[arch-general] Kernel source URL change
jonathon at manjaro.org
Wed Aug 8 16:09:30 UTC 2018
On 08/08/18 12:43, Geo Kozey via arch-general wrote:
> This can impose security risks on Arch as we now have to
> trust their github infra rather than kernel.org (we all know what happened to gentoo recently)
Just to provide some perspective, kernel.org itself had a major issue a
few years back . kernel.org was down for several weeks after
that incident, and IIRC this prompted them to start using GitHub (at
least as a mirror; my memory is fuzzy as I wasn't paying all that much
attention to that sort of thing seven years ago).
If you don't trust the Arch-run/administered infrastructure you can't
really trust any of the packages in the repos either.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the arch-general