Update. I've just released rc5 with all the recent bugfixes, a bit of code cleanup. It stops short of the initial gpg signed repositories.xml list support that is included in layman-9999 which I also released today.
For those that wish to test run the gpg-signed list. There are some non-updated lists floating around for initial testing. But they should not be used for production. I have uploaded a layman-test.cfg to my dev space. There is also a couple gpg-signed lists, one with a detached signature (the repositories.xml file is untouched) and a compressed, signed file which is only 13% the size. layman is capable of both types, but the detached sig type is what is destined for the main gentoo repositories list. That way older layman versions will just need the url to to be updated to the new location.
Just edit the layman-test.cfg and edit the storage location to a test directory you desire (no need to be root user) then run layman with the -c, --config option to use your layman-test.cfg. To verify the list signature you will need to manually add my gpg signature to your gpg keyring. public key id: 014F17CB
At present there are only 2 bugs left to fix.
- 1) an svn-upgrade needed detection and automatic run
2) complete the gpg signed list feature.
- a) add a layman gnupg keyring.
b) add some tools to layman-updater for managing the keyring.
Currently gpg must be run manually & there is not a layman-only keyring to use.
c) Wait for the repositories.xml list url move to distfiles.gentoo.org and the
detached-signature file generation to be automated. (should be by Dec. 2012)