ftp site

[nathan r. hruby]

On Wed, 5 Mar 2003, Chris Croome wrote:

> Hi
> 
> On Wed 05-Mar-2003 at 09:12:00AM -0500, nathan r. hruby wrote:
> > 
> > Also, the every 2 month survey just to get updates is a bit much -
> > espically when they could modify up2date to use a mirror site to
> > save their bandwidth and cut costs.
> 
> There is a lot of discussion on this here:
> 
>   Getting Red Hat Network support for free just got harder
>   http://newsforge.com/newsforge/03/03/03/138248.shtml
> 
> I think that some kind of P2P system is what we are going to need in
> the long run.
> 

Ick.  No.  p2p is nice, but unless you can ensure that the packages 
haven't been tampered with, I want my updates from an official (or 
at least "trusted") mirror or source.  Really, this isn't a hard thing to 
do.  Ximian's RedCarpet allows the use of mirror for downloading new 
updates and checks gpg sigs as well as md5sums for authenticity.  The 
control/update data comes directly from them, but the heavy packages 
don't.  It was always nice because in the time of @home 2 of their mirrors 
were less than 4 hops away :)

> I really hope that the things that RedHat are doing to make free
> updates harder for the less experienced users doesn't result in a
> lot of RH boxes running insecure versions in six months time and a
> worm rooting them all :-(
> 

No, this will make it harder, we're going to see a lot more open RHL boxes 
in about 6 months.  I already got my first survey-or-cancel notice.  You 
get about 7 days advance notice.

> A big thank you to YellowDog for using apt and mirrors and avoiding
> this whole mess :-) 
> 

Agreed.  3 Cheers for Dan and Kai, and an extra Cheer for yum!

-n
-- 
----------------------------------------
nathan hruby <nathan@drama.uga.edu>
computer services specialist
uga drama
http://www.drama.uga.edu/support/
----------------------------------------