[arch-releng] [PATCH] Initialize pacman keyring on bootup

Gerardo Exequiel Pozzi vmlinuz386 at yahoo.com.ar
Sun Jun 24 14:12:16 EDT 2012


On 06/24/2012 06:22 AM, Pierre Schmitz wrote:
>>> +			stat_fail
>>> +			exit 1
>>> +		else
>>> +			add_daemon pacman-init
>>> +			stat_done
>>> +		fi
>>> +		;;
>>> +
>>> +	stop)
>>> +		stat_busy "Removing pacman keyring"
>>> +		rm -rf /etc/pacman.d/gnupg
>>> +		rm_daemon pacman-init
>>> +		stat_done
>>> +		;;
>> This just blows my mind. I realize that this script will never live
>> outside a liveCD, but why? What's the use case where youd want to
>> destroy this?
> There are no strong reasons for doing this; are there any downsides?
> Besides from symmetry reasons I wanted to "make sure" that the key wont
> get stored an a presitant device by accident (don't know if we support
> this atm). But the main reason was that you could easily recreate the
> key by running restart (e.g. when you want to user better random number
> or whatever)
>

persistent is supported via cow_label= OR cow_device= bootparms ;)

-- 
Gerardo Exequiel Pozzi
\cos^2\alpha + \sin^2\alpha = 1



More information about the arch-releng mailing list