public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
* Re: Deprecating .gz format on kernel.org
@ 2003-03-20 21:54 Hank Leininger
  2003-03-20 22:13 ` Jörn Engel
  2003-03-20 23:50 ` H. Peter Anvin
  0 siblings, 2 replies; 65+ messages in thread
From: Hank Leininger @ 2003-03-20 21:54 UTC (permalink / raw)
  To: linux-kernel

On 2003-03-20, Joern Engel <joern () wohnheim ! fh-wedel ! de> wrote:
> On Thu, 20 March 2003 17:39:20 +0000, Jamie Lokier wrote:
> > (b) On something as large as a .tar, decompressing a bz2 file to
> > check the signature is really quite slow, compared with checking the
> > signature of the compressed file.

> That shouldn't matter, most of the times. If you want to build the
> code, you have to [bg]unzip anyway, so there is no extra cost.
> And I have a hard time to think of a real-world application where you
> don't want to unpack but need to verify the signature.

A few come to mind:
-To verify and then use a .tar.[bg]z2?, you must gpg --verify and then
  tar -x[jz]vf, but to unpack, then verify, then use you must uncompress
  to a tempfile or pipe to gpg, then verify, then untar.  Silly waste of
  CPU and/or disk space.[*]
-Verifying downloads immediately, when they won't necessarily be needed /
  used right away; no need to unpack until it's needed, but would like to
  know the download is bad right away.
-Verifying something pulled down to one machine before scp'ing it elsewhere
  where it will actually be used.
-Verifying before [bg]unzip means you won't expose [bg]unzip to likely
  malicious data (think bugs in [bg]unzip which make them crash on bad
  compressed files).  Of course GPG/PGP is still subject to input-based 
  bugs, but they are in any case; no need for the decompression tools to
  be as well.

[*] ...Now if tar had a --sig option to chain gpg between gunzip and 
    untar... but that would just be Wrong.

--
Hank Leininger <hlein@progressive-comp.com> 
  

^ permalink raw reply	[flat|nested] 65+ messages in thread
[parent not found: <200303211124.h2LBO6mU011361@sunrise.pg.gda.pl>]
[parent not found: <20030320165007$503c@gated-at.bofh.it>]
* Deprecating .gz format on kernel.org
@ 2003-03-19 20:19 H. Peter Anvin
  2003-03-19 20:39 ` wind
                   ` (10 more replies)
  0 siblings, 11 replies; 65+ messages in thread
From: H. Peter Anvin @ 2003-03-19 20:19 UTC (permalink / raw)
  To: mirrors, linux-kernel

Hello everyone,

At some point it probably would make sense to start deprecating .gz
format files from kernel.org.

I am envisioning this as a three-phase changeover:

a) Get all mirrors to carry .bz2 format.  This would affect the
following sites:

DUTH:format=gz
GARBO:format=gz
HCMC:format=gz
IGLU:format=gz
LINUXAID:format=gz
LLARIAN-NET:format=gz
MINET-FR:format=gz
NC-ORC:format=gz
PCSS:format=gz
PROGRAMVAREVERKSTEDET:format=gz
PUB-FTP-UNIVERSITY-OF-OLDENBURG:format=gz
RN-RNO:format=gz
TASK:format=gz
TELEPAC:format=gz
TENGU-EASYNET-FR:format=gz
UNC-METALAB:format=gz
WEBLAB:format=gz

b) Once that is done, change the robots to no longer require .gz files;
.bz2 files uploaded would be signed but no .gz file would be generated.

-> If we get a complete loss of data here, all .gz files would be lost.

c) At some point, deprecate .gz uploads entirely and remove all the old
.gz files.  After that point .gz files uploaded would be treated just
like .Z, .zip or any other "unmanaged" compression format.


Now, the questions that come up are:

i) Does this sound reasonable to everyone?  In particular, is there any
loss in losing the "original" compressed files?

ii) Assuming a yes on the previous question, what time frame would it
make sense for this changeover to happen over?

