[mirror-admin] Seeding newkeys with old content?

[Jan ONDREJ (SAL)]

On Sun, Sep 07, 2008 at 08:42:55AM +0300, Oron Peled wrote:
> On Saturday, 6 בSeptember 2008, Matt Domsch wrote:
> > On Sat, Sep 06, 2008 at 02:39:59PM -0400, Chuck Anderson wrote:
> > > ... I think it is about time we need a mirror-client-side toolset
> > > that can automate some of these tasks.  I envision a system where
> > > the first step of a sync process downloads a pre-sync script from
> > > the master that handles these tasks. 
> > > ...
> > 
> > Nothing would please me more than to have someone from this great
> > mirror community write such. :-)
> 
> Two notes:
>  1. Some mirrors may not run Fedora (we currently have a Debian one).

I think it's not very hard to write an simple script, which can help most of
people. Specially python scripts are very compatible.

>  2. While many systems may be willing to host our mirrors, I think many
>     would decline the pleasure of running scripts downloaded from the
>     Web (even over https).
>     [imagine the effects of compromising this script by someone...]

Matt, can you add some gpg signatures to report_mirror script?
If yes, I can add "git getch", some gpg checks and then run report_mirror
repeatedly from my mirror scripts.
May be other users will trust you, but don't trust unsigned content from
internet.

		SAL

--