gentoo resync : 31.01.2018

5 files changed, 67 insertions, 17 deletions

diff --git a/metadata/news/2018-01-30-portage-rsync-verification/2018-01-30-portage-rsync-verification.en.txt b/metadata/news/2018-01-30-portage-rsync-verification/2018-01-30-portage-rsync-verification.en.txt
new file mode 100644
index 000000000000..1964855e4d1a
--- /dev/null
+++ b/metadata/news/2018-01-30-portage-rsync-verification/2018-01-30-portage-rsync-verification.en.txt
@@ -0,0 +1,50 @@
+Title: Portage rsync tree verification
+Author: Michał Górny <mgorny@gentoo.org>
+Posted: 2018-01-30
+Revision: 1
+News-Item-Format: 2.0
+Display-If-Installed: sys-apps/portage
+
+Starting with sys-apps/portage-2.3.21, Portage will verify the Gentoo
+repository after rsync by default.
+
+The new verification is intended for users who are syncing via rsync.
+Users syncing via git or other methods are not affected, and complete
+verification for them will be provided in the future.
+
+The verification is implemented via app-portage/gemato. Currently,
+the whole repository is verified after syncing. On systems with slow
+hard drives, this could take around 2 minutes. If you wish to disable
+it, you can disable the 'rsync-verify' USE flag on sys-apps/portage
+or set 'sync-rsync-verify-metamanifest = no' in your repos.conf.
+
+Please note that the verification currently does not prevent Portage
+from using the repository after syncing. If 'emerge --sync' fails,
+do not install any packages and retry syncing. In case of prolonged
+or frequent verification failures, please make sure to report a bug
+including the failing mirror addresses (found in emerge.log).
+
+The verification uses information from the binary keyring provided
+by the app-crypt/gentoo-keys package. The keys are refreshed
+from the keyserver before every use in order to check for revocation.
+The post-sync verification ensures that the authenticity of the key
+package itself is verified. However, manual verification is required
+before the first use.
+
+On Gentoo installations created using installation media that included
+portage-2.3.22, the keys will already be covered by the installation
+media signatures. On existing installations, you need to manually
+compare the primary key fingerprint (reported by gemato on every sync)
+against the official Gentoo keys [1]. An example gemato output is:
+
+  INFO:root:Valid OpenPGP signature found:
+  INFO:root:- primary key: 1234567890ABCDEF1234567890ABCDEF12345678
+  INFO:root:- subkey: FEDCBA0987654321FEDCBA0987654321FEDCBA09
+
+Please note that the above snippet does not include the real key id
+on purpose. The primary key actually printed by gemato must match
+the 'Gentoo Portage Snapshot Signing Key' on the website. Please make
+sure to also check the certificate used for the secure connection
+to the site!
+
+[1]:https://www.gentoo.org/downloads/signatures/
diff --git a/metadata/news/Manifest b/metadata/news/Manifest
index c6230b7ab717..1282bacf75e6 100644
--- a/metadata/news/Manifest
+++ b/metadata/news/Manifest
@@ -1,23 +1,23 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA512
 
-MANIFEST Manifest.files.gz 19029 BLAKE2B ce06494761e0d519b11c6e90add9344a529739b54c9ed439c6eb0d3079283090966ce78b3efa765cef03592f2eaec8c4c45822e3207427dcebc59e2f0903d3f6 SHA512 8d6322320c30905299bf49afe5ddebe7341c62d7ac02b6106a345e4a6a33d933c49dd510b54c28fe6aa6d79991d2e352cd49e7bf4ed3e8baa812bdd04b33f2bf
-TIMESTAMP 2018-01-27T17:08:31Z
+MANIFEST Manifest.files.gz 19210 BLAKE2B ef1f48dd093e1998551b0b59e75894e45eb7ca46c1a209056e180347c77c96964d5ad0ad9fb97af17a3dc4b5e22e7a68a01179290c2f353189c8e372de002ca6 SHA512 c6dea10b94a1651479a6ecf044fbeebd1514365c2d442a51f76fbb3537f37b434ac895c1042ca2d48fa1ef69ea3a2d992f9142e08c893c09c4c4157458ca9547
+TIMESTAMP 2018-01-31T19:38:17Z
 -----BEGIN PGP SIGNATURE-----
 
-iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlpssg9fFIAAAAAALgAo
+iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAlpyGylfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx
 RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY
-klANBhAApPRLOAQMhmFCU0RaaIxdGSBOUmBeOPFbXp7795rNbJM41pm+ybauJ5IL
-jztaj1VNkwY1dJCDiCND2l8OFzbR5EyebPf+6OXx6sv8xx9dLSZfTBDH4YmFUq1o
-Slka69XvionvoJSbIAdr2kbKHZaNKWZg2V0yB7A6Im2tQzZrl/UGByRUqchubF9F
-AGiMexjZ6/vjvvUnuUoajWqOyHn/zrTuWTeiOvYve/vCwSrAVgRNIum6k7pHlqeL
-XNkRoeueV43ir2A49gwYfJLjtKztu++qjj8Qfs8cRYi1S277E26xy11nZo0l9pV0
-uqIskTrI3zXDZYQPl80kXMsE4Gt8tyHeIi7XP2yyvA3iQoJlND6hI/BsU8Px7KZ0
-ifbQoPwxCU4PD0oST/BwrPtf1FXg8KcUiZymGvzsUUm1/F+7k+QeIckj1t4JM3bG
-1TLGQeGYQF1MVbc4eA0X0EjnRGZoPNuaE/rSlvrJAbvBtT2ZGlecvVEjwXwhnofF
-zZE8P40uSwJgiKwRv+s1dxTcLUyK6KLHL2Wf/Bkq5EPJn/XsO0BRZCZyIjS8U3Mg
-/StMb4ZpxPYIYtO3vSased7gajbB6U/6SUDmHBOj+w0kVnswUPzist6DJf3tBYZQ
-4Qq8cAMKTdxofaYrc0SCqpdhL97/Sl6t5pzbxL0GpIrapCFmgrg=
-=QIOB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+=pabT
 -----END PGP SIGNATURE-----
diff --git a/metadata/news/Manifest.files.gz b/metadata/news/Manifest.files.gz
index 33e3bcf4edc1..8ec9f7333c8e 100644
--- a/metadata/news/Manifest.files.gz
+++ b/metadata/news/Manifest.files.gz
diff --git a/metadata/news/timestamp.chk b/metadata/news/timestamp.chk
index d12dcf7f326f..e66e26e2a913 100644
--- a/metadata/news/timestamp.chk
+++ b/metadata/news/timestamp.chk
@@ -1 +1 @@
-Sat, 27 Jan 2018 17:08:28 +0000
+Wed, 31 Jan 2018 19:38:13 +0000
diff --git a/metadata/news/timestamp.commit b/metadata/news/timestamp.commit
index 506d9dbc3c68..6f63d3271d41 100644
--- a/metadata/news/timestamp.commit
+++ b/metadata/news/timestamp.commit
@@ -1 +1 @@
-00797101a9f1a77aab802fde89ea51b3f169553d 1516816604 2018-01-24T17:56:44+00:00
+74c7e9808df77096ca393871e88a4991978c4786 1517298256 2018-01-30T07:44:16+00:00