	-hpa


^ permalink raw reply	[flat|nested] 65+ messages in thread

end of thread, other threads:[~2003-03-26 12:50 UTC | newest]

Thread overview: 65+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-03-20 21:54 Deprecating .gz format on kernel.org Hank Leininger
2003-03-20 22:13 ` Jörn Engel
2003-03-20 23:14   ` Hank Leininger
2003-03-20 23:34     ` Jörn Engel
2003-03-21  6:26     ` Ville Herva
2003-03-21  6:38       ` Ville Herva
2003-03-21  7:26       ` Hank Leininger
2003-03-20 23:50 ` H. Peter Anvin
     [not found] <200303211124.h2LBO6mU011361@sunrise.pg.gda.pl>
2003-03-21 11:28 ` Andrzej Krzysztofowicz
2003-03-21 15:39   ` Alan Cox
2003-03-21 19:43     ` H. Peter Anvin
     [not found] <20030320165007$503c@gated-at.bofh.it>
     [not found] ` <20030320180014$0e31@gated-at.bofh.it>
     [not found]   ` <20030320182006$46bf@gated-at.bofh.it>
2003-03-20 18:44     ` Pascal Schmidt
2003-03-20 19:52       ` Pavel Machek
2003-03-23 23:30         ` Krzysztof Halasa
  -- strict thread matches above, loose matches on Subject: below --
2003-03-19 20:19 H. Peter Anvin
2003-03-19 20:39 ` wind
2003-03-19 20:46 ` Martin J. Bligh
2003-03-19 20:57 ` Mr. James W. Laferriere
2003-03-19 21:12 ` Tigran Aivazian
2003-03-19 21:42   ` Arjan van de Ven
2003-03-19 21:55     ` Arnaldo Carvalho de Melo
2003-03-19 22:06       ` Kurt Garloff
2003-03-19 23:46         ` Eric Sandall
2003-03-20  8:27           ` Thierry Vignaud
2003-03-20  8:40             ` Dagfinn Ilmari Mannsåker
2003-03-20 15:37               ` Jon Portnoy
2003-03-20  0:21   ` Jamie Lokier
2003-03-20 17:53     ` Eric Sandall
2003-03-20 17:39       ` Jamie Lokier
2003-03-20 18:31         ` Eric Sandall
2003-03-20 21:14         ` Jörn Engel
2003-03-25 15:59           ` Bill Davidsen
2003-03-26 12:57             ` Jörn Engel
2003-03-20 14:03   ` Juan Quintela
2003-03-19 21:39 ` Sam Ravnborg
2003-03-20 22:17   ` LA Walsh
2003-03-21  0:09     ` Eric Sandall
2003-03-21  4:42       ` Vlad@geekizoid.com
2003-03-21  7:24         ` Eric Sandall
2003-03-19 22:22 ` H. Peter Anvin
2003-03-20  3:56   ` Martin J. Bligh
2003-03-20  4:18     ` H. Peter Anvin
2003-03-19 22:44 ` DervishD
2003-03-20  0:02 ` David S. Miller
2003-03-20  9:55 ` John Bradford
2003-03-20 13:10   ` John Jasen
2003-03-20 13:49     ` Richard B. Johnson
2003-03-20 10:03 ` Erik Hensema
2003-03-20 16:32 ` Jan-Benedict Glaw
2003-03-20 16:42   ` Mike Dresser
2003-03-20 17:51     ` Eli Carter
2003-03-20 18:04       ` Thomas Duffy
2003-03-25 16:04         ` Bill Davidsen
2003-03-25 16:25           ` Jan-Benedict Glaw
2003-03-25 16:34           ` Stephen Frost
2003-03-20 18:10       ` Jan-Benedict Glaw
2003-03-24  2:12       ` Miles Bader
2003-03-24  2:24         ` Miles Bader
2003-03-24  2:40         ` nick
2003-03-24 11:33       ` Jan-Benedict Glaw
2003-03-20 17:23   ` Randy.Dunlap
2003-03-20 18:12     ` Jan-Benedict Glaw
2003-03-20 17:48   ` Tomas Szepe
2003-03-20 17:57     ` Dana Lacoste
2003-03-20 18:24       ` Tomas Szepe

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox