Hello,
This was my eight week in the GSoC for the project Gentoo-GPG. For the second half, I will be developing the new MetaManifest system that will provide an efficient and secure way to verify the integrity of Gentoo distribution.
My work for this week was to:
- Add signature verification to my MetaManifest script using the Gkeys interface from Gentoo Keys
- Add manifest verification that passes through all repo levels of the tree to my script.
- Add the option for the user to verify the package manifests that include the DIST files by excluding them from the verification.
- Made some test cases and added them to my test tree.
- Debugged and optimized the script.
My plan for next week is to:
- Add more test cases according to my mentors’ feedback.
- Show my script to other Gentoo devs, as well, for more feedback.
- Optimize, debug and fix according to the suggestions given from the above.
– aeroniero