From 85a73dc3cbd27cd754394a2c537b032dc0b93b18 Mon Sep 17 00:00:00 2001 From: Patrick McDermott Date: Tue, 02 Apr 2019 14:59:57 -0400 Subject: dev/archive/signing: opkg can now verify package feeds --- (limited to 'dev/archive/signing.mdwn') diff --git a/dev/archive/signing.mdwn b/dev/archive/signing.mdwn index ac512b9..43904bc 100644 --- a/dev/archive/signing.mdwn +++ b/dev/archive/signing.mdwn @@ -63,19 +63,9 @@ Suggestions welcome. Opkg ---- -The opkg package manager supports verifying package feeds. This feature -requires linking against the [GnuPG Made Easy (GPGME) library][gpgme]. - -GPGME and its dependencies are now packaged in ProteanOS, so opkg can be built -with package feed verification. This feature should be optional. The `opkg` -source package should have two builds, with and without verification enabled. -This will probably mean generating new binary packages `opkg-gpg` and -`libopkg.1-gpg` (which will conflict with `opkg` and `libopkg.1` respectively) -and installing data files into binary package directories without the aid of -`oh-installfiles`. Although, option 1 of the [[static_libopkg|pkg/opkg/static]] -plan would simplify this by getting rid of the `libopkg.1` and `libopkg.1-dev` -packages altogether. The `opkg` source package could then build just `opkg`, -`opkg-gpg`, `opkg-dbg`, and `opkg-doc` binary packages. +The opkg source package now builds opkg-gpg and opkg binary packages with and +without support for package feed verification using the [GnuPG Made Easy (GPGME) +library][gpgme] and its dependencies. Archive Keyring --------------- -- cgit v0.9.1