summaryrefslogtreecommitdiffstats
path: root/dev/archive
diff options
context:
space:
mode:
authorPatrick McDermott <pehjota>2019-04-02 00:11:53 (EDT)
committer Patrick McDermott <pehjota>2019-04-02 00:11:53 (EDT)
commit1741fba821b403834306df5d6c2599d1184a8bbd (patch)
treeaf8eda520c8453a47c58d8123c2107e4628c620b /dev/archive
parentb6391ee634ea986ba8620888d998ed24b31f67fc (diff)
dev/archive/signing: Drop GPGME deps analysis
Diffstat (limited to 'dev/archive')
-rw-r--r--dev/archive/signing.mdwn56
1 files changed, 1 insertions, 55 deletions
diff --git a/dev/archive/signing.mdwn b/dev/archive/signing.mdwn
index fb9f18b..ac512b9 100644
--- a/dev/archive/signing.mdwn
+++ b/dev/archive/signing.mdwn
@@ -66,14 +66,7 @@ Opkg
The opkg package manager supports verifying package feeds. This feature
requires linking against the [GnuPG Made Easy (GPGME) library][gpgme].
-ProteanOS packages for GPGME and its dependencies need to be prepared and
-uploaded. gpgme depends on libgpg-error (packaged and uploaded) and libassuan.
-Its testsuite depends on gnupg. gnupg in turn depends on libgpg-error,
-libgcrypt, libassuan, libksba, and npth. libgcrypt depends on libgpg-error.
-Below is a DOT-language digraph representation of these dependencies that can be
-rendered with Graphviz.
-
-Once gpgme and its dependencies are packaged in ProteanOS, opkg can be built
+GPGME and its dependencies are now packaged in ProteanOS, so opkg can be built
with package feed verification. This feature should be optional. The `opkg`
source package should have two builds, with and without verification enabled.
This will probably mean generating new binary packages `opkg-gpg` and
@@ -92,51 +85,4 @@ Key transitions, expiration changes, and revocations will be performed by
revisions to this package. It should possibly be upgraded automatically to
ensure that installed systems always have up-to-date keys.
-
-GPGME Dependencies
-==================
-
-As noted above, gpgme depends on various packages. (**These are now all in
-ProteanOS.**) Following is the DOT-language dependency graph (which can be
-rendered as a PNG image with the command pipeline in the header comment, if
-saved as `gpgme.dot`):
-
- /*
- * Dependencies of GPGME
- *
- * Render by running:
- * ccomps -x gpgme.dot | dot | gvpack | neato -n2 -Tpng -ogpgme.png
- */
-
- digraph deps {
- graph [fontname="FreeSans"];
- node [fontname="FreeSans"];
- edge [fontname="FreeSans"];
-
- subgraph cluster_gpgme {
- style = filled;
- color = "#0093dd";
- node [style=filled];
- label = "gpgme";
-
- "gpgme" [color=green];
- "libgpg-error" [color=green];
- "libassuan" [color=green];
- "gnupg" [color=green];
- "libgcrypt" [color=green];
- "libksba" [color=green];
- "npth" [color=green];
- }
-
- "gpgme" -> "libgpg-error";
- "gpgme" -> "libassuan";
- "gpgme" -> "gnupg" [color=gray,label="testsuite"];
- "gnupg" -> "libgpg-error";
- "gnupg" -> "libgcrypt";
- "gnupg" -> "libassuan";
- "gnupg" -> "libksba";
- "gnupg" -> "npth";
- "libgcrypt" -> "libgpg-error";
- }
-
[gpgme]: https://www.gnupg.org/software/gpgme/index.html