Job Snijders <[email protected]> wrote: > On Wed, Sep 01, 2021 at 11:14:15AM +0200, Claudio Jeker wrote: > > On Tue, Aug 31, 2021 at 02:23:57PM +0200, Claudio Jeker wrote: > > > RPKI repository can only include a few specific files, everything else is > > > just ignored and deleted after every fetch. Since openrsync supports > > > --exclude-file now we can use this to limit what is actually accepted by > > > the client. > > > > > > I used a config file in /etc/rpki instead of using multiple --exclude / > > > --include arguments. Mostly to keep the execvp argv short. > > > > > > What you think? > > > > It seems using a config file to keep the argv list short is too > > controversial and all alternate suggestions are worse. > > So just add the include/exclude list as arguments. > > Looks good. > > $ ps axuwww | fgrep rsync > _rpki-cl 85084 0.0 0.0 816 1500 p4 S+pU 10:51AM 0:00.01 > rpki-client: rsync (rpki-client) > _rpki-cl 5288 0.8 0.1 16228 17576 p4 R+pU/1 10:52AM 0:06.85 openrsync > -rt --no-motd --timeout=180 --include=* --include=*.cer --include=*.crl > --include=*.gbr --include=*.mft --include=*.roa --exclude=* > rsync://rpki.arin.net/repository rsync/rpki.arin.net/repository
wwwwwwwww
