diff options
| -rw-r--r-- | dev/archive/signing.mdwn | 56 |
1 files changed, 1 insertions, 55 deletions
diff --git a/dev/archive/signing.mdwn b/dev/archive/signing.mdwn index fb9f18b..ac512b9 100644 --- a/dev/archive/signing.mdwn +++ b/dev/archive/signing.mdwn @@ -66,14 +66,7 @@ Opkg The opkg package manager supports verifying package feeds. This feature requires linking against the [GnuPG Made Easy (GPGME) library][gpgme]. -ProteanOS packages for GPGME and its dependencies need to be prepared and -uploaded. gpgme depends on libgpg-error (packaged and uploaded) and libassuan. -Its testsuite depends on gnupg. gnupg in turn depends on libgpg-error, -libgcrypt, libassuan, libksba, and npth. libgcrypt depends on libgpg-error. -Below is a DOT-language digraph representation of these dependencies that can be -rendered with Graphviz. - -Once gpgme and its dependencies are packaged in ProteanOS, opkg can be built +GPGME and its dependencies are now packaged in ProteanOS, so opkg can be built with package feed verification. This feature should be optional. The `opkg` source package should have two builds, with and without verification enabled. This will probably mean generating new binary packages `opkg-gpg` and @@ -92,51 +85,4 @@ Key transitions, expiration changes, and revocations will be performed by revisions to this package. It should possibly be upgraded automatically to ensure that installed systems always have up-to-date keys. - -GPGME Dependencies -================== - -As noted above, gpgme depends on various packages. (**These are now all in -ProteanOS.**) Following is the DOT-language dependency graph (which can be -rendered as a PNG image with the command pipeline in the header comment, if -saved as `gpgme.dot`): - - /* - * Dependencies of GPGME - * - * Render by running: - * ccomps -x gpgme.dot | dot | gvpack | neato -n2 -Tpng -ogpgme.png - */ - - digraph deps { - graph [fontname="FreeSans"]; - node [fontname="FreeSans"]; - edge [fontname="FreeSans"]; - - subgraph cluster_gpgme { - style = filled; - color = "#0093dd"; - node [style=filled]; - label = "gpgme"; - - "gpgme" [color=green]; - "libgpg-error" [color=green]; - "libassuan" [color=green]; - "gnupg" [color=green]; - "libgcrypt" [color=green]; - "libksba" [color=green]; - "npth" [color=green]; - } - - "gpgme" -> "libgpg-error"; - "gpgme" -> "libassuan"; - "gpgme" -> "gnupg" [color=gray,label="testsuite"]; - "gnupg" -> "libgpg-error"; - "gnupg" -> "libgcrypt"; - "gnupg" -> "libassuan"; - "gnupg" -> "libksba"; - "gnupg" -> "npth"; - "libgcrypt" -> "libgpg-error"; - } - [gpgme]: https://www.gnupg.org/software/gpgme/index.html |