Week 8 Report

Hello,

This was my eight week in the GSoC for the project Gentoo-GPG. For the second half, I will be developing the new MetaManifest system that will provide an efficient and secure way to verify the integrity of Gentoo distribution.

My work for this week was to:

  • Add signature verification to my MetaManifest script using the Gkeys interface from Gentoo Keys
  • Add manifest verification that passes through all repo levels of the tree to my script.
  • Add the option for the user to verify the package manifests that include the DIST files by excluding them from the verification.
  • Made some test cases and added them to my test tree.
  • Debugged and optimized the script.

My plan for next week is to:

  • Add more test cases according to my mentors’ feedback.
  • Show my script to other Gentoo devs, as well, for more feedback.
  • Optimize, debug and fix according to the suggestions given from the above.

– aeroniero