Re: luau and 0export

>
> Well, it will cause some extra complexity. In particular, Zero Install
> feeds are signed, so you'll need to create a GPG key and sign the
> feeds. There are GUI and command-line tools to help with this, e.g.
>
>  http://0install.net/injector-packagers.html
>

A little extra complexity at my end would be fine.  I'm just trying to
prevent the end users from needing to do more than simply click on the
package file to initiate the installation.

Some aren't gonna bother installing ZI beforehand and others will elect to
download the source tarball if it's 100 KiB smaller than the package created
by ZI's '0export'.  I also enforce the standard installation prefix of
"/usr/", because one of my dependencies must be found and run by 'root'.
I'll also note that I've already built a basic auto-update notification
system into my applications.

Nonetheless, I'm impressed by ZI and I'll keep reading through its website
in the next few days.  For now though, I'm gonna hit the couch and watch the
cricket.

Does Autopackage/luau do any signature checking at the moment? I saw
> this from 2005:
>
> http://osdir.com/ml/autopackage.devel/2005-01/msg00185.html
>

I don't know much about this area, as I find the concept a little 'boring'.
I know that's probably not ideal coming from a software engineer, but I'm
quite sure that life will go on :-).