHUtYsWKLbSoYDrBqXGkdehGqGmzmfZsH6lga2OTU+vW0wnA4FZxY3WQ2x7+zMO DhV3M08Jc49xms4gP9hYW4R6lEc6Jw/yDxrjH0++eDxGSwUTF1b1On4MovT/+woBDUTA 8R2FJCj98XcKGZTCXnECpUkzSQRCIx3ZlznVQcIsfnC9BS5eOgwjGMkzgpXA4FU2PiYD 6p3Ltec5BH6nm8e8iDOjo8OysvLQxKD0syemDMa+HGNizwrEJ6fVGXfKOwl+CCxBsoER l2sm9kbTxsagiyLcZD4kCoJkz+4Lq5U7UHZcSQrQfsBtGsPUw551z2J7hagy5dTxrH2X k9ew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=user-agent:in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:to:from:date; bh=qngQEjvsZUOy2Y3CQRJnPkz9E4p8o/2zSmnqFN0cr9w=; b=HYrEWQ1GE+R+5+E/ihYfb/+H0QUwaDm83UX/0cyfItbSEk137PD9d6pI8lwPE2yveq R8yIX2jWtAQPHEn686fs4g77PSJ6jOG0Nfaz3YWqqdexWqek7QxXje3O7W2ryquBSZ05 OIjYE2Zk3mb19RO5vprE62X5eUs2k5wpIjzu9kXBOyP70Pb9g/0c52DbMktyrhMioRqL MVyp6PdRSwmKYusl/5XMqog89bkzC8UvlEYtDFO+fHXlR7m8zKVJaFDy68WHYIQp49vT dKNpJ+C5jf/nJpwwu/XzNgjbmSTP4OX1BwcuVyWrlY7gBp0CPyAGLROSUu94MEXtdH2t rkdw== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Return-Path: Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id n16si222539wrs.4.2019.09.25.03.26.09 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 25 Sep 2019 03:26:09 -0700 (PDT) Received-SPF: neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) client-ip=85.214.156.166; Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Received: from yssyq.m.ilbers.de (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8) with ESMTPSA id x8PAQ713015547 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 25 Sep 2019 12:26:08 +0200 Date: Wed, 25 Sep 2019 12:26:07 +0200 From: Baurzhan Ismagulov To: isar-users@googlegroups.com Subject: Re: Discussion: Base-apt features Message-ID: <20190925102607.cpvf6wurb4orwigx@yssyq.m.ilbers.de> Mail-Followup-To: isar-users@googlegroups.com References: <20190925074122.GA12490@lightning> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: NeoMutt/20180716 X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: +Ybd4+06V3sY Hello Claudius, On Wed, Sep 25, 2019 at 12:14:19PM +0200, Claudius Heine wrote: > > 2. Support for using password protected keys. > > There are two use-cases for base-apt AFAIK: Use it to distribute a > repository to the end user and for reproducible/offline build. > > I agree that for the former having a password protected key for signing > the repo would be good. For the latter use-case though that might get > cumbersome. > > Maybe we should split this use-case and have something different for > reproducible/offline build? This is my understanding. I see all of the following as required: 1. Unsgined base-apt 2. Signed base-apt w/o passphrase 3. Signed base-apt w/passphrase > Also 'base-apt' is a bad name... Like with isar-apt, it was difficult to find a short and intuitive one. Do you have a suggestion? > > 4. Support for adding packages only to base-apt. > > If the base-apt should be used for distributing packages to the > end-user, it might also be useful to exclude certain packages. Could you give an example? After that is a copy of Debian, what is your concern? With kind regards, Baurzhan.