* Amarildo Santini Júnior schrieb am 11.06.15 um 01:16 Uhr:
Hello,I am Amarildo, from Brazil. I'm a long-timer Linux user, I use Arch Linux and Debian at the moment. However, both them are disappointing me in regards to the AMD video drivers, so I'll have to move to another distro soon because I need good drivers to work with 3D modeling and GPU rendering in Blender. I love openSUSE, it has an amazing KDE integration and AMD support, but I never used it much because I don't trust it's 3rd party repositories. I don't mean to offend you guys in any way, shape or form, it's just that I don't know who's behind Packman, I don't know if there are security audits on the packages you build, and because of that I never really used openSUSE that much, even though it would be easily on my Top list of Linux distros. I think overall your packages are high quality and I really would like to use your repositories, but I'm (literally) paranoid and if I don't see a good reason to trust your packages I might have to back to Windows, and I was hoping you guys could help me out on this one.
Where does trust start? Do you trust a company more than some random users?
All *I* can say about this in regards to packman is that it was only me for about 16 years now hosting the main repo.
I care about security a lot. Packman main repo runs on a hardened linux system.
You can check integrity of the packages which are signes using the official packman gpg key.
The rest is trust indeed.
-Marc
--
0x35A64134 - 8AAC 5F46 83B4 DB70 8317
3723 296C 6CCA 35A6 4134
signature.asc
Description: Digital signature
_______________________________________________ Packman mailing list Packman@links2linux.de http://lists.links2linux.de/cgi-bin/mailman/listinfo/packman
