Re: apt-cacher in main + apt-zeroconf

2007-11-16 Thread Sam Tygier
Fabian Rodriguez wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: RIPEMD160 > > Sam Tygier wrote: >> it looks like they have got the security side covered. >> >> "Now, one might think this could potentially pose a security threat >> as everyone can offer and distribute debs without any >> auth

Re: apt-cacher in main + apt-zeroconf

2007-11-16 Thread Kevin Fries
There is another problem with apt-zeroconf... it relies on Avahi. Avahi has lots of environments that it does not work in. In my office, the machines are not seeing each other. When we had a meeting at the Google (Sketchup) offices in Boulder, Avahi did not work correctly their either. I don't

Re: apt-cacher in main + apt-zeroconf

2007-11-15 Thread Matt Zimmerman
On Thu, Nov 15, 2007 at 12:53:14PM -0500, Fabian Rodriguez wrote: > If this was actually checked against a local web of trust (like > OpenPGP or Gaim-OTR keys or else) it may become interesting. But who > uses that "safely" ? :) All packages downloaded by APT are authenticated using PGP keys provi

Re: apt-cacher in main + apt-zeroconf

2007-11-15 Thread Sam Tygier
Fabian Rodriguez wrote: > apt-zeroconf is actually a replacement for apt-cacher, not a > complement to it, according to its site. I think we already know the > answer to "enabled by default" autodiscovery / other networking > services. I would have some trust issues using apt-zeroconf, but > that's

Re: apt-cacher in main + apt-zeroconf

2007-11-15 Thread Fabian Rodriguez
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Sam Tygier wrote: > it looks like they have got the security side covered. > > "Now, one might think this could potentially pose a security threat > as everyone can offer and distribute debs without any > authentication whatsoever. This is not th

Re: apt-cacher in main + apt-zeroconf

2007-11-15 Thread Fabian Rodriguez
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Sam Tygier wrote: > > could apt-zeroconf[0] be installed and enabled by default. > > "distributed apt-cacher for local networks implemented in Python. > It's called apt-zeroconf since we use avahi for automatically > finding other apt-zeroconf ins

Re: apt-cacher in main + apt-zeroconf

2007-11-15 Thread Sam Tygier
Kevin Fries wrote: > I am not sure it needs to be moved. But, what would be totally cool is > if the installer scanned the local network on install and configured > apt-cacher in sources.list instead of the normal repos by default when > if finds a server. That would be a terrific usability upgrad