[repoman] transport mechanism

[Jason Chu]

On Mon, Jul 09, 2007 at 12:20:58PM -0400, Paul Mattal wrote:
> Jason Chu wrote:
> > But ssh can be run on multiple ports... even with a custom client/server
> > you'd probably still run it on multiple ports for multiple instances.
> 
> Yes, but then do you set up a separate user system? I don't want 
> everyone authenticating off one password file.

I was thinking it'd be different chroots per instance.  That way it is
different password files (repo.or.cz uses just ssh-keys, which I think
works pretty well).

> > Another common option is gpg signed emails.  To upload a package, just
> > attach it, to execute a command (move package, delete package, create repo,
> > etc) it's just a text command.  This solution also doesn't require a custom
> > client/server, only custom scripts.
> 
> Emails are often not a possible transport and usually not an 
> efficient transport for 100+MB packages, though the GPG signing idea 
> could maybe be somehow differently applied.

That's true.

If you did consider signing a valid option, then any upload method will
work.

I'm really trying to look at this in two parts, message/command passing and
package uploading.  I'm not sure if you're considering both pieces or just
one.

Jason
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://archlinux.org/pipermail/repoman/attachments/20070709/1241fb1a/attachment.bin