Gluster users - Oct 2019 - rsa.pub at https://download.gluster.org/pub/gluster/glusterfs/LATEST/?

Adding rsa.pub at
https://download.gluster.org/pub/gluster/glusterfs/LATEST/rsa.pub would
allow bootstrapping Debian servers with the following repo/key:

deb
https://download.gluster.org/pub/gluster/glusterfs/LATEST/Debian/${RELEASE}/amd64/apt
${RELEASE} main
https://download.gluster.org/pub/gluster/glusterfs/LATEST/rsa.pub

In other words, only LATEST would have to be referenced instead of LATEST
and some specific version for the key.

As an example of why this is useful, Gluster 7 has been released since my
original mail, so now the key for LATEST is at
https://download.gluster.org/pub/gluster/glusterfs/7/rsa.pub instead of
https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub. Every time a
new verison of Gluster is released the recipe for installing the latest
Gluster client has to be updated.



On Mon, Sep 9, 2019 at 11:42 PM Kaleb Keithley <kkeithle at redhat.com>
wrote:
> Hi,
>
> What is the issue that this would solve?
>
> The Debian README.txt files and RPM repo files for 6.x all say the rsa.pub
> is at https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub and
> have since day one.
>
> (Likewise the rsa.pub for 5.x is at
> https://download.gluster.org/pub/gluster/glusterfs/5/rsa.pub)
> <https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub>
>
>
> On Mon, Sep 9, 2019 at 10:29 PM Shane St Savage <
> shane at axiomdatascience.com> wrote:
>
>> Hello,
>>
>> Any chance of getting an rsa.pub available in
>>
>> https://download.gluster.org/pub/gluster/glusterfs/LATEST/
>>
>> at
>>
>> https://download.gluster.org/pub/gluster/glusterfs/LATEST/rsa.pub
>>
>> ?
>>
>> (in this case, it should be
>> https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub).
>>
>> Thanks,
>> Shane
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.gluster.org/pipermail/gluster-users/attachments/20191028/66fe1fcb/attachment.html>

On Mon, Oct 28, 2019 at 1:03 PM Shane St Savage <shane at
axiomdatascience.com>
wrote:
> Adding rsa.pub at
> https://download.gluster.org/pub/gluster/glusterfs/LATEST/rsa.pub would
> allow bootstrapping Debian servers with the following repo/key:
>
> deb
>
https://download.gluster.org/pub/gluster/glusterfs/LATEST/Debian/${RELEASE}/amd64/apt
> ${RELEASE} main
> https://download.gluster.org/pub/gluster/glusterfs/LATEST/rsa.pub
>
> In other words, only LATEST would have to be referenced instead of LATEST
> and some specific version for the key.
>
I'm not a Debian packaging expert. (Even if sometimes I play one on TV.)
Why is this preferable to what's in the README.txt (i.e. "wget -O -
https://download.gluster.org/pub/gluster/glusterfs/5/rsa.pub | apt-key add
-") ?

You import the key once, and it works for every update after that? That's
what Louis Zuckerman (a.k.a. semiosis), the original gluster debian
packager suggested. I don't know enough to know why your deb cmd is better
than semiosis' apt-key add cmd?

Also the fact that the key hasn't actually changed since glusterfs-5 means,
among other things, you only need to change the
/etc/apt/sources.list.d/gluster.list and updates to -6 or -7 will just keep
working with the key you already imported.

As an example of why this is useful, Gluster 7 has been released since
my
> original mail, so now the key for LATEST is at
> https://download.gluster.org/pub/gluster/glusterfs/7/rsa.pub instead of
> https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub. Every time
> a new verison of Gluster is released the recipe for installing the latest
> Gluster client has to be updated.
>
I have the possibly mistaken impression that not everyone wants to always
use .../glusterfs/LATEST.  Some people want to install glusterfs-6 and stay
on -6, i.e. .../glusterfs/6/LATEST. And they'd be really upset if they came
in one morning to find that an automatic update (however good or bad an
idea that is) had updated them to glusterfs-7 when they weren't ready for
it. (And worse, if it broke their system.)

And apropos of nothing in particular, perhaps we should create a new key
for glusterfs-8 when that time comes; it's probably time.


> On Mon, Sep 9, 2019 at 11:42 PM Kaleb Keithley <kkeithle at
redhat.com>
> wrote:
>
>> Hi,
>>
>> What is the issue that this would solve?
>>
>> The Debian README.txt files and RPM repo files for 6.x all say the
>> rsa.pub is at
>> https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub and have
>> since day one.
>>
>> (Likewise the rsa.pub for 5.x is at
>> https://download.gluster.org/pub/gluster/glusterfs/5/rsa.pub)
>> <https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub>
>>
>>
>> On Mon, Sep 9, 2019 at 10:29 PM Shane St Savage <
>> shane at axiomdatascience.com> wrote:
>>
>>> Hello,
>>>
>>> Any chance of getting an rsa.pub available in
>>>
>>> https://download.gluster.org/pub/gluster/glusterfs/LATEST/
>>>
>>> at
>>>
>>> https://download.gluster.org/pub/gluster/glusterfs/LATEST/rsa.pub
>>>
>>> ?
>>>
>>> (in this case, it should be
>>> https://download.gluster.org/pub/gluster/glusterfs/6/rsa.pub).
>>>
>>> Thanks,
>>> Shane
>>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.gluster.org/pipermail/gluster-users/attachments/20191029/ea0fd59b/attachment.html>