Re: enable XZ to compress updates?

Olaf Westrik <weizen_42-Yz37vSk3/[email protected]>
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <[email protected]>
Hello Gilles,


> That could only be done in two steps.
> First, add xz in installed files, then compress next update with xz

OK for that.


> Uncompressing kernel modules before tar.xz creation allow a better
> compression.
> I add before tar.xz creation
>   -find /tmp/lib/modules -name *.ko.gz -exec gzip -d {} \;
>
> and this result to
> ls -s1 ipcop-1.9.19-update.i486.tgz
> 8548 ipcop-1.9.19-update.i486.tgz
>
> Of course, we would need the reverse after installation to not require more
> space on disk, and that will cost another bit of time.
> find /lib/modules/ -name '*.ko' -a -type f -exec gzip -nf9 {} \;

I don't like that.
I would very much prefer to leave files 'as-is' after building, so one 
day we can post file hashes (md5, sha1) of all IPCop files and people 
could then (automatically) compare their installation.
That would be an easy system to detect tampering (unlikely) or disk 
trouble (more likely).

Surely recompression should give the same result, but I think it too 
much trouble with small advantage.


Olaf

------------------------------------------------------------------------------
The modern datacenter depends on network connectivity to access resources
and provide services. The best practices for maximizing a physical server's
connectivity to a physical network are well understood - see how these
rules translate into the virtual world? 
http://p.sf.net/sfu/oracle-sfdevnlfb
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.