maas-devel team mailing list archive

[Jeroen Vermeulen <jeroen.vermeulen@xxxxxxxxxxxxx>]

On 22/04/14 09:00, Jeroen Vermeulen wrote:

> 3. Having just a single global list of boot-resource keyrings, in
> pserv.yaml.
> 
> Why that last point? I hear you cry.
> 
> Laziness is one reason: why build UI fields per source, when keyrings
> are really just dicts of globally-identified keys anyway?  With small
> changes we can just pile a bunch of keyrings together and have
> Simplestreams dig up whatever keys it needs.  It'd work best with a
> supporting change in Simplestreams itself, but we can do it on our end.

Turns out #3 was not a great idea after all.  Scott points out that the
per-source keyrings serve not just for authentication, but for
authorisation as well.


Jeroen