Date: Mon, 19 Nov 2012 19:04:45 -0800 From: Zach Leslie <xaque208@gmail.com> To: Adrian Chadd <adrian@freebsd.org> Cc: freebsd-security@freebsd.org, freebsd-hackers@freebsd.org, freebsd-hubs@freebsd.org, grarpamp <grarpamp@gmail.com>, freebsd-questions@freebsd.org Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] Message-ID: <20121120030445.GA38037@zjl.local> In-Reply-To: <CAJ-VmonryjAOW-Ty%2Bs3wj6BfWiQzxSL-waEYnQ5wLv4eFjQ_4Q@mail.gmail.com> References: <CAD2Ti29UoFcHendR8CcdQ4FPNW1HH0O47B1i3JW00Lke2m2POg@mail.gmail.com> <CAJ-VmonryjAOW-Ty%2Bs3wj6BfWiQzxSL-waEYnQ5wLv4eFjQ_4Q@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> There's a git repository. It's public. You can look at what goes into > the FreeBSD git clone to get your assurance that things aren't being > snuck in. People are using it, right now. I've always been confused by this. Which source repo is the true source of truth? To obtain the FreeBSD source, you can use CVS, SVN, or Git? Do all have the same level of support? Are they all up to date? > Honestly, I'd rather see subversion grow this kind of cryptographic > signing of each commit in the short term then migrate everyone over to > git. How much effor would their really be involved, considering your link to the FreeBSD source repo on github. Converting the repos to me seems like it would be the bulk of it, and that work is already done. Help me understand please. Also, local branching and merging is amazing. -- Zach
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20121120030445.GA38037>